
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier: qGB59/kco+FOR8impndRwMdkxA+PIVbcLmF7JKzV6h0=
Subject key identifier: 7C:05:0E:65:E1:7F:CB:A1:E9:B0:44:E4:5A:EB:ED:79:CE:57:9C:45
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number: 0217
Signing time: Thu 23 Jul 2026 04:11:52 +0000
Manifest this update: Thu 23 Jul 2026 04:11:52 +0000
Manifest next update: Thu 30 Jul 2026 04:11:52 +0000
Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: SP8ixhvCx8/f4qf9D0/BrMFrfAJ3dRm9gI+iDeracao=)
2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Validity
Not Before: Jul 23 04:11:52 2026 GMT
Not After : Jul 30 04:11:52 2026 GMT
Subject: CN=6a619488-a99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:49:65:2c:17:cc:aa:90:d4:2c:06:37:06:
49:c1:85:6c:38:bf:2b:c9:66:8b:40:31:a4:30:aa:
86:2e:4c:24:23:f8:52:b5:7b:0d:11:a5:f4:74:58:
e3:62:65:c3:23:0e:63:2d:4d:76:3c:cb:b8:17:7c:
cd:bc:54:78:cf:b1:52:73:aa:51:4b:66:09:8e:1f:
ca:e5:c1:1e:ef:8d:3e:5b:be:e8:fb:2c:3a:a0:7d:
6b:d2:c8:5f:8c:d0:85:b4:f7:d7:6b:32:bf:10:eb:
9f:3c:be:71:8c:d0:17:cf:5d:e1:b5:9a:c3:bd:86:
49:ce:7e:ff:2a:dd:dd:80:cf:81:f7:19:55:62:43:
cb:e0:e5:6c:50:63:6e:14:11:f5:14:a0:92:4a:c8:
a1:72:75:a7:3c:14:21:30:12:8d:ab:fc:ce:6c:3f:
bf:50:48:eb:0e:41:09:1d:15:97:4a:00:fc:b8:f2:
ec:b0:1b:ce:fa:02:c6:db:c7:84:2b:9d:ce:e6:5a:
89:35:34:e2:0e:e3:48:e0:f2:c3:d9:e0:ae:85:5c:
3f:ea:da:9b:bf:ab:ee:88:86:1f:f7:a6:01:b6:9b:
a3:e5:ff:16:1b:d7:20:e1:b7:0a:5d:08:9e:91:b2:
b3:fa:33:03:74:7b:44:a1:e3:32:dc:0f:59:d8:f0:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:05:0E:65:E1:7F:CB:A1:E9:B0:44:E4:5A:EB:ED:79:CE:57:9C:45
X509v3 Authority Key Identifier:
keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ed:66:96:7f:ba:e6:e5:51:97:0e:1d:41:24:6d:3a:86:66:
fa:9c:60:dd:7b:9d:9c:5f:cd:81:a8:5e:b2:95:b1:a7:9c:89:
d4:57:ba:8c:e7:3e:b9:4e:ee:88:76:66:5d:8f:30:32:a7:42:
c8:22:f3:cb:04:b8:31:19:d5:dd:eb:03:ba:3b:ff:22:3d:49:
e1:eb:9d:4f:0c:b2:6e:62:0f:63:79:d4:f5:12:85:7d:3a:d0:
4f:72:c4:75:69:96:4c:52:fb:d6:74:c4:b7:da:f6:6b:41:d3:
07:cf:13:db:20:09:b8:ab:d7:8d:57:06:d9:a0:61:b8:2a:a6:
9a:c7:aa:ee:fd:43:cc:ed:19:c2:df:97:e9:23:e8:b3:34:ce:
bf:5e:2f:85:69:fc:ff:ac:4b:88:a4:d8:f4:6e:ff:6a:e2:f9:
0a:d1:a0:5b:49:01:f4:cd:79:02:8c:0b:dc:be:b8:c5:76:3f:
f6:a4:68:75:c3:b1:0f:f0:a6:39:08:a4:84:be:36:78:8f:bf:
e1:a0:46:12:73:e7:c7:33:bc:41:29:c9:e6:25:b2:3b:1b:ec:
1e:8f:78:23:9f:ce:59:72:bf:71:ad:b2:1b:b9:bf:03:27:bc:
7a:52:4a:42:c6:71:0e:b5:4f:8a:af:59:7e:4d:a8:4f:0d:9f:
65:fa:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:30 2026 by rpki-client