
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json)
Hash identifier: iIjPn88zob57WIHpNdFrvhT5yeTx4YW3F1NjTbZ0R40=
Subject key identifier: E9:44:14:71:AE:E7:F0:ED:11:12:73:23:68:EF:A7:96:20:82:BF:25
Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
Manifest number: 0190
Signing time: Wed 25 Mar 2026 00:37:33 +0000
Manifest this update: Wed 25 Mar 2026 00:37:33 +0000
Manifest next update: Wed 01 Apr 2026 00:37:33 +0000
Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: hc5L80hnxogOraRqL2eXvXM6q6audIBXMHPb5jHyehI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Validity
Not Before: Mar 25 00:37:33 2026 GMT
Not After : Apr 1 00:37:33 2026 GMT
Subject: CN=69c32e4d-ecc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:07:fb:6c:57:43:a1:0a:28:5c:6c:cd:60:
28:36:9a:39:f4:f4:d0:f3:66:d2:17:b9:6f:40:cf:
f4:34:90:12:16:9c:6c:32:4e:9e:4e:4a:57:b7:cc:
55:3f:fb:65:a1:a7:c7:97:3f:db:de:f0:3f:f2:ce:
65:fb:9e:df:78:cc:71:b2:1b:b8:f7:68:8a:ae:f0:
c0:e6:20:33:32:31:e5:ca:fd:ff:e2:1c:50:22:49:
61:88:b2:d7:c6:b8:88:71:ca:bc:62:cf:a7:c1:3e:
19:b3:72:4b:05:a1:f7:eb:22:77:ee:d1:78:30:2e:
36:d4:f6:b3:35:0f:8f:f5:6f:4e:8d:ec:f3:7b:68:
d2:ef:d5:35:8c:70:93:d2:3c:57:cd:03:bc:a7:19:
3b:b7:64:c3:7c:24:a0:7d:16:7e:05:b9:04:44:53:
c3:58:3e:4a:a4:64:b4:80:10:f4:8d:09:fb:47:3f:
63:c2:b8:53:83:7b:df:07:ed:6a:22:5b:73:81:a5:
0a:a2:3a:22:59:36:9a:8c:61:b0:3b:8f:c5:3a:dc:
65:0f:b9:a5:0e:0f:6c:aa:ea:01:45:b7:c4:67:ee:
0c:02:8a:35:41:da:8c:32:ad:a9:65:88:bd:69:df:
9d:5f:82:d6:a6:d4:e6:8a:8d:cb:81:b3:08:7a:4f:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:44:14:71:AE:E7:F0:ED:11:12:73:23:68:EF:A7:96:20:82:BF:25
X509v3 Authority Key Identifier:
keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:a9:69:c6:9a:9c:e3:85:97:18:5e:54:a0:84:d0:4c:cc:d1:
0f:5c:a7:c4:76:71:90:92:f9:e4:87:b4:49:c4:20:56:7d:c3:
71:2f:ce:6e:f2:c2:23:a2:99:f6:27:7c:3f:fa:65:9a:99:62:
56:b2:d9:b8:fd:32:c6:f3:4f:31:20:b1:92:aa:f6:9f:a7:c9:
3d:a8:71:84:55:cf:43:6d:9e:d3:5f:6c:35:bb:1c:a7:54:43:
be:d1:10:bb:28:9c:a9:92:f9:70:bb:89:51:3b:9a:7d:6a:0e:
c7:c9:83:d4:36:0f:30:00:1a:82:4e:f8:4c:99:04:69:c2:d1:
ca:15:75:9f:a4:f5:90:87:6d:d0:d7:0f:bc:1d:0c:ad:e0:04:
ca:11:53:04:23:54:e7:40:9b:ff:f9:b9:34:12:e3:77:e9:e0:
d2:7b:bd:db:32:86:07:e8:06:37:f1:a9:1a:34:f3:72:98:71:
a2:4a:e4:75:a5:04:a9:8e:e2:32:fe:2b:32:98:d2:df:00:5b:
4f:4b:cf:ae:2a:9f:4c:dc:f6:22:50:dc:e7:d2:02:6e:e9:50:
ae:07:88:5b:b7:67:fa:76:2d:c6:3f:b7:96:09:60:42:ce:8d:
1f:0a:05:e0:3b:a3:95:7f:b2:34:37:0b:41:a3:a5:77:ae:ea:
43:2e:8a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:34 2026 by rpki-client