
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json)
Hash identifier: lKl/hFVE3xMuPDvBQZjGgPvu6uEN7fpifA1SckSJvPo=
Subject key identifier: D8:64:40:3A:EB:AB:92:B3:8F:17:15:99:EB:A8:86:DB:4C:F5:F8:E3
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial: 0446
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
Manifest number: 043F
Signing time: Sun 05 Apr 2026 00:02:13 +0000
Manifest this update: Sun 05 Apr 2026 00:02:12 +0000
Manifest next update: Sun 12 Apr 2026 00:02:12 +0000
Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: eZ1LrN+Dm7YFQu+DDrkIVv7+iBph/Aji4LaQlX+uq9M=)
2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: QHGUM82zhuPv35Kjoao2FUx1+4roXHxbwl+YxAAtRCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094 (0x446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Validity
Not Before: Apr 5 00:02:12 2026 GMT
Not After : Apr 12 00:02:12 2026 GMT
Subject: CN=69d1a685-cbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2d:7a:6c:76:6c:e4:b1:f4:4e:43:b7:b3:8f:
5b:0a:7b:f3:45:1b:9d:7c:eb:aa:48:25:9c:07:d2:
ac:65:56:69:d3:c1:a9:02:11:20:de:fb:90:ff:01:
aa:83:19:ec:33:cc:9f:e7:5b:f1:e2:e5:0e:ba:65:
0d:4b:45:0d:1c:f4:67:c1:e5:4f:08:91:74:3f:b8:
b8:86:67:71:e7:24:52:46:b9:5a:30:d4:6b:36:b2:
33:cd:1b:13:57:1c:05:07:68:3e:29:ed:b4:44:1b:
34:63:da:70:e4:81:72:2e:b3:83:eb:a4:07:0c:d5:
d6:2c:30:72:d7:25:cf:c3:bd:31:85:0d:b0:20:a8:
50:5c:e2:0e:d8:f3:f3:7c:3f:47:dc:91:76:d6:9d:
db:a4:62:a1:74:2f:1d:03:e5:1c:b9:ef:f1:9a:3d:
17:4c:79:27:60:f0:51:f7:5a:c7:0c:e4:cf:84:0a:
d1:b3:ee:5c:30:2e:5b:b8:06:6b:8f:2f:e0:dd:43:
74:b0:e1:f1:4b:bd:41:50:b4:9e:15:50:45:2c:1d:
93:92:06:a6:cf:2f:1b:2c:2e:5d:2a:13:c9:10:61:
77:fc:c3:7a:74:cd:71:d3:36:2e:72:85:d5:26:f9:
67:70:9f:64:e8:d0:86:15:b4:4d:20:2a:86:61:d6:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:64:40:3A:EB:AB:92:B3:8F:17:15:99:EB:A8:86:DB:4C:F5:F8:E3
X509v3 Authority Key Identifier:
keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:95:e0:5f:ec:fc:20:2c:4c:b7:bb:58:35:26:77:f2:6b:d8:
1c:8a:53:06:d2:d7:4c:57:3e:6f:54:36:8d:22:53:7a:07:a6:
c0:18:38:75:e3:35:ef:d2:f6:f5:2a:52:5c:13:d8:dc:63:c2:
b3:7f:2d:01:21:09:14:e7:aa:e7:c2:15:45:17:6b:42:0c:d7:
53:8f:4a:54:9e:9a:fe:ee:cb:20:ea:35:86:2a:47:43:2a:8e:
97:84:38:dc:2e:5b:20:f5:8b:a7:92:e9:07:94:69:79:d0:cf:
58:26:6a:b5:bb:3c:43:92:39:97:ac:d9:5e:f7:65:cb:d4:96:
eb:d2:f6:37:6a:73:e5:50:1c:f4:77:b5:98:ed:48:18:91:de:
9c:fd:3c:03:5b:d2:92:37:f7:5c:0e:ab:27:63:e4:b8:66:ba:
81:b8:da:33:eb:f0:21:60:a0:3a:8e:c7:9a:0e:02:f9:18:1b:
07:d8:04:31:6b:e7:c7:a2:e4:b3:fa:53:69:18:87:39:f9:17:
f1:fb:03:4c:9c:b9:ec:53:ab:ce:d1:40:8c:81:ac:cb:74:c3:
72:d5:63:c0:6e:64:15:1b:31:ea:be:02:92:f9:90:0a:08:e5:
8d:45:d1:08:4b:ae:53:3e:d4:62:e7:eb:d9:e2:4f:9c:ca:a4:
c1:ec:83:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz
RTM3RTFCQzEwHhcNMjYwNDA1MDAwMjEyWhcNMjYwNDEyMDAwMjEyWjAYMRYwFAYD
VQQDEw02OWQxYTY4NS1jYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7C16bHZs5LH0TkO3s49bCnvzRRudfOuqSCWcB9KsZVZp08GpAhEg3vuQ/wGq
gxnsM8yf51vx4uUOumUNS0UNHPRnweVPCJF0P7i4hmdx5yRSRrlaMNRrNrIzzRsT
VxwFB2g+Ke20RBs0Y9pw5IFyLrOD66QHDNXWLDBy1yXPw70xhQ2wIKhQXOIO2PPz
fD9H3JF21p3bpGKhdC8dA+Ucue/xmj0XTHknYPBR91rHDOTPhArRs+5cMC5buAZr
jy/g3UN0sOHxS71BULSeFVBFLB2Tkgamzy8bLC5dKhPJEGF3/MN6dM1x0zYucoXV
JvlncJ9k6NCGFbRNICqGYdZxHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhkQDrr
q5KzjxcVmeuohttM9fjjMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB
QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw
NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4JXgX+z8ICxMt7tYNSZ38mvYHIpTBtLXTFc+b1Q2jSJTegemwBg4deM179L2
9SpSXBPY3GPCs38tASEJFOeq58IVRRdrQgzXU49KVJ6a/u7LIOo1hipHQyqOl4Q4
3C5bIPWLp5LpB5RpedDPWCZqtbs8Q5I5l6zZXvdly9SW69L2N2pz5VAc9He1mO1I
GJHenP08A1vSkjf3XA6rJ2PkuGa6gbjaM+vwIWCgOo7Hmg4C+RgbB9gEMWvnx6Lk
s/pTaRiHOfkX8fsDTJy57FOrztFAjIGsy3TDctVjwG5kFRsx6r4CkvmQCgjljUXR
CEuuUz7UYufr2eJPnMqkweyDsw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:48 2026 by rpki-client