
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File: bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier: lSCIqJZhk6pVv/2v5dK157xjANNz1e8JVo23JN/8MU4=
Subject key identifier: C8:F1:6F:78:5D:8D:11:F8:B9:9E:04:BD:1F:B5:42:EB:F2:68:A6:A8
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial: 1013
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number: 1008
Signing time: Tue 28 Jul 2026 17:34:43 +0000
Manifest this update: Tue 28 Jul 2026 17:34:43 +0000
Manifest next update: Tue 04 Aug 2026 17:34:43 +0000
Files and hashes: 1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: UIfixUypKX9z1alnZRGZNs2CSvn8/iAZyJ7XnS2ZI4k=)
2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: +Mts4fsvfNPpR9wN95HnMuPMq0NdCSXUy9GV9X1mECY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4115 (0x1013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Validity
Not Before: Jul 28 17:34:43 2026 GMT
Not After : Aug 4 17:34:43 2026 GMT
Subject: CN=6a68e833-3ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:37:7e:8b:a5:93:cd:d1:8d:5c:23:a5:16:
33:75:05:97:f8:ef:b1:42:10:31:ac:b9:75:5f:71:
ec:8a:eb:46:32:f8:03:a1:9a:37:27:d7:4b:6a:2a:
b7:a4:59:21:88:d5:fc:77:48:a5:53:2f:0e:f2:64:
ed:a7:e3:11:68:0a:90:80:37:ac:c5:32:14:09:93:
72:1b:b4:b1:93:7e:cd:63:75:30:83:26:60:54:9f:
07:6e:a6:ea:9b:81:a3:f6:73:d4:a9:25:65:be:33:
1a:b5:3b:a2:2c:b0:78:14:75:3c:f1:e1:06:32:3f:
20:74:8c:f4:a0:9f:fa:08:e8:54:26:40:58:90:1d:
f3:ea:77:21:1e:83:a5:d8:5c:83:ba:4a:5f:5d:e3:
ff:6d:dd:90:da:eb:50:9e:e4:e4:a9:ec:f0:be:c1:
5e:54:06:e4:a6:88:ac:78:88:64:dc:52:a2:14:ee:
9e:38:7d:55:e4:a0:fd:a3:26:d4:6b:70:23:a6:5a:
dd:a4:09:28:34:26:6a:2f:1d:0d:22:1a:10:2a:df:
a4:3d:d4:2c:20:34:59:fa:17:54:79:26:12:56:7a:
b7:62:e7:1e:c4:99:f9:0c:f5:ae:c0:13:1a:39:31:
4a:a4:cb:d6:3c:3b:59:64:12:b2:b4:e2:96:33:30:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:6F:78:5D:8D:11:F8:B9:9E:04:BD:1F:B5:42:EB:F2:68:A6:A8
X509v3 Authority Key Identifier:
keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:85:fe:c4:80:a7:5a:0c:09:f1:51:79:4a:93:7c:80:83:
47:38:3d:26:13:65:60:ce:04:d8:4a:f9:89:2b:ac:d8:f1:ff:
23:75:02:24:05:cc:53:31:64:4e:e2:75:f6:a7:90:d4:19:4d:
11:20:72:48:48:95:2a:25:0e:fc:6e:06:fe:8f:17:d1:c2:67:
5c:1f:5c:e8:74:62:e2:9e:07:ae:fb:04:4f:92:00:f7:6b:11:
57:07:13:06:99:ee:4e:72:0f:9d:b2:5b:21:af:ed:5c:c8:aa:
e6:fd:35:51:97:0b:3f:e2:13:7f:2d:a7:dc:1b:1c:37:dd:5a:
7a:d7:3b:9a:5b:0d:45:b9:d9:45:6f:84:36:ed:b2:64:2c:5c:
c0:0b:1f:5a:ef:35:0a:ae:07:d6:cf:dd:08:37:59:6d:cb:be:
28:c5:40:e0:ad:4c:e5:69:79:b3:24:a0:4c:9d:41:78:dd:07:
91:3d:bf:fc:18:6f:b5:92:93:5d:5c:87:13:86:02:f9:18:64:
b7:e6:5e:5c:6d:de:1e:0d:ea:60:ca:be:7c:54:e6:f7:20:ff:
a1:04:9c:d0:a0:67:33:fa:4e:7a:2e:f4:0a:6e:30:57:d6:d0:
eb:88:bd:34:63:58:1c:4c:19:55:fa:27:c0:2d:22:87:84:4e:
41:d1:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:45 2026 by rpki-client