
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier: qv8R96Oe55y/DP01Aot+wb+8Vpbygv5mt5OPlgdNhBk=
Subject key identifier: 91:D1:49:1F:32:25:54:95:CA:C6:8C:E8:19:D1:F4:7C:AD:1F:C5:17
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial: 057C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number: 1B06
Signing time: Thu 10 Sep 2026 16:44:12 +0000
Manifest this update: Thu 10 Sep 2026 16:44:12 +0000
Manifest next update: Thu 17 Sep 2026 16:44:12 +0000
Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: JHc14LgYDe4pZhS8SktC3fCR9qyhL3Wrw1MoGUhZhmE=)
2: BB90B3249BE811F188B60C046311F970.roa (hash: adapqyoaMpriFk8shJ47WPubnDhRH3fPAQYXpJULaPE=)
3: D3BEF96E9DFB11F186DD6C154711F970.roa (hash: wF75SDUjVmi1kxBJeur6uM4CoOGCTkO9pOXi+iOZ0uQ=)
4: 5A46B5469BE811F1A1CB396A6211F970.roa (hash: htCWMQwYnAdNrZ7ue5iAAfX45+MA9QIuh6+oV7sF4po=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Validity
Not Before: Sep 10 16:44:12 2026 GMT
Not After : Sep 17 16:44:12 2026 GMT
Subject: CN=6aa2de5c-a2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:64:37:52:a9:ea:9e:fa:2f:f7:79:9b:bb:
7f:d5:4a:f8:a4:51:b3:89:ed:53:68:67:8d:eb:a1:
12:77:4f:a3:5f:5a:a1:f1:6e:02:c6:cb:e6:34:cf:
25:12:3b:40:98:98:5b:51:4d:96:9e:fb:f7:a1:15:
22:0c:f7:84:06:c8:9a:1e:fa:d4:b0:65:b2:4a:29:
0f:a8:dc:86:cd:97:ad:29:66:8a:9b:2f:50:49:69:
ce:c3:1c:cf:f0:86:b9:2d:82:8f:ad:5b:2a:47:1a:
b7:a6:ed:64:7d:bb:58:4c:4a:3d:2f:a9:29:69:c7:
b7:54:71:76:35:16:d8:30:4d:db:1a:fd:57:54:79:
af:49:08:fb:70:31:56:dc:9f:c9:30:8a:e6:5f:cb:
1e:46:f0:e6:f0:8f:73:ee:4c:93:c4:4f:7a:0c:08:
bb:3d:00:ab:ac:68:0c:45:39:17:39:51:01:a1:ca:
41:31:ad:cc:59:f5:b7:7d:f9:6e:46:72:7d:59:11:
a9:1f:70:7e:76:4a:3e:0a:75:e6:15:32:8d:80:00:
ef:17:44:24:b0:a3:e1:b6:73:ba:e9:db:06:20:1a:
4d:41:43:7a:d1:f3:a5:d9:42:87:c8:8a:9c:e5:ad:
8b:24:46:5e:49:2a:bf:7b:6d:e1:54:af:52:45:0e:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D1:49:1F:32:25:54:95:CA:C6:8C:E8:19:D1:F4:7C:AD:1F:C5:17
X509v3 Authority Key Identifier:
keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:00:0a:39:ad:e7:cd:7e:cd:df:5d:7f:2a:c7:ae:df:cc:
c2:fd:81:ff:95:fc:ac:37:29:23:58:e6:b7:e6:87:33:e3:4e:
0e:4d:d0:61:af:5a:03:96:83:c5:c2:00:e5:9a:43:2b:85:f7:
78:a4:5c:0e:b3:25:4a:65:ea:9e:06:9b:f4:92:64:a9:df:6b:
34:ea:a2:bc:1b:4b:85:22:16:e1:d6:be:35:d0:79:fb:06:f3:
fd:81:a9:65:f6:07:7c:17:af:32:fd:14:be:c6:11:94:ab:f0:
69:6b:ad:d8:e6:cd:fd:31:6b:1e:d8:ab:02:0d:25:81:cf:93:
4d:4f:a1:32:de:9f:02:fe:80:09:29:63:71:88:02:ea:86:8f:
65:f4:a2:8c:6e:54:b3:f5:42:1b:30:c4:ec:e5:68:41:55:13:
71:b4:31:8f:5c:99:26:bd:26:e2:5b:4a:b3:e1:f1:1e:04:ea:
f0:4a:1a:aa:65:dc:50:6c:cc:12:a0:d0:4b:3c:e3:30:f5:8f:
2a:80:62:60:a1:77:4d:28:29:77:33:c7:e2:2a:7b:ea:f4:33:
4d:7f:a3:3c:2a:3b:ca:46:9b:dc:df:11:4e:0b:62:3d:47:f9:
87:a1:c9:f0:8a:c5:1a:eb:37:84:d0:be:ea:96:77:c3:a6:e9:
fb:a2:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:29 2026 by rpki-client