
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File: BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier: OMEKbedP0peD35O9i6FMXqkgXiAnnBnT9+cMgqJyslo=
Subject key identifier: 5D:A9:DA:5E:44:26:90:0F:BA:FC:91:AB:74:F7:22:C9:C7:07:56:50
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer: /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number: 53
Signing time: Mon 27 Jul 2026 07:57:35 +0000
Manifest this update: Mon 27 Jul 2026 07:57:34 +0000
Manifest next update: Mon 03 Aug 2026 07:57:34 +0000
Files and hashes: 1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: +Ih6jY2o0SF2AL3RlqEtkqIGaKHBTNwMvIUv2IDA8uU=)
2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Validity
Not Before: Jul 27 07:57:34 2026 GMT
Not After : Aug 3 07:57:34 2026 GMT
Subject: CN=6a670f6f-ece9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:28:8b:18:aa:e6:4e:c9:94:3b:b2:ab:e6:
83:47:56:69:07:e3:db:31:0d:f8:74:5a:bd:5f:87:
ab:96:cd:7e:0d:bc:36:46:eb:51:e4:e6:6d:24:12:
95:b2:a7:e7:f1:95:5d:c1:1c:ed:83:f6:8c:1e:86:
40:ae:6e:55:cb:cc:b4:4b:cc:fb:6b:a9:29:b7:87:
1f:99:9c:bc:30:f2:41:df:98:06:b0:34:14:88:3d:
93:a0:65:7b:e7:be:34:4c:95:e6:d3:7d:09:3f:fb:
63:3b:82:55:2e:ef:fe:99:99:83:44:15:21:c4:24:
53:c2:34:ca:ea:65:6a:37:53:e0:08:20:7b:5a:4d:
9f:ac:03:45:bf:f1:c0:1e:b1:1e:52:4f:55:22:7a:
a8:65:86:b5:7a:21:fb:57:a8:00:21:d1:23:12:59:
2a:e8:cb:29:67:f0:09:34:e5:0f:65:46:3d:b8:35:
6c:dd:1f:c3:ab:e6:72:71:23:b7:58:06:db:21:3f:
81:2d:e2:27:fa:45:e0:51:03:7a:c6:83:05:a1:2b:
af:05:61:e0:72:2b:e5:0e:6a:57:6d:9d:51:92:69:
fc:3e:43:71:4d:f3:ca:7a:15:f3:37:85:3c:8d:a6:
53:52:5e:6f:ec:e7:48:46:94:33:23:53:e9:9e:76:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:DA:5E:44:26:90:0F:BA:FC:91:AB:74:F7:22:C9:C7:07:56:50
X509v3 Authority Key Identifier:
keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:8a:c4:23:97:b5:ed:81:21:1a:35:64:a8:f3:1e:47:2d:31:
4a:5a:8a:2c:eb:44:31:46:0d:cd:c2:1f:20:98:8e:10:28:a0:
15:b6:ba:32:a7:fb:28:71:7f:4f:38:4e:5f:53:85:fe:2c:b8:
57:ed:35:0d:74:6a:4f:64:03:c0:06:71:59:b3:85:19:62:13:
a1:77:90:ab:e2:8a:0a:d7:0b:24:0b:2e:07:3e:b0:e2:8e:66:
db:f3:a7:58:f2:b1:c5:05:fd:bb:b5:ab:cb:95:d4:21:38:b1:
1a:01:67:23:8b:8c:ad:40:2f:90:af:34:bd:70:9b:3b:20:48:
3c:21:69:d9:43:8d:e2:09:98:c9:7e:11:62:f9:d8:27:a9:c1:
e2:66:bf:69:8e:f8:0e:94:5c:9b:32:49:1f:fe:ab:cb:1b:7c:
1f:65:c0:e4:d9:2d:67:71:71:0a:55:9f:7f:2c:be:20:ae:fe:
82:e7:1c:40:01:10:4c:e6:12:11:6a:f2:61:53:3b:b7:81:d1:
dc:8d:54:58:d9:26:2a:8d:83:d4:5f:b8:8a:2f:56:da:cb:71:
1a:6f:79:f7:88:5d:c9:02:b3:7f:cf:f9:62:af:03:37:8c:11:
72:a7:af:48:b8:02:0d:45:bb:99:06:1e:bb:aa:f0:eb:ab:fe:
4f:58:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:53:15 2026 by rpki-client