
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier: yTO2vwEQr4+Qg49w/ZyQVC80VVUhf3KIuGqT/r+544s=
Subject key identifier: E3:96:FE:FB:02:A8:30:67:17:F1:2F:6B:23:ED:E7:16:58:96:75:F5
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number: 01EA
Signing time: Wed 19 Aug 2026 04:00:26 +0000
Manifest this update: Wed 19 Aug 2026 04:00:25 +0000
Manifest next update: Wed 26 Aug 2026 04:00:25 +0000
Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: Kn8CsNQd75tF5P38TbpMYeOI8NKBWSOFDi5l+3UpHbE=)
2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: MuFeUXJQMqi0fVou2JntsqZgqjdBB8a9imttA6TArYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Validity
Not Before: Aug 19 04:00:25 2026 GMT
Not After : Aug 26 04:00:25 2026 GMT
Subject: CN=6a852a5a-8b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:cd:90:cd:47:5e:94:8c:dd:b7:dd:47:e5:
0e:b8:cf:e7:cc:f6:76:7d:01:e4:ac:3d:80:e4:cb:
1d:76:49:03:9f:ac:c3:68:7f:a8:23:29:3d:22:70:
ec:9e:b0:02:d3:d0:c1:bd:94:46:d1:f2:44:ab:76:
78:f7:ab:9a:29:ca:6c:d8:55:bc:1c:21:5c:fe:9a:
54:9d:61:fc:fb:03:66:c0:50:ff:13:0f:f7:bf:f0:
85:ab:cb:85:b2:b3:59:40:e6:90:56:b9:66:7c:9e:
de:d2:66:c6:95:81:a8:2f:f7:67:a1:a6:e4:ed:99:
44:bd:63:e5:f2:7a:e9:f9:ab:28:11:19:66:4a:8b:
4a:4a:4f:9e:9b:4b:d0:11:04:76:4d:9b:dd:f0:87:
c9:f7:2b:21:49:47:bc:8b:bd:79:24:7b:06:e4:35:
78:ca:f0:c7:54:27:df:ff:f9:85:60:93:a7:bc:9c:
81:31:d0:06:5f:e5:e3:aa:dc:36:ae:96:8b:1d:d5:
82:5e:da:55:af:cd:9b:71:11:f3:b3:db:4a:9d:6a:
1b:bb:65:94:fb:e0:2a:79:be:6f:2a:a6:24:47:80:
63:77:9b:7b:ae:5f:e1:9a:0b:97:fa:89:3a:56:ef:
62:5b:62:87:54:83:55:45:9d:7e:84:e6:9b:78:a1:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:96:FE:FB:02:A8:30:67:17:F1:2F:6B:23:ED:E7:16:58:96:75:F5
X509v3 Authority Key Identifier:
keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:a9:df:43:51:a9:26:f0:d3:94:86:26:68:a7:37:38:0a:19:
95:0f:d9:94:56:93:41:4b:78:94:00:66:c8:e9:8c:90:03:6e:
58:09:4f:47:66:97:50:d5:c3:f5:1f:32:ce:8d:59:b3:06:52:
5e:16:ce:eb:30:84:bd:9d:5b:f0:fd:3c:e1:98:2f:79:62:9a:
a3:69:ce:94:7a:4e:12:48:01:16:9c:46:f5:c0:45:75:74:6d:
33:09:2e:c2:08:1f:5d:ab:b8:a2:b6:e4:df:dc:b0:78:79:5c:
70:ba:60:13:f3:d4:ef:75:80:42:16:1e:4d:19:5d:37:92:e0:
d8:b0:b6:3e:0a:54:12:b9:a0:77:9e:46:f4:da:8c:77:4c:45:
7e:a7:ce:70:eb:32:cc:96:7c:ad:c6:2c:7c:38:75:af:51:d9:
57:ec:ac:40:bb:94:fb:56:bf:de:e4:65:a4:d2:50:6f:72:0b:
b9:78:09:8d:46:69:f0:47:24:00:07:a4:0f:eb:37:95:f4:72:
5e:18:e5:be:22:74:1d:58:46:2f:3a:aa:78:38:0a:50:e9:38:
e1:4f:5f:d6:e5:3d:cf:11:cd:4e:c1:d5:74:9f:f7:71:bf:67:
dd:71:9c:04:c5:c5:4d:b1:cd:14:06:6e:5d:69:d3:7d:7f:df:
ea:a0:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:59 2026 by rpki-client