
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File: bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier: FSCCNBRVDdxSmUtU5HNydyniAu0o903XiUH/hpeFBvY=
Subject key identifier: 7F:D2:47:B5:A6:C2:B1:B4:BB:87:D9:89:F9:40:F7:42:2D:94:10:2B
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial: 1010
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number: 1005
Signing time: Wed 22 Jul 2026 17:37:32 +0000
Manifest this update: Wed 22 Jul 2026 17:37:32 +0000
Manifest next update: Wed 29 Jul 2026 17:37:32 +0000
Files and hashes: 1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: IufYjncHsgFPSc+X52nbY7iRtBaxUK0MZzxBDcnJHNo=)
2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: +Mts4fsvfNPpR9wN95HnMuPMq0NdCSXUy9GV9X1mECY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4112 (0x1010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Validity
Not Before: Jul 22 17:37:32 2026 GMT
Not After : Jul 29 17:37:32 2026 GMT
Subject: CN=6a60ffdc-b9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:98:b0:56:65:81:e0:1a:de:92:3f:21:af:e7:
1c:8c:69:fa:0e:2f:32:b1:68:84:ea:e9:00:5a:9f:
10:6f:b0:c1:c3:8b:5b:e6:43:64:8e:6c:0d:3e:38:
43:4f:5b:c7:b3:35:f2:d1:be:c9:51:e4:23:8e:5a:
c8:3d:6a:be:cf:66:58:b7:a0:3a:97:41:ac:06:58:
46:4f:d7:fb:19:40:28:42:42:c9:b1:97:26:2a:fe:
bb:1d:6a:6c:18:32:fe:4d:40:4c:83:c1:a8:d8:ae:
00:f2:53:49:dc:fc:05:9c:d8:ec:b1:0a:32:0e:ba:
94:4f:92:98:84:c3:f2:81:f7:72:f9:a3:3d:8a:f6:
8f:95:44:26:fc:5e:cc:b1:d4:15:34:f0:04:ba:81:
29:1a:2a:2f:d6:fc:bb:06:f7:de:5d:97:64:0d:23:
fd:5d:73:d1:2b:3b:60:7e:c7:ae:5f:22:c9:e0:13:
0c:a7:0f:5b:c7:42:6e:c4:60:6a:3e:8d:b4:eb:26:
69:68:fe:52:d6:e1:01:63:8c:a1:f5:da:a0:7b:27:
b2:58:fc:29:88:60:63:ca:41:0e:a9:54:4e:da:95:
83:36:99:d3:95:5d:cc:b1:85:71:f0:d1:dd:ca:26:
33:c6:7a:c5:e3:f3:03:ae:8f:40:f7:27:2d:ad:7e:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:47:B5:A6:C2:B1:B4:BB:87:D9:89:F9:40:F7:42:2D:94:10:2B
X509v3 Authority Key Identifier:
keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:93:18:18:d1:5f:38:a9:35:ac:cf:2b:18:2f:4b:75:5f:b4:
a1:3f:2c:d7:21:ae:34:8c:ce:dd:6b:a3:a2:c5:8d:05:01:fd:
51:62:88:ca:26:e5:f3:bd:c2:b0:f4:b2:54:52:75:4b:f3:e5:
95:40:4a:3f:c8:58:08:cf:b0:69:09:dc:6d:e4:f0:a3:ba:a5:
97:2d:0a:f1:a6:cc:0d:28:52:86:6f:29:6d:40:d4:20:d9:b4:
e0:96:ae:3d:a3:01:64:60:33:3d:5e:b4:0b:e2:9a:dd:cb:20:
ce:aa:a6:d5:dd:cd:5b:e5:74:44:9f:b4:85:66:19:43:39:4e:
67:d4:ad:24:f4:23:05:7c:91:47:6c:96:19:ed:e9:b7:b7:eb:
75:9e:f2:98:e9:5e:0e:5f:1e:8c:05:0b:c2:ec:39:73:d5:55:
f1:20:84:d8:68:b5:e0:e5:63:a2:5b:1e:45:f1:e7:5a:a3:87:
a0:2f:8a:ca:ed:d9:be:f7:e4:00:a0:a2:09:87:c1:b1:5b:ed:
5e:c8:40:2d:be:5a:2c:1c:36:db:22:05:bb:b3:3a:1c:96:24:
11:f9:76:93:37:b3:1b:5b:fb:24:09:1e:26:e8:6c:bf:e8:86:
dc:bc:05:55:13:2b:f2:3d:00:ad:a3:bb:8e:4f:84:8a:90:66:
9c:8a:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:17 2026 by rpki-client