
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
File: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft (raw, json)
Hash identifier: gMkm/E3CV0XFpgcM/HfIFVrAA5Hrkp0AyoXdg5nWTQs=
Subject key identifier: 50:68:69:46:B4:9D:53:91:4B:0A:12:10:39:9B:FC:E5:E4:31:9C:C9
Authority key identifier: 06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
Certificate issuer: /CN=A919AFBE/serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
Manifest number: A9
Signing time: Wed 23 Sep 2026 06:55:36 +0000
Manifest this update: Wed 23 Sep 2026 06:55:35 +0000
Manifest next update: Wed 30 Sep 2026 06:55:35 +0000
Files and hashes: 1: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl (hash: ojdie6duKe9264D0sOiUELqeD1oe1LXidLHsGKDZSjo=)
2: B3DDEA88828A11F1AF550BB764A30FBC.roa (hash: lF8LdyJYxdygPDY/iay/bIGZwwTX+1F7bIj3qljxFr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Validity
Not Before: Sep 23 06:55:35 2026 GMT
Not After : Sep 30 06:55:35 2026 GMT
Subject: CN=6ab377e8-4c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:49:e1:ae:73:16:40:ba:cd:64:07:13:72:
28:67:e8:b2:6a:e3:c0:45:e0:0a:fd:7c:02:e4:7a:
f2:86:7c:cd:dc:ab:3b:43:2c:b1:7e:d2:1b:76:80:
99:26:be:68:2a:78:9c:39:aa:20:ac:bc:1a:c3:ec:
f6:81:45:e3:20:44:c8:8f:56:d0:82:49:57:e9:2c:
f7:61:a6:a9:7b:3f:16:fa:d9:6d:17:8e:4a:a4:01:
cc:a9:c2:4e:6a:0c:ea:fe:47:f8:2c:b4:63:0a:e0:
77:62:a5:b6:04:25:20:09:23:6b:96:70:0a:e0:0d:
4f:7b:72:bd:2f:12:c1:a0:01:4e:6f:57:29:79:a9:
3c:b3:d9:b4:2f:b3:4b:b9:b3:35:45:e6:00:d9:80:
d4:39:ef:28:ea:19:54:4b:91:c7:21:f2:a6:fa:73:
e1:1b:2c:05:c1:e5:94:c4:ad:0d:aa:69:cc:0c:d6:
86:47:50:ef:f4:68:94:e2:02:84:f7:e2:8e:28:04:
fb:d7:b3:98:a3:f9:64:0d:bd:77:1c:c3:69:64:15:
8d:3a:2a:2b:02:7d:53:fc:6a:9f:b5:6c:2b:d9:cb:
00:da:6c:68:fb:96:e2:fb:b6:40:ef:40:b4:19:d0:
e7:a2:a8:5a:19:16:83:15:60:2a:a3:34:25:45:a0:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:69:46:B4:9D:53:91:4B:0A:12:10:39:9B:FC:E5:E4:31:9C:C9
X509v3 Authority Key Identifier:
keyid:06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:94:65:8f:e9:a4:ba:eb:f6:fc:2f:06:dd:cb:4b:6b:cd:
e5:cb:8e:85:21:cc:96:0e:fc:17:95:f3:10:55:7a:63:d3:47:
7d:51:7a:ae:bf:d8:82:a6:58:a4:c2:2e:6e:65:5b:f1:f9:7c:
bc:b2:df:0d:3e:0e:8e:ea:c5:62:2c:ea:fe:86:ef:fd:2e:69:
0b:94:38:0a:d7:3c:98:5b:28:ed:cd:17:41:67:97:93:d2:f3:
2c:10:cb:4c:5d:2b:e8:1a:4e:2b:33:69:16:4e:04:f5:92:ef:
a3:e7:96:cf:d0:c9:23:31:f0:cd:9b:82:b4:0d:a6:50:f2:13:
83:f2:c0:8d:fe:16:08:6a:ea:f0:27:5f:0a:d8:d6:07:8d:ef:
c6:04:e6:8a:97:fa:e0:af:30:a9:f6:e3:ae:75:9d:fd:62:1a:
95:be:16:57:27:60:37:4f:ca:0a:65:e3:aa:cb:4a:3b:9a:81:
3d:48:86:89:62:5d:73:b2:e2:7a:3c:34:69:6e:70:f2:82:45:
8f:d3:4a:67:63:ed:3e:11:24:ef:c2:d1:3c:04:10:a7:e6:b2:
18:d4:49:b5:ad:a4:39:7b:79:86:8d:56:7e:b0:1c:45:93:aa:
14:d4:a9:b4:00:22:d9:e4:02:cf:06:78:68:62:e7:14:af:9b:
3f:c0:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:17:02 2026 by rpki-client