
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json)
Hash identifier: a7XwqBq04ZyMJwNyLwba+86T4DMJQkIaTtFhxaYobwk=
Subject key identifier: 01:49:4E:6B:3F:84:57:D1:CA:B0:B5:6C:18:B9:5E:62:BA:E3:0A:C7
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial: 0463
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
Manifest number: 045C
Signing time: Mon 01 Jun 2026 00:52:16 +0000
Manifest this update: Mon 01 Jun 2026 00:52:16 +0000
Manifest next update: Mon 08 Jun 2026 00:52:16 +0000
Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: N3JONsj4zwSVB3mb33/MnKxu7NF45Usb01QNus9gm8c=)
2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: QHGUM82zhuPv35Kjoao2FUx1+4roXHxbwl+YxAAtRCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 00:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Validity
Not Before: Jun 1 00:52:16 2026 GMT
Not After : Jun 8 00:52:16 2026 GMT
Subject: CN=6a1cd7c0-2ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:23:b0:24:45:b1:8f:28:82:eb:48:b9:cd:
41:0a:02:0b:66:ac:b1:62:d9:a5:84:20:f4:b5:81:
0d:73:5c:81:bc:77:cf:68:c6:6b:fb:58:06:4c:9f:
d8:9a:57:85:27:f7:9a:84:9b:49:a3:77:12:00:e3:
86:c1:85:10:01:4d:61:79:74:d9:30:a5:d9:85:92:
94:47:5d:27:90:8e:eb:3a:08:74:f4:d5:69:54:b1:
38:0c:ca:90:d4:87:a4:7e:05:f6:b7:e0:c9:72:33:
d1:ba:cf:81:c8:2c:d5:a9:a0:1b:57:0d:7a:10:21:
43:4c:30:82:8d:f8:43:ad:ed:f1:b0:1e:0c:f0:a5:
ca:77:7f:00:0d:66:5f:ca:f7:6a:b6:29:4b:9b:09:
0f:8a:26:59:78:7a:e0:7f:5e:80:ba:75:d4:ff:46:
28:55:2f:ef:4d:76:c3:c5:c8:9e:91:f3:79:6c:07:
3c:c0:89:21:6e:0c:40:36:d4:38:13:e1:3a:ad:5f:
0a:fe:bc:a9:96:11:68:69:cc:bd:68:5c:5c:38:03:
c9:a7:f2:10:48:ba:c5:3d:8e:ce:75:a2:80:03:80:
e1:26:2e:73:1c:83:8e:0c:5e:8f:5a:ee:f9:a4:15:
3f:88:8a:16:3a:6c:93:3a:a5:c7:31:fa:e8:4f:77:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:49:4E:6B:3F:84:57:D1:CA:B0:B5:6C:18:B9:5E:62:BA:E3:0A:C7
X509v3 Authority Key Identifier:
keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b3:f0:a4:f8:01:98:c0:77:a5:7e:d7:47:51:f9:d0:06:e2:
4e:72:fe:0a:c9:6b:1f:6d:69:57:fe:5d:10:87:ed:ef:ee:2c:
ae:b2:5d:e5:f4:07:a0:94:d7:59:97:ff:79:a8:a0:a8:ff:41:
1a:9f:3f:64:13:1c:00:97:00:47:8d:87:59:74:22:94:f6:bb:
44:70:7c:f8:cd:c4:4f:6a:4a:d6:a5:ac:d7:3e:47:97:33:b2:
ac:ba:e6:ec:1f:0b:56:4a:19:21:96:20:91:1d:07:76:05:ee:
66:37:61:67:c9:b9:06:d3:59:07:89:c4:f5:5e:db:a5:4e:a0:
2f:e8:fd:3a:9b:18:c9:8d:6d:e2:8e:b9:37:d6:59:e2:5e:22:
2c:42:07:85:b3:fd:e6:54:76:a0:e1:61:22:79:7c:45:79:70:
01:06:cc:6d:1b:51:20:fd:eb:42:34:e3:ca:e1:6d:d9:c4:c0:
b5:42:ca:03:b5:3a:f1:74:76:37:c1:cd:a8:6a:8d:49:be:7c:
15:26:7b:f1:cd:c2:2f:76:d2:7e:b5:bb:cd:dd:ba:8b:05:10:
10:e6:ed:ae:2c:4e:1f:56:39:8c:14:0e:01:e9:67:58:78:c3:
32:dd:26:0b:76:d9:5c:cd:12:02:38:8d:ed:ab:9c:78:35:9d:
f1:5d:4f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:20:41 2026 by rpki-client