
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier: JXUovlhcxBjNGx37snXwWiRqb4UcBv8SjPs4V+Aczyw=
Subject key identifier: 7D:F5:08:BE:A2:AB:B7:71:12:BC:49:FA:7B:5B:4A:F5:5A:6B:C2:37
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number: 0155
Signing time: Mon 03 Aug 2026 06:25:51 +0000
Manifest this update: Mon 03 Aug 2026 06:25:50 +0000
Manifest next update: Mon 10 Aug 2026 06:25:50 +0000
Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: p+Ma1hEIpPT+EJ/Vuxb5VVhegkMJ8yU7q4ENWs80fSM=)
2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: N8OST72L0V0eTFnYcjzgV/oZzJ5hZOrN4k5ZtWUp5Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 06:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Validity
Not Before: Aug 3 06:25:50 2026 GMT
Not After : Aug 10 06:25:50 2026 GMT
Subject: CN=6a70346f-0c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:74:9b:ec:e7:39:53:75:15:d0:91:77:d5:
e6:f2:80:7f:88:16:61:a2:97:25:cf:d0:ef:ef:9d:
03:b0:f3:ff:2b:1e:3a:16:58:63:bd:63:a3:85:c8:
52:5e:cc:43:49:3b:59:4f:e5:c2:9d:c6:04:a6:eb:
bb:66:76:b2:2b:8b:b8:6e:f5:24:88:5e:61:e9:36:
8b:f3:6f:b2:f3:a6:dd:41:4c:ae:e0:2a:9b:a8:a1:
1d:7f:6f:52:e1:09:88:45:4d:a5:21:1e:cf:23:cf:
2f:31:36:9d:bd:f8:cd:8a:97:cd:00:62:5e:86:2a:
81:fd:43:17:40:85:0d:79:e0:07:13:ae:6c:f6:56:
73:24:c5:85:cc:dc:c1:14:9f:07:6a:d1:69:db:69:
c9:a5:8a:37:16:ea:b2:fa:c1:4a:6d:3f:47:a5:68:
70:45:12:91:1d:d1:21:fc:c6:7d:da:f2:59:7d:d4:
6a:d5:07:b1:54:7d:41:de:3f:4d:d0:7a:01:20:10:
98:ef:69:52:74:7b:dc:bf:14:7f:4d:14:3b:cf:26:
65:bc:4d:32:3f:46:31:a1:a7:ab:5e:e7:ae:d3:dc:
0c:9b:b9:c3:36:34:d1:d2:3b:0a:c8:00:85:51:65:
54:71:4b:ba:ea:0d:f6:53:d9:df:71:14:5b:27:92:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:08:BE:A2:AB:B7:71:12:BC:49:FA:7B:5B:4A:F5:5A:6B:C2:37
X509v3 Authority Key Identifier:
keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:55:b7:79:a3:84:c7:c4:b6:cb:72:78:16:e0:d4:73:67:07:
e1:e1:5b:66:f3:1c:cf:bf:74:82:74:ab:07:56:48:40:cd:e2:
a1:b0:18:42:36:5a:25:5d:dd:d4:45:23:9c:4b:90:7f:d1:c4:
4b:55:e5:fc:a4:47:d6:9c:b9:0d:88:e1:21:a9:21:36:29:34:
cf:d9:b8:8f:b2:21:6e:7e:58:ef:c4:c3:70:31:e5:15:a5:ec:
4a:e7:8b:a2:b1:87:43:0a:79:2d:5d:c8:51:33:d9:99:34:68:
23:a9:06:74:de:aa:a2:48:6f:17:c2:85:6c:89:d8:97:b9:ec:
de:e9:21:4d:93:af:06:33:67:a5:00:bb:49:bf:f7:85:49:23:
bb:64:8e:af:7b:f6:71:ba:02:cd:6e:43:59:59:7a:cc:7f:c3:
71:9e:45:fa:b7:73:39:47:ce:ec:78:41:9f:46:fb:9d:98:75:
f7:0b:6a:ad:f3:ed:e7:0e:5f:ce:c7:8f:cb:65:a1:d5:1f:97:
0f:41:76:63:14:1f:cd:3f:71:12:c2:c1:72:cd:db:e8:3d:79:
42:66:76:a0:bd:28:38:3a:a1:89:88:ea:e3:0a:6a:49:d7:39:
6f:bf:f1:23:4f:0b:b5:98:ef:ea:0a:d2:62:3a:19:b0:97:7b:
29:41:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:46:36 2026 by rpki-client