
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File: bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier: SUXXMMhnrNZel2Bf17G8dFEOnfW3p4uh9G/ZVY0pOBo=
Subject key identifier: CB:52:97:0A:9E:6A:9F:B0:52:D9:2F:05:03:DA:52:C7:AB:D1:0D:94
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial: 0FC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number: 0FBA
Signing time: Mon 02 Mar 2026 00:42:50 +0000
Manifest this update: Mon 02 Mar 2026 00:42:48 +0000
Manifest next update: Mon 09 Mar 2026 00:42:48 +0000
Files and hashes: 1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: MHyL3I7b4UL0IYi8XOAsa+05rS6iNvOFMCI6RIhRdN0=)
2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: HSDF6r0vrEGGhFaSVBrgmhu0L895iD5PYpCHtPDJbg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Validity
Not Before: Mar 2 00:42:48 2026 GMT
Not After : Mar 9 00:42:48 2026 GMT
Subject: CN=69a4dd0a-aeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:78:19:18:81:e5:27:f9:7b:3d:d3:df:06:
b5:c7:f5:2c:a0:d0:76:89:43:23:ad:81:93:e9:53:
b1:6c:b6:82:c0:9c:fa:18:f8:91:33:2c:95:95:69:
7c:d5:ae:8b:a4:06:9e:37:e9:3e:a1:39:1b:b1:c7:
9f:13:5b:22:6f:f5:c9:c9:ae:66:92:a5:a6:0b:c0:
63:18:48:fe:1d:53:5f:c9:f1:6f:2f:59:a3:70:9c:
35:ef:2d:b0:7c:5b:d3:9c:49:e5:4d:0a:58:8e:6e:
e3:ae:1b:da:64:20:ad:3b:d0:3f:a4:eb:5e:0b:05:
0f:6b:5a:31:47:a3:ab:56:73:56:bc:a7:a0:e6:b1:
78:38:b3:aa:a3:ca:56:19:b9:ab:e9:09:f6:f4:05:
87:8a:74:4a:aa:ce:6b:3d:37:91:a6:8c:6d:ad:71:
09:7a:c3:a0:e7:24:fd:21:01:8e:e0:a3:fa:27:98:
e7:4a:4a:97:51:5c:27:5f:87:4d:c8:3a:34:5d:65:
d4:fa:8a:09:74:9c:42:71:c1:f0:fd:0e:12:75:de:
df:66:a1:22:5e:35:82:b2:e1:86:34:f2:b6:aa:b3:
8a:f6:7d:21:0b:59:63:67:77:f0:af:a5:fe:4e:64:
7b:78:f6:0e:93:dc:3c:1d:15:32:7f:01:12:ac:a4:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:97:0A:9E:6A:9F:B0:52:D9:2F:05:03:DA:52:C7:AB:D1:0D:94
X509v3 Authority Key Identifier:
keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:22:17:86:66:31:b5:ce:41:bd:7b:8c:95:df:de:3e:77:75:
27:5d:5a:e6:10:d6:c6:4f:72:b3:b2:7c:45:d3:4a:5e:01:04:
5f:f5:cf:a5:7c:5e:e4:24:53:20:d3:33:f5:ee:22:1c:df:ac:
31:fb:58:21:f4:9b:70:16:7a:42:85:1e:a0:23:db:03:9d:52:
f9:fb:6b:a7:d4:a1:2d:bb:74:68:c2:e7:8d:6b:4b:8a:c6:6f:
b4:b9:d3:ff:9f:9e:f1:a0:6e:87:80:e5:6b:98:98:46:fe:13:
e0:a2:53:7b:34:ca:28:29:1d:8a:77:04:e9:e6:25:15:e1:04:
8e:3e:5b:f4:f6:43:85:ba:6f:52:e4:9c:a4:62:18:e1:6f:5d:
9b:ce:a2:e5:9d:f6:09:8e:c3:f1:89:ce:ea:1c:16:c8:06:26:
7a:34:95:bf:88:80:66:6e:f4:e6:38:be:78:08:46:47:c9:bd:
df:51:a5:58:0c:9c:25:55:28:6d:b6:17:0a:d7:c6:30:7b:8b:
6a:e5:71:7a:a5:bf:7c:06:79:f9:df:ee:e3:98:08:8e:7d:44:
46:d1:b6:36:e1:10:85:5d:d9:e6:e3:a4:87:0b:bf:15:f6:b7:
e2:49:e9:2d:73:2e:b7:aa:f6:f4:02:83:5e:ce:8d:68:d2:be:
92:d1:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:47 2026 by rpki-client