
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json)
Hash identifier: ByZAyJ3jbsvbDl8BfJV/usLNMmtXLHjkSRJJ0D92yLY=
Subject key identifier: 0B:E1:6C:A4:35:7C:BD:6C:C0:DE:87:9A:8B:29:BE:29:67:36:15:40
Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
Manifest number: 0117
Signing time: Fri 17 Jul 2026 07:03:44 +0000
Manifest this update: Fri 17 Jul 2026 07:03:44 +0000
Manifest next update: Fri 24 Jul 2026 07:03:44 +0000
Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: 1UP4GvtBh25gxpslibSNAzpGjwIrCRKYVgRc9X0BzFY=)
2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Validity
Not Before: Jul 17 07:03:44 2026 GMT
Not After : Jul 24 07:03:44 2026 GMT
Subject: CN=6a59d3d0-d4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:d1:43:8c:e8:5c:b7:57:9b:7e:b6:00:03:
74:1e:aa:93:e2:b9:74:ac:75:16:f4:e1:72:94:8b:
59:1a:4a:7b:0e:6f:1c:13:f5:f9:bd:6a:32:5a:9d:
b9:32:6c:80:c1:cd:59:ed:ec:7e:67:94:c6:2b:81:
6f:40:20:05:8c:02:bd:37:25:5d:38:91:68:2d:ec:
e6:32:82:4c:59:33:73:60:88:5b:11:4d:33:71:6f:
e1:ff:15:25:37:fb:6a:9b:41:b9:2e:03:7b:9c:04:
de:44:16:da:89:f2:59:97:6b:b2:00:03:79:75:b3:
7c:21:bf:8f:51:ed:e7:82:de:1e:75:e0:a2:d2:1d:
53:46:72:b2:67:62:a0:72:50:09:45:60:47:d0:07:
c5:1a:46:e0:98:b8:82:34:2d:15:39:fd:b3:d2:71:
54:e8:95:8c:4c:a4:ee:e2:21:29:6b:b0:8f:6b:65:
72:24:28:5e:7a:6d:ab:53:8c:25:13:95:a1:83:c3:
e5:61:b0:5f:ab:26:9b:56:78:fb:e4:d2:6c:22:a9:
98:eb:7c:14:bc:6a:88:54:57:e5:27:d7:19:60:f4:
f9:3c:f9:bb:de:cd:b3:0a:8d:ae:97:70:5f:a8:9f:
26:02:d3:20:ae:a3:2a:74:73:cb:c0:fd:a2:fd:e0:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:6C:A4:35:7C:BD:6C:C0:DE:87:9A:8B:29:BE:29:67:36:15:40
X509v3 Authority Key Identifier:
keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:79:b5:1b:22:10:0d:65:f8:d7:fb:25:d6:50:a7:e5:45:34:
75:0b:17:70:ac:4e:d5:e6:21:27:9a:5e:e5:85:c3:a1:d9:0f:
4c:8b:42:25:f0:1a:c7:d4:3b:d7:99:9e:18:5c:cd:00:f5:62:
eb:f5:5f:47:34:f9:ca:78:f5:dc:8a:74:a0:ef:92:d3:d8:b5:
0e:8b:4e:7f:65:e4:e9:68:27:3f:08:39:3b:51:15:c8:6e:9d:
fb:92:25:26:8c:84:12:8a:c1:fe:77:37:73:d6:e9:d0:42:a9:
26:5c:06:c8:4d:22:77:b6:4e:b5:0a:12:4a:5f:37:ee:aa:b3:
73:c3:0c:3c:25:d8:0c:ec:c2:57:fa:0d:0e:f5:df:2a:15:2b:
24:04:88:4b:ba:b3:20:ef:42:05:63:ef:53:8e:99:57:4d:3c:
b9:bc:98:90:d9:00:fb:c4:3a:b3:37:4d:f7:1c:86:db:6c:9f:
c5:7c:ab:e3:43:e1:54:1f:ef:86:80:8a:b7:5b:a1:fe:ab:ea:
0f:1e:45:39:3c:f2:25:51:c8:91:f6:d3:4b:a0:d6:10:73:17:
0d:e3:a4:f4:e8:c5:7e:27:7d:ee:ce:53:a4:e0:e4:63:01:04:
7b:66:44:49:de:f5:9b:bf:86:4e:f7:3e:74:97:d9:26:c9:44:
d7:a3:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:13:09 2026 by rpki-client