
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File: BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier: BKjYZb3Xzv3qKpJHBgHlwOzCBCCs/SdDnHW//dM4X0U=
Subject key identifier: 5D:77:DC:19:2E:FA:BE:72:C7:93:57:11:33:99:2C:96:15:D7:F4:A8
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer: /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number: 2D
Signing time: Mon 11 May 2026 06:29:10 +0000
Manifest this update: Mon 11 May 2026 06:29:10 +0000
Manifest next update: Mon 18 May 2026 06:29:10 +0000
Files and hashes: 1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: MFMigmfoG90J3evcQj7O2oYBEyARVHMYW71fQR2as2o=)
2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Validity
Not Before: May 11 06:29:10 2026 GMT
Not After : May 18 06:29:10 2026 GMT
Subject: CN=6a017736-d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:f9:19:ed:2e:2d:7b:19:8a:d0:9b:6c:70:
b1:f0:ce:26:96:d9:60:80:81:93:f5:91:ac:64:13:
d2:5d:f1:0b:15:1b:6d:d0:f7:76:9e:d9:0f:63:6e:
f1:69:a4:8b:16:16:78:fc:ea:8c:7e:44:76:7c:18:
28:4b:00:53:1f:7f:e2:5c:6c:8d:9e:82:f0:f8:47:
11:e9:48:51:ac:ee:1c:e4:65:19:67:0a:15:12:13:
dd:03:86:f9:d0:6d:7b:bf:67:3d:fd:b1:da:0a:d2:
b2:02:63:3e:f6:fb:1b:80:44:cc:e1:5d:0b:54:1a:
71:9b:a4:42:30:b2:27:e4:8d:05:e3:92:e0:27:b6:
20:ac:22:0d:54:f2:95:8d:6b:4e:27:23:e6:82:d1:
8b:06:77:cd:4d:6a:72:50:43:7d:9b:36:42:87:ce:
68:c7:8d:7e:26:8a:5f:37:60:94:13:70:ae:58:7c:
c3:f3:aa:a2:70:6d:76:c4:b6:94:d5:0f:cb:06:50:
7a:ee:fd:07:fc:56:8b:a9:ce:cd:fd:79:77:06:d8:
cb:d9:0b:ee:22:66:e6:e7:3e:f6:6d:de:27:b0:4b:
c5:68:7e:db:79:e3:a7:04:a0:f9:a9:a3:66:15:c8:
33:6b:0f:13:65:a4:df:b7:94:98:1f:ca:b3:c6:04:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:DC:19:2E:FA:BE:72:C7:93:57:11:33:99:2C:96:15:D7:F4:A8
X509v3 Authority Key Identifier:
keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d2:01:82:ca:6c:4d:e3:73:8c:b9:be:4f:fd:c0:9c:9c:4e:
90:63:d6:e5:b7:e2:91:97:d5:6d:ae:93:97:66:2c:e8:f8:91:
33:60:81:e2:26:24:ac:22:81:ea:08:f4:81:13:d9:ba:8a:7b:
96:ab:af:36:13:73:2d:c0:83:da:7f:1a:dc:24:41:0c:5f:c6:
ee:b3:ed:e3:7a:25:74:8e:c4:f9:cd:0d:99:23:c9:66:a1:f0:
61:87:3c:ac:82:ff:36:b5:75:02:19:5e:bb:f8:6b:8c:ca:4e:
19:e6:79:dd:78:e0:70:47:fe:8e:1a:ba:67:86:97:86:35:85:
d1:d3:90:84:e4:41:0a:6a:e6:a9:62:cd:0d:9a:08:43:a5:9f:
cb:2f:79:a5:c1:52:1d:ca:13:a6:48:96:e1:1b:b6:52:af:84:
65:2d:67:5d:a9:8b:ae:98:97:7d:b6:67:2c:46:95:87:96:d2:
bb:b6:63:ba:d2:2d:d8:0c:bb:c8:d3:77:2d:db:20:6c:f3:70:
85:f8:2e:ac:66:2f:76:e4:37:7e:a1:e2:39:74:91:5b:6d:7e:
b6:4d:e0:a1:24:23:27:7f:fe:95:1b:f0:44:40:ad:56:d7:a7:
c5:15:83:63:09:43:1c:a2:91:42:a0:7a:81:34:89:8a:53:26:
5b:d6:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:56 2026 by rpki-client