
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json)
Hash identifier: r3k8ERF7UhiDVhuiMvoYnd6HezgRj8V5MfnzZvBEL5c=
Subject key identifier: 5C:DA:47:8B:D6:7F:B7:7C:68:CB:2E:0B:A1:7F:37:35:0C:C2:21:AF
Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E
Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
Certificate serial: 051E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
Manifest number: 050E
Signing time: Fri 12 Jun 2026 23:41:03 +0000
Manifest this update: Fri 12 Jun 2026 23:41:02 +0000
Manifest next update: Fri 19 Jun 2026 23:41:02 +0000
Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: r92wDEmFucDND83ckj5S/Z8t/RCPMBb/BrhAz8NoBKk=)
2: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: /+1rA/lY//BjkSmekhr9HG4V1SIsmcdTUpxFR/Lg1gM=)
3: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: sLd2M987Nai+fI1yTCpBJEOYBHHxa/gLVETQg3jrxaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl
rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1310 (0x51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E
Validity
Not Before: Jun 12 23:41:02 2026 GMT
Not After : Jun 19 23:41:02 2026 GMT
Subject: CN=6a2c990f-1f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:89:d3:9b:ca:f2:59:f9:25:cb:28:18:da:
ed:ed:6a:b1:b9:b9:e6:c5:20:4b:e8:04:ec:c3:43:
91:5d:ae:8d:5e:75:4b:37:24:c2:8e:34:9f:78:73:
9a:13:b1:09:e0:9e:f4:72:cd:fa:cd:e8:76:9a:e5:
cc:91:73:0a:17:83:58:1b:0c:46:9a:f3:a8:bc:d2:
d7:3f:15:6d:d5:7f:82:68:cc:51:fd:50:b8:39:7c:
a2:1f:23:54:c8:c3:b7:87:15:f4:88:15:4a:c8:a3:
17:3d:80:4f:54:b3:5c:81:3b:98:6f:a9:60:ba:45:
20:66:6b:8f:ed:67:37:8c:3b:68:dd:a1:02:04:d4:
08:49:74:c9:b7:a7:c0:8a:83:cb:ed:20:8c:d7:4a:
cc:53:cb:10:4c:8d:b9:fb:c1:01:3b:cf:96:51:36:
d8:a8:d1:f4:63:fe:0c:03:8e:5c:a7:50:2f:03:0d:
c9:02:b8:e7:1a:97:af:e8:b8:cf:22:92:ad:68:be:
35:03:f5:93:0d:e1:e8:e9:2f:ee:27:27:20:3a:3e:
d0:27:2c:65:9b:cf:fc:62:36:fb:5e:da:51:6f:97:
71:f6:16:74:50:9b:c7:5b:57:7e:0a:f4:65:be:b1:
4e:fb:07:e9:ed:82:ea:46:c2:63:05:4c:89:3c:ed:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:47:8B:D6:7F:B7:7C:68:CB:2E:0B:A1:7F:37:35:0C:C2:21:AF
X509v3 Authority Key Identifier:
keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1a:ee:cc:6d:09:55:65:d6:37:94:53:e6:9a:b8:0c:3b:78:
2c:15:61:0b:01:1a:82:d3:88:5a:d7:3b:ee:cf:d3:0d:77:09:
e1:46:19:8b:d0:88:e6:1a:2e:2c:27:b6:fe:f1:b7:7b:e5:c2:
17:73:b9:4b:5b:2b:f3:33:fe:ce:de:2a:8c:4b:f5:79:cc:24:
e7:0b:f9:76:4f:f2:0d:e0:a8:40:c6:45:9e:64:fa:68:f8:12:
58:4c:1b:14:9b:6c:2a:09:21:9b:4e:49:a0:2f:38:24:27:da:
ee:1b:89:2e:d0:82:5b:49:ad:ea:f8:a0:26:44:02:ce:5b:db:
6e:43:72:7a:b1:f7:db:a3:72:24:07:cc:06:f8:21:22:c1:8d:
1d:7a:ac:e0:51:29:f8:d6:7f:af:6e:ef:41:4c:45:0d:24:09:
22:2d:bb:e2:5f:cb:d7:ba:a4:12:86:c5:47:da:4e:ba:52:bb:
2f:e9:71:d9:64:eb:ff:ec:a0:d0:6e:09:e7:ea:71:72:47:0e:
6e:f3:26:a0:9a:8c:d9:dc:c3:0a:11:a3:ce:25:c9:a8:b4:7a:
0d:61:85:c0:c0:7e:0b:96:32:b6:bb:db:43:4d:eb:dc:1f:27:
3a:b4:17:69:26:a9:d2:ea:70:eb:3b:85:e0:d9:92:11:7f:c8:
5b:33:68:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:35:32 2026 by rpki-client