
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
File: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json)
Hash identifier: 4jfns2XI+ZWmdtrsDC0hQcSGlexK22xZShc/STxmB80=
Subject key identifier: C3:8D:A1:57:3A:A5:4D:92:CC:4E:BE:CE:E5:DC:8D:1B:D9:8B:92:B6
Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
Certificate issuer: /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
Manifest number: 06F3
Signing time: Tue 12 May 2026 22:11:43 +0000
Manifest this update: Tue 12 May 2026 22:11:42 +0000
Manifest next update: Tue 19 May 2026 22:11:42 +0000
Files and hashes: 1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: SNakPPyGawePvBQgmGdN1RtxvNO8sn9XXnBF40E0z1g=)
2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: nsJSzWqOY4l45BXntnb8T0tUe0eX90nNxJIEP0+BTvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Validity
Not Before: May 12 22:11:42 2026 GMT
Not After : May 19 22:11:42 2026 GMT
Subject: CN=6a03a59f-b31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:f2:f7:c9:76:1a:50:18:fb:27:0a:a8:a7:
a9:88:cd:56:32:af:0d:1a:02:eb:27:50:80:ac:2c:
be:1c:4f:e5:92:29:8a:39:88:bf:74:9e:c3:bb:28:
e6:35:ca:c2:e9:d3:67:9c:6e:39:61:93:9d:77:7f:
4c:36:37:3c:4b:1a:d3:58:5d:e1:43:eb:f4:5e:0e:
0e:28:e8:98:98:9c:3d:55:40:63:bb:ec:77:eb:03:
ff:23:66:46:0d:01:e6:27:32:92:a2:7f:b0:ae:4e:
c0:e5:5a:36:7a:b3:89:0d:97:dd:3a:77:05:96:60:
73:5e:6d:d6:6d:5f:cd:dc:d2:51:2f:15:e3:10:2d:
3a:8c:54:3a:37:a2:0f:06:75:16:0c:61:b8:46:9c:
85:a1:fa:1e:c1:15:05:5a:3e:99:32:d8:74:91:89:
d8:7f:bb:a5:a9:bc:b3:8a:be:23:8e:b4:4a:ab:f6:
3a:5c:f9:12:74:66:9e:ac:d2:8f:98:c4:b0:62:b2:
82:83:7c:5a:a2:93:cb:71:e1:0c:ad:e4:46:5f:8a:
a7:ec:b4:e8:d8:96:0f:22:54:6c:66:eb:04:84:39:
2d:09:93:1e:90:33:67:e6:4f:51:a5:75:d6:71:d8:
a8:a8:5d:72:73:c9:0b:36:60:7e:0f:82:fe:73:ec:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8D:A1:57:3A:A5:4D:92:CC:4E:BE:CE:E5:DC:8D:1B:D9:8B:92:B6
X509v3 Authority Key Identifier:
keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:b2:79:10:ab:1a:92:4a:32:cc:54:e6:e6:ba:e6:44:71:
69:79:9a:18:98:29:57:3b:aa:af:dc:bd:32:4c:36:ef:42:19:
0b:8e:23:63:51:2d:3a:88:50:07:7f:35:13:2d:e8:cc:a2:56:
ad:f9:93:de:59:4d:c9:0f:64:4e:d4:c3:e8:e7:ae:96:83:1e:
ca:21:f1:c7:a4:f0:39:2b:88:b2:a4:07:03:24:bc:e5:aa:85:
b1:b1:14:1b:ec:99:89:31:78:71:d6:a4:86:fc:45:70:48:36:
0b:a5:58:d4:2b:18:1b:19:2e:01:15:a6:6e:ee:0e:1f:fe:52:
b6:33:57:58:e4:4c:c1:5b:01:87:4a:8d:45:9b:77:db:4a:8e:
a1:25:f2:9c:63:de:a8:01:2a:6e:0a:cd:f5:90:35:91:93:66:
b8:94:35:e6:d5:72:3d:46:d1:99:87:e7:63:2a:87:a2:85:cd:
de:94:bf:73:79:7f:db:38:cd:63:e8:ec:53:f1:69:0d:a0:ba:
5d:02:d5:22:da:17:a4:20:a6:19:23:51:71:41:3a:55:d0:32:
0b:8d:be:9c:25:69:3a:ae:ce:1e:e7:9f:60:f6:3e:d7:3b:3e:
1c:7f:43:ca:ab:52:02:c8:d0:3c:3a:d2:8b:6d:1b:41:0d:a9:
cb:69:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:47 2026 by rpki-client