
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
File: bZSAzzKE0AK1kfXiHbESCX_OcLE.mft (raw, json)
Hash identifier: yuUQejgSAL56vBGdnos/qLYXLsC4LCNWewDPlosTxa8=
Subject key identifier: 53:1A:98:A1:77:56:A7:C8:76:71:3B:4E:80:C3:B7:B7:5E:BA:63:3E
Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
Certificate issuer: /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
Manifest number: 3C
Signing time: Thu 29 Oct 2026 09:19:17 +0000
Manifest this update: Thu 29 Oct 2026 09:19:16 +0000
Manifest next update: Thu 05 Nov 2026 09:19:16 +0000
Files and hashes: 1: bZSAzzKE0AK1kfXiHbESCX_OcLE.crl (hash: lR1LCcqyQ8y7+Vd+NGG537i9n64P6Gp7AozX4oMp1xg=)
2: 9035F5F07A4A11F1B8163F0086A30FBC.roa (hash: VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=)
3: kk8aRD5asQ84XiRhDQ4hreQ8Hkc.asa (hash: 7xNDhFxLgQU7zKgX3ZN4lOKOG19lMfG1qRvfW2vvAxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 09:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Validity
Not Before: Oct 29 09:19:16 2026 GMT
Not After : Nov 5 09:19:16 2026 GMT
Subject: CN=6ae30f94-6c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:61:66:cd:b2:78:77:f9:7b:c1:57:e2:de:
f2:4e:9a:60:71:85:a0:6a:46:08:b6:a3:5c:78:8c:
a5:49:51:ac:ee:e8:56:07:e3:73:54:02:14:e5:26:
21:e3:65:d8:d6:2e:8f:d7:3d:a9:a5:85:53:44:ff:
cf:66:d2:b8:23:e4:ba:ae:24:83:88:38:4a:80:84:
00:c9:2c:35:77:63:89:a8:c6:a5:f7:af:54:8f:d8:
d1:9d:30:8b:9e:96:66:a0:7f:1b:df:f8:69:82:54:
9e:cd:d4:1e:ca:c0:fa:a8:f0:b3:23:a0:f7:61:37:
0e:b9:12:0d:22:7e:d2:11:61:b2:28:8c:da:da:ba:
1e:5f:e6:d3:be:c4:65:e0:f6:64:95:7c:2e:95:d1:
8a:2e:5e:dd:73:4f:b3:b5:16:91:05:cb:7e:11:cd:
4e:b5:0a:94:0e:32:19:78:5b:d2:63:0d:33:52:d5:
6e:fa:b2:58:9a:77:5a:86:06:fe:31:1b:bb:5b:d1:
78:7d:98:a5:cc:d7:19:b5:16:d3:26:62:15:f5:37:
fe:e6:14:b9:39:49:ff:47:5a:b0:33:24:f4:7e:aa:
b6:8c:eb:9f:5d:6f:d1:8c:36:89:b4:c6:96:66:d6:
14:0e:47:31:41:d9:69:35:d1:94:22:94:29:09:87:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:98:A1:77:56:A7:C8:76:71:3B:4E:80:C3:B7:B7:5E:BA:63:3E
X509v3 Authority Key Identifier:
keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:ea:c5:eb:06:d0:fa:a3:83:65:ce:fe:2a:42:7b:a0:48:fb:
ad:52:65:9c:c2:18:cb:55:ab:97:5d:d7:ce:c4:c8:33:a1:91:
1e:90:39:37:a0:c1:5e:31:64:fb:5f:10:aa:35:04:f2:a6:2f:
4e:72:49:cf:f8:e4:9f:35:71:d9:db:42:0c:a9:82:31:17:4c:
14:6d:1d:47:8c:23:6b:92:4d:40:e2:37:3f:e7:0e:b0:7f:2a:
ea:7e:16:cd:f6:68:d7:39:9b:76:fa:66:16:80:da:77:74:83:
f6:4a:aa:f1:e9:8d:59:e4:48:7c:02:3a:c8:3b:dd:f8:55:54:
53:4d:cf:f4:5d:27:b5:11:f4:e9:f2:f3:32:ed:be:1c:ab:25:
c0:bf:30:ef:87:fc:68:5f:6b:6f:d5:39:f4:f0:8e:38:48:6e:
b1:f1:35:bf:b6:e3:0a:17:7e:4d:c6:6b:c1:ea:84:95:14:6f:
25:df:4d:cc:d9:49:15:95:fe:8b:44:12:0b:81:5b:03:d1:13:
f0:ac:87:3f:c8:1a:16:47:16:35:aa:aa:2d:49:94:56:a1:45:
5d:76:e2:e3:b7:49:63:93:3b:8d:82:01:4d:92:c6:09:d7:d1:
3c:46:6e:a3:2b:73:53:21:e6:a5:b5:77:93:71:cc:b8:c0:c3:
c4:d3:9d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 17:11:07 2026 by rpki-client