
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File: bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier: TLfkkeZtUKXHLDA+wjjHQmOYGnDbBqG7gCwUdQGuLNU=
Subject key identifier: 72:E8:7E:35:81:6B:92:47:CB:0E:A9:71:59:C3:E9:BD:EC:FA:C1:28
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial: 0FE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number: 0FDF
Signing time: Tue 12 May 2026 17:31:15 +0000
Manifest this update: Tue 12 May 2026 17:31:14 +0000
Manifest next update: Tue 19 May 2026 17:31:14 +0000
Files and hashes: 1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: fYRATAne3/zJtjv1cAt4divwl6Y1IWZijLH4AzzSHJw=)
2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: HSDF6r0vrEGGhFaSVBrgmhu0L895iD5PYpCHtPDJbg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4073 (0xfe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Validity
Not Before: May 12 17:31:14 2026 GMT
Not After : May 19 17:31:14 2026 GMT
Subject: CN=6a0363e2-003e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:60:3e:93:c5:74:1b:f9:02:07:f1:40:de:
a0:fb:d5:2d:c1:0b:0c:3d:bd:cb:55:d7:68:f3:28:
93:41:1b:35:39:dc:d4:4b:bf:75:93:3d:ff:e5:97:
1e:af:2b:72:64:6c:10:4f:02:72:c3:eb:71:d0:0b:
63:90:a4:5a:0f:5b:f2:fd:3c:b6:3b:42:f6:24:93:
b7:18:5d:d3:a5:9c:7d:1f:05:c0:6d:f0:ba:a0:20:
23:f1:0a:23:c6:66:89:3d:8f:6c:06:cd:55:21:a3:
e6:ea:ac:3d:18:0e:e4:c7:6e:da:dd:0e:fb:43:74:
06:2d:3c:5d:35:35:a6:f5:43:6b:f9:ae:59:03:41:
8d:90:81:f7:03:69:ae:6a:81:5c:e8:cf:68:ee:b0:
ca:91:ee:b2:a0:89:66:3a:66:16:65:8a:0c:33:9f:
2f:02:f9:9a:b7:44:05:8e:0b:d3:1d:47:3f:68:4e:
0f:7c:d8:81:94:45:ad:19:62:38:03:0f:e5:33:a4:
10:c0:63:17:7e:20:40:8c:f9:07:ad:1d:5b:52:50:
df:cf:2a:3e:ad:15:86:70:a5:5c:21:22:04:cd:3c:
ab:8f:17:6f:18:d6:36:49:b8:3d:be:ce:0c:8a:49:
61:9a:30:be:8e:6a:50:d7:ea:75:5a:e9:1d:c6:d8:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E8:7E:35:81:6B:92:47:CB:0E:A9:71:59:C3:E9:BD:EC:FA:C1:28
X509v3 Authority Key Identifier:
keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:08:88:a1:70:29:14:e1:83:4d:cb:13:3f:73:3b:00:57:c8:
31:6e:94:40:cf:1f:19:89:dc:37:24:40:65:e8:79:f2:d9:9a:
6f:78:db:af:be:9d:21:f8:89:e9:43:23:4f:fc:6a:83:fa:73:
e7:a4:74:aa:6b:8f:7a:4a:d6:9d:5b:e0:32:09:9a:96:8b:6d:
9f:fa:a3:48:ad:d0:a6:37:52:63:45:4a:ad:ff:19:69:40:9a:
8f:c7:03:66:c0:97:8c:3b:1c:4a:5a:04:4b:cb:44:d6:0a:11:
c8:90:73:f5:f2:22:e9:fc:bc:54:55:38:d6:4e:27:82:d4:e6:
c0:bc:75:d7:ac:5d:f0:82:59:4d:2b:1e:21:3f:9e:d4:78:27:
ea:25:fd:a3:54:69:0f:f0:0d:fd:6f:2e:73:bc:12:39:e4:0d:
75:ac:a6:5c:41:22:aa:5d:8b:a0:f8:1a:eb:4a:a6:cc:6e:6c:
7e:b2:a7:ed:cd:bb:62:5c:5b:50:c9:08:4d:6a:82:f4:ce:9c:
c9:c6:ed:b6:24:64:85:a2:17:de:80:3a:68:6d:05:cc:aa:dd:
5f:b8:fe:fd:1b:27:20:db:4e:08:90:6a:c7:67:dc:83:c6:9d:
3f:8c:7c:ea:da:90:91:90:f4:f1:8e:2c:73:ed:7f:c8:49:1e:
89:03:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:13 2026 by rpki-client