
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier: +UVgDqLOCSLrLuksJBOEBVqM9huG9Bkr3zpbyVPyFCw=
Subject key identifier: D8:A6:6C:8D:E2:E1:62:0A:46:ED:F7:B8:5E:34:26:78:43:C4:69:91
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number: 01CD
Signing time: Sun 01 Mar 2026 04:27:27 +0000
Manifest this update: Sun 01 Mar 2026 04:27:26 +0000
Manifest next update: Sun 08 Mar 2026 04:27:26 +0000
Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: qHud2oWBEmFph0JHVy40yD1LZn8URntp2YxUWJVIlf4=)
2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: VQ7b14kx8FaY1BbDkhqhmQ0+ADyuJAhOUCeo43SW+58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Validity
Not Before: Mar 1 04:27:26 2026 GMT
Not After : Mar 8 04:27:26 2026 GMT
Subject: CN=69a3c02f-d247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:10:eb:9c:9c:59:11:5b:2e:1c:2d:b5:b4:
8c:c5:6f:dc:c9:6b:60:4f:5a:f2:82:8b:46:53:5c:
80:5e:cd:71:ea:8c:7a:4b:61:e5:65:c2:30:6f:ec:
28:17:8a:f3:26:9d:3b:b8:6c:84:55:c3:c0:18:9b:
65:b4:36:12:58:47:0d:e7:af:0a:aa:0e:57:56:1c:
42:0a:fc:7f:7d:74:1d:45:e5:44:4b:80:e8:a6:f6:
20:57:e4:c2:6d:3f:f9:90:d1:c7:c3:77:dd:b6:f9:
92:97:0b:a0:72:92:b2:b2:79:b5:63:30:0d:62:59:
36:51:fa:90:63:34:ca:da:07:40:25:17:50:0f:17:
fb:a0:eb:60:4f:a4:4d:f4:52:ad:eb:e9:ac:ed:73:
0b:c5:5e:aa:8a:d3:4d:9c:62:34:42:83:4b:92:bf:
62:0f:9b:d8:07:e4:1f:ef:b2:79:8f:b2:1d:10:94:
7a:ca:f8:47:3c:1a:20:2b:82:3b:fe:0f:02:f9:93:
a1:9d:38:01:7a:5b:16:67:a7:15:ee:df:c6:7c:f3:
f0:38:cb:16:66:50:fb:bc:2f:32:4b:55:46:5f:77:
86:b0:f2:13:15:ad:19:2f:8d:22:68:d9:9e:d7:eb:
04:e8:b7:13:83:fa:48:91:32:59:15:d2:0a:e8:d3:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A6:6C:8D:E2:E1:62:0A:46:ED:F7:B8:5E:34:26:78:43:C4:69:91
X509v3 Authority Key Identifier:
keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:da:d1:1d:60:53:83:8f:a4:6f:3d:a5:9a:f8:b7:11:fd:4a:
26:49:f5:b0:ed:3e:3d:20:b4:62:78:7d:e5:8a:c7:97:f8:32:
bf:42:76:1d:47:6d:b5:50:e7:c6:12:bf:46:93:4d:37:5a:2a:
83:ea:7d:63:eb:98:d4:9d:8b:50:ca:ad:eb:0c:cd:9e:e1:88:
fa:97:8e:a3:89:d7:8f:85:7e:a3:f9:be:64:ad:e3:b8:ab:88:
ff:83:ca:e1:89:6e:99:2f:07:c5:57:b8:09:6b:16:51:4b:16:
a1:35:99:2a:80:1d:fd:51:68:30:9e:42:45:18:59:93:5f:a3:
00:bf:e3:af:aa:36:b7:42:41:a8:ea:d7:6c:93:d4:4e:65:ff:
a2:ae:cc:48:55:1e:ee:61:7e:2c:62:3d:6d:0b:fe:ad:97:db:
1c:40:43:b8:32:a0:65:cc:4d:c8:0a:0f:5f:5d:aa:2e:0e:1b:
ce:07:18:75:2f:dc:44:6d:72:34:c8:d8:0f:ca:0c:aa:6d:fa:
9e:0c:e9:02:cb:b3:1e:44:df:d4:68:60:a5:17:95:17:10:b2:
d6:c0:87:58:18:25:74:30:d8:7c:51:6f:65:e2:d0:52:ad:f9:
e1:38:6c:31:ce:ff:91:db:ba:91:51:06:52:bd:34:e3:04:df:
7f:9c:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:22 2026 by rpki-client