
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json)
Hash identifier: l39dk/e6+uJcNv4UepNok/+FiQPLmsdhiB7cLtlpJHA=
Subject key identifier: A5:36:61:79:93:73:52:E9:99:F2:E3:A7:63:85:3B:69:F0:3D:2B:53
Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
Manifest number: 0163
Signing time: Mon 19 Oct 2026 05:45:10 +0000
Manifest this update: Mon 19 Oct 2026 05:45:09 +0000
Manifest next update: Mon 26 Oct 2026 05:45:09 +0000
Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: rKAR9QR7oex6D4lR6/k5Aj7oU53z8u4UV+RRSatEWgU=)
2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: nV38DqB6S2s+obaWtL39HR2W0RXsAZejFz8xEU6bYCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Validity
Not Before: Oct 19 05:45:09 2026 GMT
Not After : Oct 26 05:45:09 2026 GMT
Subject: CN=6ad5ae65-9a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:cc:60:7c:39:95:20:e9:fa:24:58:8e:91:
dd:f1:a9:36:c6:92:7a:0e:1a:1b:88:17:8c:c8:3d:
f1:b4:3a:b5:d9:a9:3f:ef:84:9a:39:07:2c:c9:3f:
9e:77:08:1f:cb:05:4f:13:67:98:c6:be:4c:ce:df:
27:6d:6f:05:b4:ee:90:fe:03:c7:fc:e8:a0:05:71:
49:65:9e:10:4f:b4:86:17:e3:3f:8e:ee:42:2d:5c:
5f:7b:c3:b1:97:43:c4:85:be:5d:30:8d:b7:f9:0b:
cf:da:77:4d:ae:65:fe:0c:df:10:65:9c:12:b1:23:
50:3d:b7:4c:ee:21:84:b2:53:2e:e7:c6:17:22:bb:
86:96:96:41:41:5a:c4:70:8d:00:ca:83:2c:55:83:
19:ba:a3:0d:2f:d8:42:e9:5c:39:cf:80:83:19:48:
6c:4d:04:84:38:81:03:77:39:c3:4a:32:dd:e4:af:
98:2e:1d:35:b1:a7:b9:cb:79:94:db:fd:0c:50:a7:
f5:0c:66:b3:bb:da:d9:93:3b:ad:06:6c:40:cd:52:
60:23:d8:bd:6b:c2:a9:e2:49:46:e2:40:dd:6c:5f:
67:13:3e:74:63:14:ac:7c:d4:4e:3e:d7:96:55:8b:
a6:48:48:2f:e4:25:86:82:5a:78:7b:6a:2b:1c:5e:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:61:79:93:73:52:E9:99:F2:E3:A7:63:85:3B:69:F0:3D:2B:53
X509v3 Authority Key Identifier:
keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:de:70:86:c6:fd:08:51:0f:39:97:e2:5f:78:d4:1a:35:46:
8d:9d:1b:bd:48:e1:54:a3:42:cd:73:b6:22:71:5a:d6:92:f2:
80:f2:61:1f:74:b9:2d:db:37:b0:df:dc:f8:30:ae:08:e5:8b:
34:49:d1:9c:15:82:ca:60:89:8b:4f:ea:8f:8f:61:35:f8:69:
97:6d:6b:c1:36:9e:21:92:93:05:f7:31:23:72:c6:d6:26:0e:
6a:ed:61:f9:a1:4e:06:b2:fd:9d:be:8f:a5:69:1d:4d:81:eb:
3c:cf:55:93:75:23:1a:72:34:33:ac:c4:d7:9a:32:9a:d4:da:
4d:86:41:6b:5b:a8:bd:a4:81:b5:b5:0d:57:c7:54:42:dc:1d:
47:70:28:ee:8f:92:ae:02:77:42:3b:68:97:a8:6a:46:55:ab:
38:fe:3a:68:1d:dd:0f:43:71:12:6a:7b:7a:68:c3:20:16:17:
09:c0:d3:c0:b3:e5:87:b0:af:ed:79:12:46:d5:3c:02:b1:66:
6c:af:dd:fd:e3:33:8f:49:c5:24:a0:a1:18:0f:bd:32:9f:a4:
99:d2:95:c3:71:9c:24:9a:62:9f:d9:e1:83:e3:09:74:a9:43:
e0:a0:18:ef:39:83:58:f7:9f:78:cf:6e:10:4a:e5:08:16:33:
98:f1:3d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:56:56 2026 by rpki-client