
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier: 8tDcy5dZ5ffiq/86fiUmTfM/yPiV/zmInHw9mG2EdXw=
Subject key identifier: 7B:97:7B:FC:18:CA:05:7C:A3:6B:8F:9A:7E:1E:2D:77:B1:D4:EC:25
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number: 01E1
Signing time: Sun 05 Apr 2026 03:00:05 +0000
Manifest this update: Sun 05 Apr 2026 03:00:04 +0000
Manifest next update: Sun 12 Apr 2026 03:00:04 +0000
Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: a8A+SIfZZSS8Ri5VLHGyqEUSuz/jtiQS9GlqpecIrOY=)
2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Validity
Not Before: Apr 5 03:00:04 2026 GMT
Not After : Apr 12 03:00:04 2026 GMT
Subject: CN=69d1d035-bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:1c:8b:b0:42:67:8e:c2:e1:66:25:0c:1f:
bc:e7:20:a0:e9:c2:af:c7:28:0c:c5:2c:df:ac:db:
99:27:1f:4a:87:57:30:a2:f6:d1:c6:f8:e9:57:65:
a3:f3:3a:c7:6a:49:9c:25:61:d0:7c:62:17:7d:40:
4e:b5:66:37:e7:3b:32:5b:68:fe:11:7b:35:ef:e6:
f0:de:08:87:39:c0:ba:23:08:b4:f8:b9:50:9f:e6:
a8:cd:30:6b:90:50:06:d3:b6:65:b9:4e:80:4e:92:
fe:ab:b0:85:61:d7:98:bd:cc:73:67:d5:1b:4e:48:
33:9a:dc:1d:b5:5d:08:57:f9:25:ae:07:3c:d4:2c:
45:57:92:9e:2a:9c:39:e9:37:6e:84:61:df:7c:c5:
02:b2:a3:b0:b9:2e:bf:f3:d6:67:c4:77:29:b6:84:
fb:36:9c:3c:cc:8d:89:d3:1b:7d:ef:ef:cc:18:3f:
7c:5f:61:71:4a:8a:c7:da:ba:71:5f:f6:fc:44:9d:
c9:a2:79:42:de:a6:5d:34:ce:03:bf:0f:77:3d:2a:
a7:ec:92:84:54:f0:13:6a:c0:2f:32:6e:77:fe:f7:
99:07:d5:98:c4:7d:6f:a4:44:6d:24:3c:81:08:0e:
0a:24:20:ae:2e:2d:18:ac:87:c8:a0:ef:29:5c:95:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:97:7B:FC:18:CA:05:7C:A3:6B:8F:9A:7E:1E:2D:77:B1:D4:EC:25
X509v3 Authority Key Identifier:
keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:c4:63:11:a5:e2:26:27:3b:2b:76:31:30:b1:bd:15:e3:
d8:8e:d6:ee:92:33:7a:79:4a:ef:2d:92:22:e9:e4:c7:5e:d7:
7b:9f:7a:2a:ff:19:80:ed:a5:88:b4:e4:3c:f9:ea:47:88:a6:
e2:64:55:61:71:e2:c8:6e:2e:49:c5:63:7c:b4:a0:d9:a6:0b:
de:f3:b6:90:7b:71:41:70:1a:25:e7:51:ec:56:21:d0:74:49:
7c:dc:49:2d:e8:f0:b6:69:ce:27:82:96:a7:e3:c5:e6:e4:fd:
5a:c7:36:7e:eb:04:f2:21:5f:3b:b0:40:28:e2:4f:1d:7d:97:
06:25:86:c5:7e:bf:99:b3:6b:79:b3:98:93:fa:7b:1e:fb:61:
76:1e:4f:df:a0:32:27:50:6d:44:95:f3:83:50:f5:a9:fa:88:
7b:da:94:23:7d:04:dc:8e:01:e6:77:9e:1d:48:d4:16:3e:d8:
78:81:78:0a:45:e2:8e:95:2b:3b:66:a4:42:44:00:04:06:23:
fd:23:0c:1d:44:1d:46:3a:6b:7c:1e:47:21:46:2f:7c:86:05:
95:a1:46:23:a3:ba:47:c7:18:6a:97:18:12:0a:fc:3c:fd:1f:
b1:d4:da:8b:d6:9b:31:84:6c:95:07:06:72:e7:da:2c:7c:c0:
ed:3f:cc:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdBOEYxMTAvBgNVBAUTKDZEOTYwNjg4QjZERTcxNDFBNzIxODk4RTlFMDczRTE2
Nzc4RkVGMzUwHhcNMjYwNDA1MDMwMDA0WhcNMjYwNDEyMDMwMDA0WjAYMRYwFAYD
VQQDEw02OWQxZDAzNS1iZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1jYci7BCZ47C4WYlDB+85yCg6cKvxygMxSzfrNuZJx9Kh1cwovbRxvjpV2Wj
8zrHakmcJWHQfGIXfUBOtWY35zsyW2j+EXs17+bw3giHOcC6Iwi0+LlQn+aozTBr
kFAG07ZluU6ATpL+q7CFYdeYvcxzZ9UbTkgzmtwdtV0IV/klrgc81CxFV5KeKpw5
6TduhGHffMUCsqOwuS6/89ZnxHcptoT7Npw8zI2J0xt97+/MGD98X2FxSorH2rpx
X/b8RJ3JonlC3qZdNM4Dvw93PSqn7JKEVPATasAvMm53/veZB9WYxH1vpERtJDyB
CA4KJCCuLi0YrIfIoO8pXJVu+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHuXe/wY
ygV8o2uPmn4eLXex1OwlMB8GA1UdIwQYMBaAFG2WBoi23nFBpyGJjp4HPhZ3j+81
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E4Ri82M0FDRDVGNDU5
REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNVR25JWW1PbmdjLUZuZVA3
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0E4Ri82M0FDRDVGNDU5REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNV
R25JWW1PbmdjLUZuZVA3elUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKsrEYxGl4iYnOyt2MTCxvRXj2I7W7pIzenlK7y2SIunkx17Xe596Kv8ZgO2l
iLTkPPnqR4im4mRVYXHiyG4uScVjfLSg2aYL3vO2kHtxQXAaJedR7FYh0HRJfNxJ
LejwtmnOJ4KWp+PF5uT9Wsc2fusE8iFfO7BAKOJPHX2XBiWGxX6/mbNrebOYk/p7
Hvthdh5P36AyJ1BtRJXzg1D1qfqIe9qUI30E3I4B5neeHUjUFj7YeIF4CkXijpUr
O2akQkQABAYj/SMMHUQdRjprfB5HIUYvfIYFlaFGI6O6R8cYapcYEgr8PP0fsdTa
i9abMYRslQcGcufaLHzA7T/MLw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:04 2026 by rpki-client