
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier: 3e/OrVj8lFQYZM24Jwhz5HHrVSEeqvTibhunsJtQ8Hg=
Subject key identifier: C6:FD:2C:75:91:31:8D:1E:F3:B0:62:6C:BE:25:48:71:4C:B4:22:FB
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial: 0557
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number: 1ACC
Signing time: Sun 26 Jul 2026 16:54:35 +0000
Manifest this update: Sun 26 Jul 2026 16:54:35 +0000
Manifest next update: Sun 02 Aug 2026 16:54:35 +0000
Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: HCSCv4H49M/syxvr+XoDWWc9dIHU0qCXGCJIUR9+T1s=)
2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: 4w5731lHYfGZnO+SC8VdKGR/fvzbDEpA8YsPdrr+1XY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 16:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Validity
Not Before: Jul 26 16:54:35 2026 GMT
Not After : Aug 2 16:54:35 2026 GMT
Subject: CN=6a663bcb-a40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:28:d9:5a:48:eb:9c:62:2e:ea:f9:9e:19:
a4:6b:22:3b:38:14:a1:f6:da:32:f1:03:81:fb:b8:
86:66:a1:e3:ba:db:25:61:77:c8:97:89:b6:ec:e4:
df:5f:b1:02:2e:3a:a0:ea:cc:ed:70:69:f2:88:3f:
39:19:d2:e8:c3:00:44:04:cb:bb:1d:a2:99:68:80:
3e:ea:5a:a7:26:b7:da:2c:a1:5a:a2:cb:1c:d7:04:
73:1a:45:5f:14:7a:fe:4d:83:d4:aa:ef:93:0e:4d:
bb:02:8e:c1:29:2d:bd:0f:a5:99:dc:be:d7:27:5d:
ab:8b:f9:57:9d:2b:e7:82:3e:79:31:47:52:c2:71:
c6:07:bf:f2:7d:57:69:67:da:61:6c:a8:61:f1:30:
a6:c9:05:45:35:25:4d:27:92:13:79:83:06:53:8c:
19:86:71:f3:f5:87:00:29:b6:ff:f6:e2:17:3b:66:
16:fb:64:31:15:bd:3a:a2:b4:ac:f1:2b:1e:d1:c0:
63:1d:4b:ee:43:7c:36:cf:3b:72:a6:67:6b:4a:15:
dc:5b:8a:22:ee:5d:59:63:95:7c:e4:bd:2c:f2:e4:
fa:fa:ae:0b:d1:c5:ef:d5:4f:ef:15:eb:57:7c:ce:
00:6a:62:57:21:4d:2b:fe:bb:4c:a7:ec:89:0b:14:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:2C:75:91:31:8D:1E:F3:B0:62:6C:BE:25:48:71:4C:B4:22:FB
X509v3 Authority Key Identifier:
keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:18:64:77:12:d7:3c:cc:fe:fe:3a:8b:d0:82:27:16:e8:23:
51:73:74:6a:b2:51:b9:23:51:f9:1b:7e:02:58:bc:e2:bd:ba:
0e:17:0c:b4:ea:28:7f:f9:1e:85:2b:1d:0f:f6:b6:0a:a2:b6:
f5:85:4d:aa:bc:47:7d:ce:09:d1:66:03:bd:65:0a:6c:71:39:
82:3e:3b:24:bb:7c:01:ac:64:7c:44:b6:2b:c3:ac:2f:00:5f:
42:00:5b:22:3c:a8:7e:73:08:bd:49:09:1e:b1:e9:4c:2a:07:
ea:10:4a:6c:74:62:67:77:9e:c1:a4:df:14:e2:0e:7f:2d:2d:
f7:69:c4:90:cc:9e:45:9e:53:c8:29:25:15:d2:a8:63:e3:ce:
cc:41:9b:eb:fa:62:80:7e:61:44:5c:95:ba:4a:a5:77:3d:c4:
63:be:48:fc:c0:68:26:0e:d3:c0:ec:e0:22:64:3c:4d:8e:17:
c2:7d:b5:1f:90:d9:5b:09:8c:35:60:04:d7:bd:b7:8b:51:8e:
81:b2:2f:cc:b9:91:84:ec:96:e7:15:f5:fc:2b:0b:69:c8:11:
5c:35:1f:60:68:d6:84:38:e3:7d:68:73:26:41:76:49:47:d6:
09:d6:98:93:68:8c:ba:18:a9:4e:b9:ff:c0:20:43:76:d1:f7:
ec:89:e1:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD
QjMxRDlCMTAwHhcNMjYwNzI2MTY1NDM1WhcNMjYwODAyMTY1NDM1WjAYMRYwFAYD
VQQDEw02YTY2M2JjYi1hNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1jko2VpI65xiLur5nhmkayI7OBSh9toy8QOB+7iGZqHjutslYXfIl4m27OTf
X7ECLjqg6sztcGnyiD85GdLowwBEBMu7HaKZaIA+6lqnJrfaLKFaossc1wRzGkVf
FHr+TYPUqu+TDk27Ao7BKS29D6WZ3L7XJ12ri/lXnSvngj55MUdSwnHGB7/yfVdp
Z9phbKhh8TCmyQVFNSVNJ5ITeYMGU4wZhnHz9YcAKbb/9uIXO2YW+2QxFb06orSs
8Sse0cBjHUvuQ3w2zztypmdrShXcW4oi7l1ZY5V85L0s8uT6+q4L0cXv1U/vFetX
fM4AamJXIU0r/rtMp+yJCxRDNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMb9LHWR
MY0e87BibL4lSHFMtCL7MB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw
NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0
UHJzekFnazd0WGJMTWRteEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfxhkdxLXPMz+/jqL0IInFugjUXN0arJRuSNR+Rt+Ali84r26DhcMtOoof/ke
hSsdD/a2CqK29YVNqrxHfc4J0WYDvWUKbHE5gj47JLt8AaxkfES2K8OsLwBfQgBb
IjyofnMIvUkJHrHpTCoH6hBKbHRiZ3eewaTfFOIOfy0t92nEkMyeRZ5TyCklFdKo
Y+POzEGb6/pigH5hRFyVukqldz3EY75I/MBoJg7TwOzgImQ8TY4Xwn21H5DZWwmM
NWAE1723i1GOgbIvzLmRhOyW5xX1/CsLacgRXDUfYGjWhDjjfWhzJkF2SUfWCdaY
k2iMuhipTrn/wCBDdtH37InhCw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:22:35 2026 by rpki-client