
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json)
Hash identifier: J6cNZKSs+BQSQRQkzPe8kc62KYsT/DOasx8/wSncw2A=
Subject key identifier: 04:49:F5:CB:77:5C:BA:C7:48:EB:7B:5D:15:22:B0:C8:CE:15:D8:9A
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0DBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
Manifest number: 0D77
Signing time: Thu 24 Sep 2026 18:07:34 +0000
Manifest this update: Thu 24 Sep 2026 18:07:33 +0000
Manifest next update: Thu 01 Oct 2026 18:07:33 +0000
Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: Pjya54ZbrAJWup6T31DykLpcc/dStxNUdqermRA7AUw=)
2: lhlS5_TEJHo3UVrOxBep1TpMUiA.asa (hash: LeBm2quaHok7A5PLZUmdjey6RQlm/dDEh2VyeIlI3tQ=)
3: 1Tpg7YzcQziHe-csGNB6dRnrmak.asa (hash: sbQuTo/lyfQ4HCZCJQERF/0zsihc9Q3a5ZscI3SwxpQ=)
4: ZalB4shFIqzfzkOMiSb08RSiuXk.asa (hash: PYxtm7mxeSPHemXsmYgJ5cLgPaxbB7guU5ug9r5jFKg=)
5: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: xoY8l/E5wRhZGsHx91C6s9eN6yf4aMdTOO06Om2k+GE=)
6: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: lszQ8yUB/N2uYLH7nBTD6MNw6FLEt393aCgDSU4ngis=)
7: 61865C96599711F1904BB35BB3833773.roa (hash: gDZJAF+J4vmJUn7JgYk0JFg5PWvXINC2m+mUpnyhSCE=)
8: 12561046368911EEA0CB766BC4F9AE02.roa (hash: YI5D+P7yiPBL/gfzmw4F23rfItyHBBhKoDb4UnkvvPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3517 (0xdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: Sep 24 18:07:33 2026 GMT
Not After : Oct 1 18:07:33 2026 GMT
Subject: CN=6ab566e6-0932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:76:13:aa:20:76:9a:4c:f8:e6:6a:8b:ca:
51:69:e8:9e:9c:95:7c:14:31:ad:9d:66:5c:87:e8:
63:93:4c:3d:33:c2:47:c6:83:a0:74:1f:fa:c3:83:
22:4e:aa:89:17:86:ed:05:28:8a:5c:e2:2d:26:48:
34:4f:9a:4e:ea:7b:3f:26:16:7e:01:ac:18:0f:a7:
73:07:e6:5a:fe:a0:b9:bb:95:f5:84:2a:2a:de:d2:
3e:eb:15:04:5a:79:d5:e9:c7:0c:05:14:f0:67:11:
56:2a:cc:5f:48:d0:68:c7:19:ea:19:88:6e:64:c6:
f9:4e:38:50:f4:ec:b4:b2:45:c1:c3:fc:48:b7:33:
0d:3b:e9:9b:13:fb:b1:20:99:7c:81:22:d7:73:c5:
2a:b5:0e:58:2c:22:1d:ee:89:82:c3:73:6e:c7:ea:
77:82:cf:80:16:45:75:74:de:40:3f:fb:48:9d:41:
2d:d4:6f:ad:e3:3b:eb:c6:9a:0a:92:92:4a:9d:f4:
d9:ae:6e:58:8f:46:a5:08:42:1c:8f:ca:9f:0e:d6:
7e:3b:f0:a8:df:d0:85:16:f2:0f:78:5a:bf:18:21:
73:96:2c:49:93:70:a4:3d:76:13:ea:7e:f3:68:d1:
b9:48:eb:c8:9b:80:03:e3:9d:ec:bf:03:46:62:a1:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:49:F5:CB:77:5C:BA:C7:48:EB:7B:5D:15:22:B0:C8:CE:15:D8:9A
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:fe:68:68:5b:43:12:a9:4d:f2:4c:c5:8b:5a:bc:15:d2:57:
cf:47:df:57:f2:c8:0f:f7:85:de:39:fc:59:f8:cf:5c:8a:dd:
be:b5:56:a1:dd:d8:5e:24:10:01:24:7b:8c:f0:d8:d6:81:d5:
71:b7:9c:89:92:3d:3b:f1:6e:7f:cb:89:41:7a:a4:b1:8c:e4:
c3:3c:58:1b:71:fb:ed:04:02:30:23:e3:e8:2b:29:d0:1c:63:
22:1b:c2:92:8a:06:37:f8:70:df:8c:3a:bf:d9:58:07:5b:55:
74:b5:33:63:d5:c8:54:48:5b:bd:1f:24:00:24:4f:9b:1b:f9:
27:55:f8:17:ac:3d:57:3d:f9:7c:6c:6c:ca:5a:4f:63:bd:b8:
30:71:41:b5:c8:6e:cc:ad:2b:2e:2d:32:10:13:6e:54:88:13:
6e:c3:e9:e5:88:58:32:ef:f6:70:52:60:b7:4a:86:5f:15:9b:
c6:54:0d:17:aa:53:df:18:01:90:e2:0f:46:10:81:70:45:ba:
c3:97:4b:3e:43:6c:f8:78:20:54:39:c7:2a:46:fd:81:42:d0:
4c:52:03:6e:3d:7a:74:79:77:11:b7:9b:21:a3:8b:b9:62:d9:
9c:a8:8b:e4:9b:82:1e:77:f4:a1:3b:64:85:55:66:04:d7:9c:
fa:c9:cd:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB
NUYwN0Q3N0EwHhcNMjYwOTI0MTgwNzMzWhcNMjYxMDAxMTgwNzMzWjAYMRYwFAYD
VQQDEw02YWI1NjZlNi0wOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxv12E6ogdppM+OZqi8pRaeienJV8FDGtnWZch+hjk0w9M8JHxoOgdB/6w4Mi
TqqJF4btBSiKXOItJkg0T5pO6ns/JhZ+AawYD6dzB+Za/qC5u5X1hCoq3tI+6xUE
WnnV6ccMBRTwZxFWKsxfSNBoxxnqGYhuZMb5TjhQ9Oy0skXBw/xItzMNO+mbE/ux
IJl8gSLXc8UqtQ5YLCId7omCw3Nux+p3gs+AFkV1dN5AP/tInUEt1G+t4zvrxpoK
kpJKnfTZrm5Yj0alCEIcj8qfDtZ+O/Co39CFFvIPeFq/GCFzlixJk3CkPXYT6n7z
aNG5SOvIm4AD453svwNGYqFhxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARJ9ct3
XLrHSOt7XRUisMjOFdiaMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1
QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt
Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYP5oaFtDEqlN8kzFi1q8FdJXz0ffV/LID/eF3jn8WfjPXIrdvrVWod3YXiQQ
ASR7jPDY1oHVcbeciZI9O/Fuf8uJQXqksYzkwzxYG3H77QQCMCPj6Csp0BxjIhvC
kooGN/hw34w6v9lYB1tVdLUzY9XIVEhbvR8kACRPmxv5J1X4F6w9Vz35fGxsylpP
Y724MHFBtchuzK0rLi0yEBNuVIgTbsPp5YhYMu/2cFJgt0qGXxWbxlQNF6pT3xgB
kOIPRhCBcEW6w5dLPkNs+HggVDnHKkb9gULQTFIDbj16dHl3EbebIaOLuWLZnKiL
5JuCHnf0oTtkhVVmBNec+snN3Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:49:29 2026 by rpki-client