
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
File: BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json)
Hash identifier: eM2hdLsWG+gLz8Q9W8GElKchCrKwLwd6/5QcEH5KIRg=
Subject key identifier: 33:87:90:A1:3A:95:2D:78:4F:F7:04:D2:2E:C5:BE:1F:7D:18:AE:70
Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
Manifest number: 02C0
Signing time: Fri 11 Sep 2026 01:24:59 +0000
Manifest this update: Fri 11 Sep 2026 01:24:59 +0000
Manifest next update: Fri 18 Sep 2026 01:24:59 +0000
Files and hashes: 1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: TJjm90zdVRw0aFRAOykh0F7I8Ygh+DYTyeydi3M4c5U=)
2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: WN4BlerUnjkJI10IF9VqKFEGkz0wyD5uEhdsLHHMXfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Validity
Not Before: Sep 11 01:24:59 2026 GMT
Not After : Sep 18 01:24:59 2026 GMT
Subject: CN=6aa3586b-c507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:d5:db:a0:6b:97:a3:3b:44:ee:99:38:ab:
30:58:3f:61:cc:6b:15:32:bf:ac:6c:e5:55:44:c4:
77:6e:7a:1d:6c:59:45:38:5d:fb:fb:7b:49:71:4d:
77:c2:3d:69:67:a3:2d:4d:e1:f2:09:50:60:83:cd:
3d:c9:47:9b:9b:fa:93:4f:97:db:fe:65:01:d8:85:
fe:83:6d:98:61:96:10:02:b1:84:8d:93:74:3e:10:
34:a1:a7:15:6f:7a:fc:f6:81:91:ab:8a:9d:43:4d:
2f:c2:12:c4:0b:f9:35:b9:cb:d7:ed:6a:91:31:31:
d3:09:43:0e:2b:9d:1d:6d:73:fc:8c:0f:26:1b:0a:
17:31:e5:e4:54:aa:92:94:55:b9:cf:03:5a:02:70:
ad:42:44:95:2a:48:ff:41:58:96:ec:a1:20:2a:c6:
e7:74:7a:c5:dc:bf:8b:2a:d0:66:60:93:d0:6d:ff:
3e:c1:35:d4:ae:7e:09:b4:de:1b:e5:8f:3f:10:9c:
a5:4b:4e:d3:6f:71:5f:63:f9:90:60:9d:f4:a9:12:
f2:70:cd:c1:b2:54:d1:43:c9:43:d2:8c:b0:ba:84:
ec:cb:ba:ee:05:5f:79:b5:9f:c8:45:10:c1:85:da:
dc:66:87:d9:94:77:00:86:88:79:40:b7:d7:54:7c:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:87:90:A1:3A:95:2D:78:4F:F7:04:D2:2E:C5:BE:1F:7D:18:AE:70
X509v3 Authority Key Identifier:
keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:94:bc:56:a9:fc:8e:ab:9b:52:f0:3b:ea:5b:36:fc:72:65:
55:a7:02:58:70:8c:f6:eb:53:3e:13:3f:7a:fc:3d:e1:5c:72:
4b:e4:b1:f5:58:cf:e9:c7:ab:c4:e6:e7:d4:f8:35:39:36:cd:
05:9e:54:bb:fd:ee:a5:9a:53:3e:4a:23:43:4b:1e:e6:37:63:
69:8d:f8:65:2e:5b:18:f8:18:91:d1:2d:65:28:e3:81:b0:6a:
0f:94:ba:af:56:ff:23:b7:a0:07:52:d0:a4:da:1b:98:95:dc:
22:f0:b2:fb:13:80:96:aa:1d:b1:91:fb:d8:b1:1c:3d:d0:56:
1d:78:9a:e1:d5:26:dd:ba:ee:f0:f0:9d:ca:0e:ce:7f:8c:db:
c8:21:a1:c0:19:9b:c4:47:56:58:1d:80:d6:0a:9c:97:40:bf:
d4:cb:62:74:fd:53:a4:01:c6:b6:9b:c0:75:8e:8e:91:5f:19:
46:1f:90:4a:fb:91:ad:1a:73:28:9c:01:c4:e2:e5:54:f1:c6:
9f:79:a9:4c:0f:39:d0:eb:3a:e2:c8:e9:02:f3:ed:6a:43:40:
75:59:10:7e:e8:57:36:92:38:16:24:19:7a:09:f1:c8:a9:f0:
42:f5:75:b0:a2:46:a6:42:da:bb:ea:30:75:d9:52:be:cd:a0:
22:92:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:15 2026 by rpki-client