
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File: bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier: 4kXV1yrnUPNmB9PUM1pC4CI7SKWDnuMeYNEYw/W5LkM=
Subject key identifier: 1B:CA:68:86:47:6C:01:15:07:25:A9:60:AB:BB:92:3F:C7:CA:91:9C
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer: /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial: 1037
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number: 102C
Signing time: Tue 06 Oct 2026 17:30:58 +0000
Manifest this update: Tue 06 Oct 2026 17:30:57 +0000
Manifest next update: Tue 13 Oct 2026 17:30:57 +0000
Files and hashes: 1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: DEzIjnoqO9V+f5qT6xMqSdlMKlsfB81wll5po3appxM=)
2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: +Mts4fsvfNPpR9wN95HnMuPMq0NdCSXUy9GV9X1mECY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4151 (0x1037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Validity
Not Before: Oct 6 17:30:57 2026 GMT
Not After : Oct 13 17:30:57 2026 GMT
Subject: CN=6ac53052-a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:8d:68:90:c7:92:06:63:2c:96:02:03:b4:
5b:04:d6:19:f2:a4:1f:6a:6f:5f:85:b6:f5:96:be:
27:bd:4d:b8:33:74:34:ad:b3:f0:ee:69:b0:93:6d:
85:8d:2b:a5:e0:da:4f:09:55:85:e4:d2:96:26:6b:
7e:10:3a:71:8c:f2:c0:2f:a3:bb:c2:f2:62:ea:9e:
65:3b:6a:89:e9:9e:4e:6a:0b:3e:d7:be:a8:6f:67:
34:61:03:9a:a8:d4:30:9e:c7:36:da:8a:31:8a:9f:
32:a9:58:84:8d:b5:24:72:99:f1:c8:14:c5:7e:4d:
95:96:11:cb:67:66:7e:d8:0e:ac:55:51:81:b5:38:
cc:03:a4:3c:c0:9c:fa:51:54:6f:51:f8:0f:a7:45:
dd:55:48:26:89:69:5f:41:ad:f3:f3:78:dc:8e:64:
19:3e:ed:e8:60:64:e3:8a:6c:7a:35:15:ec:e7:cc:
97:ab:70:31:12:ea:5e:09:c7:b5:05:c9:8a:2a:15:
a1:75:e3:86:53:8f:fa:05:0f:a9:b4:38:cf:83:50:
53:21:25:fa:5b:d2:53:4b:b6:1f:aa:44:b1:e9:11:
9a:87:8f:76:dc:05:ff:e0:09:3d:a5:97:cc:a5:19:
ab:f0:5b:7a:96:4b:b3:95:01:c8:f1:f8:23:76:96:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:68:86:47:6C:01:15:07:25:A9:60:AB:BB:92:3F:C7:CA:91:9C
X509v3 Authority Key Identifier:
keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:96:0f:03:b9:f9:db:cf:d1:f7:8b:cd:41:44:ee:f0:81:3d:
47:d5:8c:ce:26:94:9a:71:ba:cb:e1:47:e9:ae:71:36:7d:19:
48:22:15:81:c2:b1:4a:f1:f2:37:b7:8a:50:fe:a7:8c:77:91:
1e:88:50:d0:1a:3b:42:d5:58:98:43:bf:2b:bc:67:3c:35:5d:
7c:2f:8c:c5:99:61:e3:42:4a:c1:c9:0e:35:e7:b7:00:db:2d:
b1:da:14:c2:74:55:35:44:b7:a5:73:2a:16:0f:72:95:b4:e9:
e3:11:17:ef:d2:5f:f7:12:49:a4:39:e2:ad:8e:74:75:b4:3f:
3f:06:0b:2a:8a:18:c1:72:fc:ab:68:25:ca:82:65:75:2a:2b:
89:55:ba:85:68:4c:a0:bd:67:bc:2b:f1:8e:7f:3b:57:30:5c:
58:a8:d7:ef:c8:0d:d8:c7:d3:2c:6d:91:52:ec:f4:d7:a9:1f:
6a:7a:85:8d:2a:ae:80:4e:15:02:94:b3:ed:0f:88:23:60:49:
e9:d8:e8:c9:25:b6:c2:11:4c:92:27:3d:63:1e:89:02:70:2f:
c5:89:c7:f6:f8:7a:ce:ce:2a:bc:b9:d2:58:8d:52:04:2d:42:
6d:15:31:c1:c9:31:29:bd:22:c1:1f:37:f9:18:d4:80:0b:2c:
92:67:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:58:18 2026 by rpki-client