
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
File: BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json)
Hash identifier: ub2zXx5K9wHNH343ncDFkML5ykaC8qYf8+fY7Ppf1qg=
Subject key identifier: 60:0C:C1:07:D6:A8:E4:C3:78:17:8D:D5:7E:72:C6:54:FB:5F:D8:B3
Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
Manifest number: 0291
Signing time: Thu 11 Jun 2026 03:56:05 +0000
Manifest this update: Thu 11 Jun 2026 03:56:05 +0000
Manifest next update: Thu 18 Jun 2026 03:56:05 +0000
Files and hashes: 1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: jmZy/0+qJ8+Pnmudhr61eTy3e4Q07CRDOAiYqAt7XJk=)
2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: WN4BlerUnjkJI10IF9VqKFEGkz0wyD5uEhdsLHHMXfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Validity
Not Before: Jun 11 03:56:05 2026 GMT
Not After : Jun 18 03:56:05 2026 GMT
Subject: CN=6a2a31d5-fa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:d3:9f:f1:ab:0d:7d:7c:84:68:8d:5b:ff:
fd:d1:77:c2:4c:42:a6:10:bc:38:5a:dc:93:06:7a:
2a:77:cf:49:aa:81:f8:4b:3d:29:41:53:a8:15:50:
c5:b6:54:10:70:07:21:1f:35:e4:c5:f5:5e:15:b7:
67:2d:73:02:ba:99:38:93:e6:c2:ed:1c:66:7a:dd:
cd:a8:08:2a:22:83:16:a9:2d:e0:5a:4f:aa:42:29:
d6:73:ee:16:84:59:28:bf:f8:5a:2e:8c:d6:38:2a:
0f:7f:d2:44:35:ad:2d:74:da:67:48:f9:98:dc:76:
7a:56:99:24:53:52:f4:95:d0:2b:e2:fd:ae:56:67:
c4:c5:7b:ed:1f:34:f9:ab:ba:a1:d9:c3:a6:fe:5b:
b6:73:d9:c9:3d:66:8d:32:3b:1c:c1:61:67:db:c8:
81:3d:a9:ed:5a:9a:19:2e:c0:78:9f:a2:08:1c:46:
e6:57:35:ac:21:46:18:38:71:a4:88:92:a2:21:20:
42:45:2e:a6:a1:ff:34:e3:1d:12:cf:5b:92:bb:1b:
2b:fc:5a:73:8b:d2:11:88:f7:13:9f:28:2c:d8:75:
10:e5:fb:9d:48:5d:99:67:35:dd:b3:ce:04:90:49:
f6:c5:99:64:4b:5f:f9:a4:97:76:76:a9:2e:01:de:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:C1:07:D6:A8:E4:C3:78:17:8D:D5:7E:72:C6:54:FB:5F:D8:B3
X509v3 Authority Key Identifier:
keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:07:a9:ba:51:ac:b4:68:73:5a:b7:1f:55:45:fb:86:5b:
f5:db:ec:3a:71:f0:20:7d:95:6d:e5:3e:52:f6:5a:49:e1:3c:
58:9e:d1:20:e9:7d:70:ba:7f:15:58:7a:97:7b:28:a1:ed:de:
f9:17:96:04:6b:83:6e:02:dc:62:e3:16:ea:63:08:71:f1:fc:
ca:2f:45:36:53:11:7c:0e:71:18:be:da:dd:5d:ab:1f:e8:8e:
2b:9a:2b:62:4c:93:03:12:6f:f5:94:e7:a2:ac:45:a2:ef:9a:
b6:7e:6c:ec:ec:3e:aa:bc:1b:af:5e:f7:ab:a3:70:49:8e:56:
2b:45:72:40:4e:b2:47:2c:f2:97:41:54:41:0e:eb:0d:2a:0d:
36:83:a9:3e:76:07:cd:56:a2:53:e0:72:36:cf:40:7b:78:7e:
2c:4e:fc:0e:b8:2e:a9:f0:e4:bb:18:7c:db:d5:cd:99:b7:10:
72:ae:3d:ec:5b:bb:e6:5e:7c:fb:cf:65:6f:ac:ec:a1:ce:08:
df:05:f3:71:dd:1a:3e:89:18:b7:e4:40:a2:ca:c1:79:bf:b6:
f9:d7:bb:c6:80:9a:d6:d7:8b:56:fa:a1:6b:9a:2e:54:9c:1c:
34:65:95:b4:60:76:6c:29:e3:a5:0f:48:47:a5:59:3a:bd:af:
12:9b:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:41:33 2026 by rpki-client