
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File: BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier: 60nfkJLawxYTyQ+9ULftQ4VPjwEsj1vSm/BYSP02Yg4=
Subject key identifier: 70:CC:93:7F:76:F2:3D:C8:35:A5:53:F5:75:BC:7E:07:C0:DA:94:7C
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer: /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number: 50
Signing time: Tue 21 Jul 2026 07:33:45 +0000
Manifest this update: Tue 21 Jul 2026 07:33:45 +0000
Manifest next update: Tue 28 Jul 2026 07:33:45 +0000
Files and hashes: 1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: xoTyB4cAK9xpT6QWnwkgsc1nPi7wgm+F4bYGbPs7Xnc=)
2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 07:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Validity
Not Before: Jul 21 07:33:45 2026 GMT
Not After : Jul 28 07:33:45 2026 GMT
Subject: CN=6a5f20d9-cefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:72:2f:25:bd:49:27:ba:fb:57:49:c3:a5:
ab:f2:5a:4b:e4:50:65:fd:4d:e8:99:c7:f1:9a:a3:
27:f8:fb:7c:37:d1:50:f9:f7:9a:52:c4:82:a2:0a:
25:2b:df:af:a3:0e:a9:9b:36:15:16:74:98:02:55:
49:8a:96:fb:b9:1e:df:75:a0:35:8a:7a:6c:17:bf:
27:5a:23:97:eb:6c:dc:54:59:08:29:4b:9b:16:f8:
e1:6f:b0:49:a0:84:9c:3a:a3:21:d0:f9:3b:95:14:
c2:c9:29:44:08:e0:99:6a:8a:22:0f:0d:d2:08:e1:
d9:99:5a:d9:8d:1d:a1:77:e4:2c:9f:d2:90:bf:f7:
b6:90:1a:53:13:5c:3e:98:c7:2a:71:6e:d2:c2:4e:
ee:1e:2d:a8:ef:74:7e:c0:f9:cb:db:73:5f:8a:eb:
ae:3f:eb:a0:35:3e:3d:0c:2a:c4:d0:da:b3:c5:26:
1a:55:02:fa:9d:70:05:5b:c4:70:d5:a4:9f:43:78:
bf:e5:be:83:4b:f4:a3:18:6d:13:80:6b:42:85:46:
b7:c6:0f:76:8e:fc:fc:a6:45:39:67:d2:3f:3d:5e:
44:67:df:aa:e5:20:11:24:c1:8d:12:9a:a3:02:f1:
78:0f:18:8a:30:be:55:21:4b:e7:1d:5a:a5:34:62:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:93:7F:76:F2:3D:C8:35:A5:53:F5:75:BC:7E:07:C0:DA:94:7C
X509v3 Authority Key Identifier:
keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:09:d3:d7:59:06:67:ca:46:3b:a5:91:d5:0c:56:a2:7d:ef:
b2:92:fa:59:3a:ec:a0:aa:0e:4a:1f:df:61:f9:8e:c7:02:d4:
d9:33:60:45:bf:df:5c:88:93:35:0f:5c:e8:e8:0f:79:a7:59:
18:2a:14:c2:1e:e0:65:15:95:1a:51:26:af:0d:90:53:c8:6b:
fe:36:d4:89:ed:6b:af:0f:17:ab:5f:b2:a8:26:50:25:d1:69:
26:5c:46:24:60:31:66:f9:a2:a7:16:b8:cc:54:17:33:37:03:
60:1b:53:1e:ac:0b:95:11:cf:9f:a6:5c:36:ea:2d:4b:9e:11:
ea:d1:70:72:9e:11:56:37:d1:f2:0c:2a:7c:32:49:19:1f:e5:
8f:ec:ca:ee:68:e6:2a:6e:d3:61:c1:f4:a3:e1:20:c8:ec:09:
2e:f9:02:c1:d3:ad:7a:91:40:3f:6d:cf:73:2a:60:a7:b0:20:
2b:b2:b0:3a:27:67:e2:1b:25:77:81:e3:a1:43:b2:38:ba:46:
85:d9:51:3b:17:5c:1d:3b:3b:c1:07:66:46:9e:10:16:3d:75:
58:65:73:d1:62:8a:32:ea:9d:a2:23:b1:31:80:e6:c0:5f:1b:
e7:f5:c0:c6:10:2e:d3:32:3e:43:0a:df:d8:52:12:f8:58:1d:
13:61:5a:a5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QzUxMjExMC8GA1UEBRMoMDZGQ0NGQjU2MkRCMjJDNzlERjA4NjMyMjQxQkYxRkFF
NjdBRTdDMTAeFw0yNjA3MjEwNzMzNDVaFw0yNjA3MjgwNzMzNDVaMBgxFjAUBgNV
BAMTDTZhNWYyMGQ5LWNlZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIlHIvJb1JJ7r7V0nDpavyWkvkUGX9TeiZx/Gaoyf4+3w30VD595pSxIKiCiUr
36+jDqmbNhUWdJgCVUmKlvu5Ht91oDWKemwXvydaI5frbNxUWQgpS5sW+OFvsEmg
hJw6oyHQ+TuVFMLJKUQI4JlqiiIPDdII4dmZWtmNHaF35Cyf0pC/97aQGlMTXD6Y
xypxbtLCTu4eLajvdH7A+cvbc1+K664/66A1Pj0MKsTQ2rPFJhpVAvqdcAVbxHDV
pJ9DeL/lvoNL9KMYbROAa0KFRrfGD3aO/PymRTln0j89XkRn36rlIBEkwY0SmqMC
8XgPGIowvlUhS+cdWqU0YuFJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcMyTf3by
Pcg1pVP1dbx+B8DalHwwHwYDVR0jBBgwFoAUBvzPtWLbIsed8IYyJBvx+uZ658Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyLzIyREJGRUZBMTJB
MzExRjFBMjBGQzYzODNEM0Q4QzY3L0J2elB0V0xiSXNlZDhJWXlKQnZ4LXVaNjU4
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvQnZ6UHRXTGJJc2VkOElZeUpCdngtdVo2NThFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD
NTEyLzIyREJGRUZBMTJBMzExRjFBMjBGQzYzODNEM0Q4QzY3L0J2elB0V0xiSXNl
ZDhJWXlKQnZ4LXVaNjU4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAaCdPXWQZnykY7pZHVDFaife+ykvpZOuygqg5KH99h+Y7HAtTZM2BFv99ciJM1
D1zo6A95p1kYKhTCHuBlFZUaUSavDZBTyGv+NtSJ7WuvDxerX7KoJlAl0WkmXEYk
YDFm+aKnFrjMVBczNwNgG1MerAuVEc+fplw26i1LnhHq0XBynhFWN9HyDCp8MkkZ
H+WP7MruaOYqbtNhwfSj4SDI7Aku+QLB0616kUA/bc9zKmCnsCArsrA6J2fiGyV3
geOhQ7I4ukaF2VE7F1wdOzvBB2ZGnhAWPXVYZXPRYooy6p2iI7ExgObAXxvn9cDG
EC7TMj5DCt/YUhL4WB0TYVql
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:58:45 2026 by rpki-client