
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json)
Hash identifier: 1VhjFPx5HPbxla25U/k9++VkoawiOzf4IHer0ooTFI8=
Subject key identifier: B9:B8:ED:14:5F:3B:A9:33:47:11:FB:CA:34:FE:0A:CF:79:DD:51:B8
Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
Manifest number: EF
Signing time: Tue 03 Mar 2026 06:02:41 +0000
Manifest this update: Tue 03 Mar 2026 06:02:41 +0000
Manifest next update: Tue 10 Mar 2026 06:02:41 +0000
Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: SmSHBFaxV2T8KOPI4YogogtcWBhgbdqEwAmiueBz1Tk=)
2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: nV38DqB6S2s+obaWtL39HR2W0RXsAZejFz8xEU6bYCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Validity
Not Before: Mar 3 06:02:41 2026 GMT
Not After : Mar 10 06:02:41 2026 GMT
Subject: CN=69a67981-373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:d3:43:bf:10:89:a9:b1:0a:10:2f:63:51:
9d:92:34:8c:fe:48:91:4c:b5:1a:ae:cd:2b:00:01:
f0:3c:35:d2:5e:d9:ca:2f:d4:59:cb:e8:86:b1:11:
8e:ce:ef:42:1f:66:7a:a6:cd:f4:ec:46:ae:a3:30:
c7:c9:e4:0e:bd:00:7a:24:7c:41:7e:01:bc:3f:d2:
cf:f5:f2:cd:96:91:a8:49:e1:8a:d2:83:40:a9:71:
13:5a:c4:2a:de:08:42:7e:93:c9:16:b8:3f:1c:7b:
c6:8e:f0:c0:26:e4:bb:1a:28:d0:52:9e:28:90:44:
eb:37:d2:8f:7f:44:60:bb:fb:db:6e:58:3d:9a:84:
b9:2c:3e:38:9e:6c:c1:85:8f:e2:87:f3:e0:63:0d:
ae:b8:af:74:f4:9a:b4:ad:2b:41:a7:25:0e:8f:60:
5c:39:c7:c1:48:9c:cf:ab:0f:70:5f:fb:37:c1:ae:
fa:f1:04:87:f9:77:e7:5d:f9:62:22:08:38:82:5e:
3f:b2:35:9d:97:c6:95:e0:ce:ff:10:c5:0d:9c:b1:
67:ad:08:22:96:15:12:1e:2e:90:90:8a:e9:b7:d6:
b4:02:b7:c4:20:6d:b6:ad:f8:ee:18:b8:46:4a:a0:
f6:ca:47:65:4a:5f:38:8b:0f:a3:6d:cf:43:8a:a6:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:ED:14:5F:3B:A9:33:47:11:FB:CA:34:FE:0A:CF:79:DD:51:B8
X509v3 Authority Key Identifier:
keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:04:c6:a5:7b:31:8b:3c:5f:20:64:97:cd:08:26:84:bc:76:
a1:9c:d1:8a:fb:22:df:26:3f:77:2e:b8:54:f7:7a:f0:72:a8:
9a:c1:69:ce:d2:8b:79:e4:e9:a7:18:72:e0:ce:df:d5:72:c7:
ee:f5:6e:2c:09:9b:5a:10:a1:a2:88:d1:d2:3c:a2:00:f7:a6:
e3:a6:b7:35:18:7f:88:91:f9:a9:eb:79:5b:13:9e:58:38:e6:
6d:91:a5:94:98:51:bb:55:6f:7c:b9:61:7a:93:1d:2f:4f:83:
fc:db:e3:b0:d9:57:07:c2:e2:60:b4:dd:51:8d:2c:f4:1c:ab:
58:80:43:17:5e:5e:c7:7c:1c:15:ab:f4:26:63:05:2b:54:2e:
9e:18:3a:22:b1:3e:a6:46:83:77:ce:f5:03:00:a8:2a:6f:5b:
5f:19:33:b9:97:c4:41:18:51:18:57:66:0e:33:68:6c:ac:79:
3d:60:22:ec:5e:7e:d2:d0:12:46:b5:0d:83:e2:49:00:8a:e5:
5a:a2:cc:a6:3c:7a:56:c9:7b:cc:8b:42:13:e0:9d:cc:2e:cf:
95:98:74:dc:63:fe:d2:a3:d7:93:22:02:03:bd:75:c1:79:8d:
86:00:2a:f1:b6:4b:f3:75:e8:5e:b1:c7:1f:ef:de:f3:23:4d:
16:48:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:30:33 2026 by rpki-client