
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier: v7tTaoga/PMCZDaYlDEFIDUgPn7K7yqmCQkdX29uwTA=
Subject key identifier: 90:0A:D1:0D:69:D7:14:BB:1B:DC:16:E2:72:47:E7:00:88:97:E0:70
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number: 0203
Signing time: Sat 13 Jun 2026 03:08:50 +0000
Manifest this update: Sat 13 Jun 2026 03:08:49 +0000
Manifest next update: Sat 20 Jun 2026 03:08:49 +0000
Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: lW2FyDw8RMG66t+aZe/TPrGQpZ6C9qb7/K00F3tKHs0=)
2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Validity
Not Before: Jun 13 03:08:49 2026 GMT
Not After : Jun 20 03:08:49 2026 GMT
Subject: CN=6a2cc9c1-f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9e:34:ee:95:00:53:a6:22:d2:d4:c6:c0:07:
fa:b9:a6:c6:d3:cc:73:62:9e:08:a3:5a:23:79:d5:
b0:80:52:ac:2e:6f:2b:ec:d2:7a:60:e5:d7:fe:9d:
b4:4c:e5:fe:db:f7:c2:91:f5:89:a7:cc:5d:cc:ec:
30:c0:76:ec:91:4a:5f:2e:6a:24:99:6d:b5:26:c9:
0b:50:07:39:88:8a:f7:ee:69:c5:43:75:8b:ff:ea:
b5:cc:0e:9a:8c:e6:93:dd:3a:71:6c:b8:f9:e5:95:
39:ca:89:64:09:ae:17:db:45:e2:ec:88:8c:fa:06:
60:e0:dd:74:81:af:a7:01:d0:00:10:61:7d:75:9e:
5f:92:a2:60:33:35:54:42:7a:1c:c9:50:ce:cd:10:
80:8a:13:e6:e8:dc:42:71:d0:3a:84:92:cb:a1:3a:
06:7f:7a:2d:59:a3:fc:11:d1:70:1f:d0:3a:40:50:
11:e9:0e:ca:90:c4:68:2d:61:26:1b:de:93:17:00:
ff:4d:37:ca:f5:de:08:58:83:ef:38:e0:40:6a:d2:
79:8d:40:c8:98:5b:c0:bd:45:f2:fa:9e:d9:90:b9:
14:0e:66:49:45:c9:8c:4e:0d:6e:63:f3:57:18:c9:
45:e6:af:03:e6:17:0c:0c:8b:07:5d:19:19:05:67:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0A:D1:0D:69:D7:14:BB:1B:DC:16:E2:72:47:E7:00:88:97:E0:70
X509v3 Authority Key Identifier:
keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:c8:de:cb:c4:4c:55:41:33:35:ed:15:74:bd:5e:87:9e:fb:
f2:d5:0f:34:7b:6c:8b:0b:52:ca:07:72:64:e3:1c:37:b9:ac:
1d:6a:24:9a:ce:83:14:3f:39:97:35:ec:f0:5f:78:ca:2a:1a:
df:62:b2:8d:c6:5e:9d:bd:e5:f7:88:06:cc:f4:b4:1a:c2:9b:
d2:b9:e3:11:1b:9f:ee:42:4f:a1:2e:73:3d:cc:9d:96:1e:ed:
bb:52:86:94:92:b1:9e:30:04:30:b5:60:43:c3:fd:ad:17:36:
a8:0c:6b:fe:cb:50:47:75:18:54:ce:e2:58:6c:7a:25:fe:32:
c6:a1:e4:fd:31:a2:6a:e1:6f:e5:9b:9f:6a:ea:92:bd:a2:2b:
4b:58:ad:4a:57:c3:6b:33:bd:22:4e:54:90:e3:48:90:9b:9a:
0b:80:f2:56:6e:74:04:27:ed:2e:50:37:d8:44:db:46:f4:fb:
ca:58:ed:2c:16:d4:47:00:83:45:09:90:6e:63:c8:6e:9f:84:
58:c4:63:0e:a0:a0:cb:7f:85:60:3d:2b:1b:0d:6d:ea:94:cb:
f9:dd:df:6d:8e:80:83:e3:b2:66:d8:a3:db:56:34:46:bd:40:
ad:bf:c8:b6:29:80:5f:60:83:93:21:61:62:57:cf:b6:73:11:
48:8b:8d:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdBOEYxMTAvBgNVBAUTKDZEOTYwNjg4QjZERTcxNDFBNzIxODk4RTlFMDczRTE2
Nzc4RkVGMzUwHhcNMjYwNjEzMDMwODQ5WhcNMjYwNjIwMDMwODQ5WjAYMRYwFAYD
VQQDEw02YTJjYzljMS1mNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Z407pUAU6Yi0tTGwAf6uabG08xzYp4Io1ojedWwgFKsLm8r7NJ6YOXX/p20
TOX+2/fCkfWJp8xdzOwwwHbskUpfLmokmW21JskLUAc5iIr37mnFQ3WL/+q1zA6a
jOaT3TpxbLj55ZU5yolkCa4X20Xi7IiM+gZg4N10ga+nAdAAEGF9dZ5fkqJgMzVU
QnocyVDOzRCAihPm6NxCcdA6hJLLoToGf3otWaP8EdFwH9A6QFAR6Q7KkMRoLWEm
G96TFwD/TTfK9d4IWIPvOOBAatJ5jUDImFvAvUXy+p7ZkLkUDmZJRcmMTg1uY/NX
GMlF5q8D5hcMDIsHXRkZBWdoEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAK0Q1p
1xS7G9wW4nJH5wCIl+BwMB8GA1UdIwQYMBaAFG2WBoi23nFBpyGJjp4HPhZ3j+81
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E4Ri82M0FDRDVGNDU5
REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNVR25JWW1PbmdjLUZuZVA3
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0E4Ri82M0FDRDVGNDU5REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNV
R25JWW1PbmdjLUZuZVA3elUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABcjey8RMVUEzNe0VdL1eh5778tUPNHtsiwtSygdyZOMcN7msHWokms6DFD85
lzXs8F94yioa32KyjcZenb3l94gGzPS0GsKb0rnjERuf7kJPoS5zPcydlh7tu1KG
lJKxnjAEMLVgQ8P9rRc2qAxr/stQR3UYVM7iWGx6Jf4yxqHk/TGiauFv5ZufauqS
vaIrS1itSlfDazO9Ik5UkONIkJuaC4DyVm50BCftLlA32ETbRvT7yljtLBbURwCD
RQmQbmPIbp+EWMRjDqCgy3+FYD0rGw1t6pTL+d3fbY6Ag+OyZtij21Y0Rr1Arb/I
timAX2CDkyFhYlfPtnMRSIuNrA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:01 2026 by rpki-client