
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier: sHY9Azl056ZrQaD92b9EorLRW7unwtYDX6+5XsVNhXg=
Subject key identifier: F5:AC:57:60:76:99:7C:20:D0:2E:80:5F:36:68:4C:6B:19:54:60:09
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number: 01F3
Signing time: Mon 11 May 2026 03:18:59 +0000
Manifest this update: Mon 11 May 2026 03:18:59 +0000
Manifest next update: Mon 18 May 2026 03:18:59 +0000
Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: ozLnw0vP21axkFERE9wA0EEOmaSnH25WBz3b0yRD01s=)
2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Validity
Not Before: May 11 03:18:59 2026 GMT
Not After : May 18 03:18:59 2026 GMT
Subject: CN=6a014aa3-44fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:b9:2f:d7:0e:98:e8:59:50:14:ec:1e:1c:
dc:75:9f:cb:77:53:df:69:48:e5:9c:3d:d6:d8:60:
09:8b:28:d8:4f:3b:10:d6:4c:77:3e:0c:17:91:6a:
98:05:33:9a:f0:a9:4b:0a:7f:c9:bf:8d:41:33:dd:
62:1e:53:13:dd:d3:c0:33:34:77:a9:56:7e:68:50:
e9:ae:70:bc:3a:f3:a9:c5:f7:32:05:84:7c:a8:17:
fe:ec:95:0b:a2:69:4e:19:c6:83:ed:8a:90:e3:c0:
ab:03:b5:d1:1d:3a:33:e3:65:53:f5:8e:8e:2b:bb:
a7:9c:b8:f6:cf:41:2f:4a:df:33:c4:1b:45:ca:5d:
bd:bd:7e:54:1d:53:c7:f3:8f:48:77:f3:5c:02:ef:
be:02:de:1f:46:49:14:6a:27:4a:a1:32:23:63:0a:
72:b7:c6:e9:09:6e:15:29:78:22:7d:71:3c:bc:f3:
b8:bb:29:d7:77:13:9a:50:ac:b9:05:ce:17:64:2b:
69:d1:b0:82:06:ab:5f:8f:b5:51:ff:9e:8c:40:c3:
32:cc:f2:26:29:1b:1f:3c:be:77:fd:23:a4:94:fc:
73:13:dc:a7:ae:6c:87:86:e8:14:a2:40:fa:08:da:
13:23:e2:b9:fe:ed:20:9c:39:04:bc:82:a9:54:5e:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:57:60:76:99:7C:20:D0:2E:80:5F:36:68:4C:6B:19:54:60:09
X509v3 Authority Key Identifier:
keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:12:10:b0:18:d2:9f:7b:bc:bb:e1:9b:46:23:11:0a:03:85:
ed:1f:04:29:55:ca:60:71:91:08:ff:78:76:81:18:62:9b:17:
a8:a4:d2:a4:10:43:92:e5:b6:49:38:00:bd:8d:70:14:8c:af:
d7:f3:07:30:30:63:18:4e:e3:73:85:b9:9f:21:45:77:32:97:
db:dd:05:2b:11:39:3e:54:63:98:77:07:a4:d8:14:9e:5b:36:
50:e3:70:13:33:7e:fe:50:d0:48:2e:0a:b3:25:87:f5:dc:9e:
28:a3:42:9c:58:61:5e:a3:7e:47:45:9c:f7:f9:d4:5d:a1:ca:
b7:bf:8f:e3:45:2a:20:6a:03:c3:24:c0:ba:95:55:53:4e:e5:
46:ce:45:a7:b8:be:06:89:12:38:24:e2:e5:26:94:e5:0c:90:
53:9f:e6:1a:a2:2c:89:84:f3:a4:ee:47:5f:02:19:39:13:d8:
83:8a:8e:7e:5f:5f:3c:c9:1c:a8:b9:68:77:43:47:82:10:24:
83:46:60:6e:12:f1:ea:ca:36:cc:c8:fd:e3:12:7a:47:29:f2:
a0:df:4b:1c:82:ac:dd:c1:46:eb:cd:d8:25:90:f9:9c:21:b3:
31:e9:86:d6:4a:d2:0e:f2:dd:03:e0:99:f0:9e:8b:58:df:98:
e4:87:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:43:49 2026 by rpki-client