
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier: sbGlqhGX+7gEk/CwWyhLsHbIl1liBO6VpTimiQFZSw8=
Subject key identifier: F9:B5:49:B9:0E:B9:A4:BC:5C:7F:4D:E5:25:67:1A:CD:4A:DC:24:FB
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number: 0202
Signing time: Mon 05 Oct 2026 03:30:25 +0000
Manifest this update: Mon 05 Oct 2026 03:30:25 +0000
Manifest next update: Mon 12 Oct 2026 03:30:25 +0000
Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: NxK3YqMys2k//M3MevpS60E+hfmlvZRg/BHwt4LNiTs=)
2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: MuFeUXJQMqi0fVou2JntsqZgqjdBB8a9imttA6TArYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Validity
Not Before: Oct 5 03:30:25 2026 GMT
Not After : Oct 12 03:30:25 2026 GMT
Subject: CN=6ac319d1-4101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:20:85:78:59:45:27:9c:68:08:ed:5f:fe:
88:a9:52:9b:97:84:0f:38:9c:ef:8b:8d:2d:19:b8:
31:c7:cd:21:94:84:72:61:3b:08:92:2f:5e:2f:69:
21:62:32:b3:5c:a3:c6:53:f9:11:2e:b1:5c:92:3b:
ba:28:b9:6a:a5:48:22:b6:64:6b:fd:77:2a:58:3c:
f2:9e:af:f3:d1:cc:3e:10:97:65:48:b8:f4:2c:cc:
21:c9:5b:86:ab:61:44:70:35:1c:08:4d:58:c4:c0:
b1:08:52:20:13:80:f6:50:f8:78:03:70:dd:e2:3f:
d6:47:9f:5f:8d:e3:ae:41:85:25:7b:a9:b9:e4:fb:
d2:54:fa:04:b4:73:3b:59:6f:aa:d4:42:bf:73:51:
e7:28:9e:ef:b4:e9:e6:01:95:19:bb:44:3b:ad:21:
fc:bc:13:8d:d5:fd:2b:38:18:ba:e6:9d:78:ff:1f:
e2:f2:4a:dd:5a:7f:1a:fa:39:f2:24:74:20:fe:ca:
1a:fd:ea:27:dc:34:f2:d2:1c:88:3b:be:ea:68:df:
c3:0d:69:d7:27:9e:62:43:86:d9:15:31:27:6c:ae:
56:a0:a7:bc:b8:03:17:af:ca:34:76:ef:dc:54:ce:
dd:08:02:81:d9:b9:e2:e1:91:1d:1b:ed:97:e2:5d:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B5:49:B9:0E:B9:A4:BC:5C:7F:4D:E5:25:67:1A:CD:4A:DC:24:FB
X509v3 Authority Key Identifier:
keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:45:33:89:8a:53:fa:20:70:59:ce:11:02:3f:ad:c9:e6:09:
2b:75:8c:1f:93:82:75:84:86:6f:ad:b0:d0:37:c4:dd:bc:02:
36:fc:2d:bb:51:d4:d4:9c:86:49:c8:ec:5e:f1:51:9d:d3:b6:
3a:b7:c6:1e:95:0d:3f:49:4b:90:87:4f:d4:ed:b9:40:ba:c4:
87:c9:50:36:a0:9b:28:61:ea:6e:80:53:89:05:c9:f1:a1:82:
0b:3f:34:6b:06:b0:a5:9a:b3:4c:54:3d:e3:08:24:3c:f1:20:
24:6d:9c:4c:9e:f2:00:b4:8a:4b:33:ae:d4:96:83:f3:1d:21:
a9:f2:09:a8:ca:9d:1c:05:1a:b4:d8:9d:54:2b:bf:db:48:bb:
f6:85:e9:62:bb:2a:9b:bd:06:de:93:aa:6f:ce:62:97:c6:31:
e6:0e:01:29:68:a4:07:df:86:f3:e9:4d:52:d1:a7:cb:66:54:
c2:7b:f6:4d:f7:33:9d:a0:f4:2d:3b:d3:21:d9:f1:e8:e2:ee:
50:ea:0c:67:ff:5d:da:94:8b:df:44:8f:cd:ee:b2:67:88:21:
7a:8c:73:f6:8a:42:4e:35:66:ff:5a:fa:cf:5b:c7:b3:4b:d6:
e3:8b:cf:ad:4f:65:50:62:51:89:92:58:2c:0c:cc:f9:95:dc:
2a:33:01:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx
N0U0QzU3OEEwHhcNMjYxMDA1MDMzMDI1WhcNMjYxMDEyMDMzMDI1WjAYMRYwFAYD
VQQDEw02YWMzMTlkMS00MTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstsghXhZRSecaAjtX/6IqVKbl4QPOJzvi40tGbgxx80hlIRyYTsIki9eL2kh
YjKzXKPGU/kRLrFckju6KLlqpUgitmRr/XcqWDzynq/z0cw+EJdlSLj0LMwhyVuG
q2FEcDUcCE1YxMCxCFIgE4D2UPh4A3Dd4j/WR59fjeOuQYUle6m55PvSVPoEtHM7
WW+q1EK/c1HnKJ7vtOnmAZUZu0Q7rSH8vBON1f0rOBi65p14/x/i8krdWn8a+jny
JHQg/soa/eon3DTy0hyIO77qaN/DDWnXJ55iQ4bZFTEnbK5WoKe8uAMXr8o0du/c
VM7dCAKB2bni4ZEdG+2X4l1j+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPm1SbkO
uaS8XH9N5SVnGs1K3CT7MB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0
MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM
bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvUUziYpT+iBwWc4RAj+tyeYJK3WMH5OCdYSGb62w0DfE3bwCNvwtu1HU1JyG
ScjsXvFRndO2OrfGHpUNP0lLkIdP1O25QLrEh8lQNqCbKGHqboBTiQXJ8aGCCz80
awawpZqzTFQ94wgkPPEgJG2cTJ7yALSKSzOu1JaD8x0hqfIJqMqdHAUatNidVCu/
20i79oXpYrsqm70G3pOqb85il8Yx5g4BKWikB9+G8+lNUtGny2ZUwnv2TfcznaD0
LTvTIdnx6OLuUOoMZ/9d2pSL30SPze6yZ4gheoxz9opCTjVm/1r6z1vHs0vW44vP
rU9lUGJRiZJYLAzM+ZXcKjMBrQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:27:38 2026 by rpki-client