
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File: BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier: G2GpYBfGnynvXb8HmM+NILhs5OF0wKB5h7ML1R5Zs90=
Subject key identifier: A7:1B:1B:F9:E7:EB:4C:DF:19:97:E9:A4:CC:AB:C1:3D:89:A7:77:B4
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer: /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial: 83
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number: 7F
Signing time: Wed 21 Oct 2026 05:58:28 +0000
Manifest this update: Wed 21 Oct 2026 05:58:28 +0000
Manifest next update: Wed 28 Oct 2026 05:58:28 +0000
Files and hashes: 1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: j2M0l8qpaH9gjQ1ZmDT7JpXH46bIL3Mh7MRphbJOoVk=)
2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Validity
Not Before: Oct 21 05:58:28 2026 GMT
Not After : Oct 28 05:58:28 2026 GMT
Subject: CN=6ad85484-fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:5e:e2:e0:6e:5e:01:85:52:84:da:29:b3:
12:7b:50:7c:5e:59:53:23:ff:b4:a1:c8:67:3e:6a:
5f:39:ce:ba:48:1e:61:62:96:54:8f:d5:df:73:95:
a2:85:bb:af:e8:80:e1:85:d0:a8:0b:16:3e:7c:a7:
6e:a6:50:70:70:e0:db:97:f3:23:82:f1:3a:39:20:
41:da:d9:9d:76:90:e6:f3:c1:e3:f2:94:ae:66:3b:
7d:75:52:cb:7a:f3:f7:4b:9a:76:01:85:05:b6:61:
89:79:cd:f6:27:c2:e8:6d:3b:d6:5d:cf:2e:96:8b:
82:1b:6d:d3:41:92:fa:c2:e3:43:6b:90:c3:23:bf:
cb:4e:94:19:02:e5:e6:a6:ef:ff:62:4d:32:4b:37:
b8:37:72:a8:d2:29:8e:2f:1d:24:fd:ec:03:b5:52:
b6:cc:96:2c:8f:77:81:50:9d:c8:14:cd:93:96:49:
62:5f:3d:e0:90:5b:80:da:0c:73:90:e8:29:bb:6b:
ed:63:30:ba:ac:87:ac:0b:9b:52:9c:dc:bd:8f:8e:
55:1b:ff:ed:b6:cb:9e:ce:5b:9e:73:38:15:33:db:
16:af:a6:02:4b:80:35:36:76:4f:e2:73:bb:87:7b:
26:2f:f7:83:60:61:f9:21:e3:62:4f:7a:e0:b1:a0:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:1B:F9:E7:EB:4C:DF:19:97:E9:A4:CC:AB:C1:3D:89:A7:77:B4
X509v3 Authority Key Identifier:
keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:9a:d4:68:8e:f7:a8:3d:04:c1:41:81:56:53:af:b4:c1:10:
5b:fb:5c:e1:80:d5:4c:8e:f8:b8:10:d9:39:de:72:ef:01:0b:
5e:c1:fe:02:1c:64:9b:cc:d6:28:70:6c:46:50:d7:12:20:9f:
e7:94:a8:65:9e:66:60:e9:ac:7d:02:55:7b:42:8c:8c:f6:dd:
c6:a4:b0:bf:ea:b4:18:58:0a:85:f1:84:bd:ce:9f:2f:11:02:
e6:c4:16:fd:19:b5:16:18:05:d5:60:e8:cb:58:cd:25:e1:e2:
87:d5:32:d9:4e:39:5b:61:6e:15:f5:88:1c:1c:ea:fb:65:52:
5c:01:e3:91:90:4e:7a:3d:77:aa:6c:83:58:5f:8a:87:51:4e:
8a:85:9c:3c:18:0f:3f:9d:66:d7:c2:11:f2:f0:4a:83:28:f4:
7b:33:6c:7b:f3:63:58:4d:e2:53:89:00:9e:d0:3e:43:b6:b2:
6d:7b:93:36:2d:5c:22:3d:90:b4:a0:0a:a0:c6:df:13:eb:ec:
56:3c:20:07:81:8d:9d:7b:05:cd:f0:cf:c2:a4:2b:5b:47:b2:
26:81:22:f7:d5:fb:1a:c4:25:d0:84:39:33:3f:cb:8d:f5:1e:
89:34:7b:09:46:18:7a:34:ba:44:84:1f:c2:64:fc:c5:b9:d5:
c1:60:0f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:27:26 2026 by rpki-client