
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File: BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier: dpP6qXnYSYMcLX7lGZ97H1jGgjkkTmLe2cz1zhk27so=
Subject key identifier: 43:8A:BB:47:47:4E:05:5E:6E:CD:C6:2A:B1:3E:51:FC:6B:19:C8:00
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer: /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number: 20
Signing time: Wed 15 Apr 2026 06:06:49 +0000
Manifest this update: Wed 15 Apr 2026 06:06:48 +0000
Manifest next update: Wed 22 Apr 2026 06:06:48 +0000
Files and hashes: 1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: V74GlXwiUMZZX825oYXaYbjv2Je5Oxb5DWNBUCuSf/M=)
2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Validity
Not Before: Apr 15 06:06:48 2026 GMT
Not After : Apr 22 06:06:48 2026 GMT
Subject: CN=69df2af9-233e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:9a:12:43:87:8d:4b:07:85:02:c6:0e:58:
c5:91:f2:06:c5:a8:b7:01:9e:a4:9d:9f:1c:5e:81:
10:fb:aa:49:b6:2e:7f:a7:53:9b:3b:7f:f6:28:60:
2c:1c:c0:19:66:6e:c8:d9:28:1f:f4:54:bf:b2:26:
b8:64:d2:dd:a2:53:14:d9:1c:98:de:4b:3a:ee:14:
ee:4e:38:5b:d6:b2:11:51:2f:1f:aa:33:bc:14:07:
ad:40:94:a3:20:cb:47:4e:62:5f:f1:96:a4:fb:d0:
f7:49:29:c3:aa:83:84:dc:9a:32:1f:d2:ba:4b:10:
6e:56:2d:31:69:62:dd:ef:eb:aa:94:36:dd:74:ae:
39:f7:e6:5a:f7:32:ad:ed:55:08:14:79:d3:ca:98:
d0:0f:e4:29:28:10:3d:05:df:12:35:be:85:2c:de:
63:d2:10:0d:3c:21:1a:d3:ea:b5:a6:2c:e3:af:69:
77:fa:9f:20:c8:97:ef:be:54:f3:19:25:19:28:2d:
87:4c:a5:d9:c8:9b:c7:99:64:9c:46:0c:7c:80:9c:
e5:9a:21:9f:c0:66:65:4a:8b:8a:cc:b8:41:c1:99:
b4:4c:99:2d:c5:1a:df:c7:e1:8b:a0:b3:e4:a3:f2:
1a:ec:6f:73:5d:bc:ee:62:cb:f0:b8:91:b7:8f:82:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8A:BB:47:47:4E:05:5E:6E:CD:C6:2A:B1:3E:51:FC:6B:19:C8:00
X509v3 Authority Key Identifier:
keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:87:36:ee:17:43:95:19:78:0f:ad:4d:b3:35:c9:cb:cd:95:
3e:29:cb:f4:f8:67:f0:95:10:45:2c:bf:db:78:e1:eb:bf:d9:
9f:30:a9:cd:7f:30:bd:2a:ad:3f:58:3c:c3:69:63:f2:1a:83:
a2:c0:f7:1d:a9:33:e0:ca:ec:22:72:49:cf:3f:58:bc:fc:74:
03:ea:be:55:89:ed:56:e4:07:81:ef:3f:c6:5e:ad:62:7b:5c:
3a:0a:4c:a1:74:51:1e:7b:da:29:55:4f:97:49:f1:84:0a:db:
1f:e7:ed:e3:84:fd:a3:e0:3b:19:06:b6:bd:39:bf:77:9d:aa:
fb:94:62:67:13:4f:57:c2:4e:0d:cb:92:a2:2c:ac:49:3f:17:
c6:40:b9:29:f4:64:de:8b:0f:15:63:29:fc:18:03:9e:88:97:
5f:fe:38:ea:89:47:32:f5:af:47:f3:cc:82:39:37:89:38:32:
4b:61:30:86:e0:0b:1d:3a:c7:80:a6:8b:34:5e:3e:81:66:02:
7e:52:89:0f:06:d0:c3:8e:f8:76:c5:61:c6:ec:fd:98:9b:29:
3d:2c:b7:63:35:af:43:29:eb:18:84:f8:4d:db:e4:f7:d6:b7:
a0:a6:ca:29:21:4c:f0:3f:6d:e4:43:21:f1:50:f2:70:23:45:
9a:b4:55:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:42 2026 by rpki-client