
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json)
Hash identifier: TbMMZ5zPlZdoZ0HGnWGi+tXf2tjaqDr2CiflJyLbvo8=
Subject key identifier: 44:92:89:AB:43:82:09:14:1B:61:61:CE:EC:BF:03:94:AA:7A:70:E7
Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
Manifest number: 0141
Signing time: Wed 07 Oct 2026 05:55:28 +0000
Manifest this update: Wed 07 Oct 2026 05:55:28 +0000
Manifest next update: Wed 14 Oct 2026 05:55:28 +0000
Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: 9Z1M/AqPd/EILkHF3VuuSZNfay2+/XCuqJCOxAk7mzA=)
2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Validity
Not Before: Oct 7 05:55:28 2026 GMT
Not After : Oct 14 05:55:28 2026 GMT
Subject: CN=6ac5ded0-273a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:a2:d2:7a:86:c3:62:71:05:56:a6:ea:31:
01:5a:af:a2:d8:ff:4a:a6:41:18:cf:d3:e9:d4:5c:
5a:b2:6b:0c:4e:ef:ab:4c:5d:5e:b5:6d:7a:55:3d:
ed:33:18:79:7c:2b:b6:e7:38:ec:ba:f2:4f:f8:7b:
26:4b:b0:f7:8e:c5:0d:a1:90:57:4c:3e:f6:85:e1:
6c:3f:b8:f1:d3:cc:b3:c0:0a:08:70:6b:42:35:bd:
e2:c0:31:a1:19:69:fd:a8:d9:68:ff:1b:d7:7f:6f:
e0:dc:f8:71:de:e5:70:1e:e7:d2:1b:37:0a:08:01:
b0:fd:a9:e8:19:9e:e2:c7:87:74:0c:42:6b:0f:18:
89:90:65:3e:91:ef:92:9b:d4:33:92:67:23:e1:4f:
7a:2a:7a:34:b7:84:dd:7d:2f:41:91:2b:1f:d0:a7:
09:1a:06:40:59:1e:ba:13:2a:e2:1f:81:7b:72:48:
35:c6:68:bd:2f:d2:2b:67:5a:7d:3f:f6:93:91:c4:
1d:61:b4:37:f7:a5:82:a2:57:92:11:24:75:fb:48:
ae:01:52:fe:16:3e:5f:a9:aa:0d:53:96:b4:31:ab:
a6:db:d3:84:b0:6b:d7:9a:bd:03:df:37:0e:ff:07:
d3:e5:5c:9c:b4:79:e0:01:83:0f:66:c8:6e:0a:59:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:89:AB:43:82:09:14:1B:61:61:CE:EC:BF:03:94:AA:7A:70:E7
X509v3 Authority Key Identifier:
keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:cb:01:0d:c6:89:fc:84:a9:14:57:3c:2a:ba:01:92:f5:cd:
c7:14:67:76:f1:12:a2:6e:30:c2:9a:c0:7a:bc:34:f6:05:34:
f2:ba:c9:96:1b:42:10:82:a6:8e:87:5a:a8:e0:92:0f:b6:aa:
89:c1:ed:d3:41:5e:ae:91:55:c3:56:0d:f7:9c:1f:4b:04:7a:
4a:e2:0c:b8:26:e9:49:bb:15:f9:47:e3:89:47:db:a4:56:e8:
a8:26:85:12:1f:a7:3b:e8:49:92:71:1f:34:96:4d:e7:26:70:
16:47:55:84:d8:65:a4:f4:77:5e:3c:31:85:58:72:ce:87:e6:
2d:20:fd:77:72:6a:58:45:d0:35:ea:f8:d8:7e:0a:94:79:c8:
34:76:6d:8e:ae:aa:91:e8:cc:28:f1:1c:2a:c9:2c:96:08:9f:
fc:2b:98:d0:46:27:b6:f8:8b:91:fa:87:a2:b0:4d:27:0d:3a:
90:e1:d6:7d:fe:56:74:85:13:d1:77:49:8a:87:53:43:0c:39:
f9:83:0f:27:e5:f2:a6:8f:53:6e:26:c3:1e:f8:d1:b2:06:bd:
2e:a5:f5:13:7b:f5:44:c5:74:94:a0:12:60:a2:60:74:5d:a2:
1e:18:0e:73:3f:32:ec:3c:97:59:5e:64:e5:6e:1d:f3:d0:be:
6c:11:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:17:39 2026 by rpki-client