
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File: bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier: 3PmcQJG2xPSLyTelJGSa826mVsC54Lu0/F/0UJfp2WQ=
Subject key identifier: D8:6C:8A:92:4C:21:3E:A5:37:AF:B1:1C:94:6B:C7:6D:54:34:6F:27
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer: /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number: 58
Signing time: Tue 23 Jun 2026 08:26:53 +0000
Manifest this update: Tue 23 Jun 2026 08:26:52 +0000
Manifest next update: Tue 30 Jun 2026 08:26:52 +0000
Files and hashes: 1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: UACov7BfHT8irB9KbI9WedgUt4R7daAT/1MtHNBMk+I=)
2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Validity
Not Before: Jun 23 08:26:52 2026 GMT
Not After : Jun 30 08:26:52 2026 GMT
Subject: CN=6a3a434d-f310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:0a:3b:2c:8d:72:5a:49:9f:1e:43:7b:b3:
be:c7:09:a0:8f:34:df:f6:5b:3b:8f:4d:b9:f4:ad:
f1:38:88:d4:28:91:d1:f1:84:3b:1b:ba:43:8b:42:
e7:3d:77:2a:06:05:02:af:b2:f2:c6:32:19:cb:4b:
fb:3a:6c:ce:f5:a0:5d:e0:a8:1b:66:6c:e0:0d:5a:
db:c6:51:07:29:95:f5:68:e7:67:0c:5f:92:91:b4:
e1:f4:23:4b:0f:7b:af:86:10:17:e3:fc:31:93:0f:
d8:2c:53:f4:45:26:b2:e4:5a:b3:1a:74:ae:9a:46:
8f:9d:22:86:d8:d4:bf:e7:c4:80:c4:07:48:fd:57:
26:e6:4c:4d:ec:fc:41:a9:10:c2:cf:34:a7:1e:7c:
03:e3:bb:8c:82:8b:ba:cc:79:66:bd:c2:81:24:47:
27:b2:45:a5:82:0e:6a:b8:73:86:f4:04:3f:53:bb:
1c:af:f8:74:9d:72:88:dd:5a:c2:47:38:ef:2e:02:
00:e6:f3:bf:91:03:88:ea:b5:71:d0:9b:21:a6:05:
1c:c1:88:ca:ec:87:b8:2f:bf:cb:ff:68:4f:58:ee:
fe:94:4d:f9:81:82:b0:a6:3c:7b:7a:a1:ff:77:68:
4d:3d:16:35:90:9f:85:39:02:5e:0a:fd:7d:10:4b:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6C:8A:92:4C:21:3E:A5:37:AF:B1:1C:94:6B:C7:6D:54:34:6F:27
X509v3 Authority Key Identifier:
keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fd:a3:4c:ea:90:da:4f:49:3a:f2:a8:a5:6d:98:80:d9:54:
d9:d5:6a:70:bc:b2:94:ce:e1:e8:d4:5d:4a:ea:95:c6:85:1f:
38:df:c5:d2:0f:53:c7:57:7a:f1:cf:04:bb:0b:f3:9a:74:4b:
c9:e5:34:21:d2:59:8e:be:16:38:d1:cb:f3:d5:53:53:5a:85:
d7:3a:76:fd:fc:3c:a6:dc:d3:b8:7e:b0:a6:28:13:bd:e0:34:
8f:f3:85:47:40:ca:d5:df:a2:18:d9:82:de:24:96:c9:d7:ea:
6d:e6:45:30:1a:74:a6:fd:41:68:77:9f:3d:2e:31:66:ff:af:
48:45:27:f7:16:db:a5:9c:20:16:e5:57:b4:07:a6:3a:ca:cf:
43:19:eb:c6:65:70:29:61:31:8f:d4:1a:35:d6:f7:db:c0:b9:
75:ea:b5:f9:f1:10:87:ac:4f:3c:67:2f:5b:e1:d7:92:4a:05:
e1:88:26:9e:87:4e:d9:98:72:04:ac:07:1a:c8:05:4e:b0:ed:
67:ac:97:69:bf:d6:4f:b2:27:9b:e6:d4:ea:15:40:3a:57:9e:
fb:47:0a:e4:11:d7:db:97:61:34:7c:dd:9d:8a:cf:c6:0f:b3:
70:45:4d:06:9d:1f:0d:bd:e9:37:19:f9:d3:b5:ff:f3:07:fd:
00:05:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:11 2026 by rpki-client