
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File: bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier: VTj5wRPFPeuXVLCBnxT2PletuDzhlfKNydaEmdBfXwI=
Subject key identifier: 90:DA:7B:64:02:05:7C:1D:C9:07:CD:AE:7C:D8:A8:E4:73:51:BF:87
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer: /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number: 8D
Signing time: Mon 05 Oct 2026 07:59:03 +0000
Manifest this update: Mon 05 Oct 2026 07:59:03 +0000
Manifest next update: Mon 12 Oct 2026 07:59:03 +0000
Files and hashes: 1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: uuCE6IG07tTz3J6yPSYQ+GNtwNxu25lBUVblhRFWN+o=)
2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Validity
Not Before: Oct 5 07:59:03 2026 GMT
Not After : Oct 12 07:59:03 2026 GMT
Subject: CN=6ac358c7-6f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:6a:c3:29:31:03:f8:c7:24:6f:35:4d:e1:
33:73:41:52:33:52:ba:a4:7a:ed:ca:07:fe:50:13:
cb:88:e8:2c:41:a6:e2:64:01:ea:e1:6b:06:72:fc:
88:a5:8a:ba:95:b0:aa:c8:13:41:86:15:c4:56:ab:
71:80:03:10:3d:9c:a5:aa:e6:30:4b:94:f0:41:cc:
ee:b4:7f:63:8f:2e:db:5d:b6:b3:b3:26:f9:af:e9:
3e:96:6b:2b:9d:72:31:61:39:54:f2:e2:2f:64:d1:
08:6d:23:09:9e:1b:42:4b:15:bc:7e:32:39:f7:c2:
12:00:0c:11:4d:fd:10:4d:dd:7d:a1:ea:52:00:51:
be:43:f5:cf:69:98:93:2e:65:31:f9:3a:c4:46:63:
12:35:80:ff:2d:14:fb:1b:e4:f1:49:b4:0b:f5:22:
63:b6:47:6a:5b:f8:fc:ec:2e:f3:50:1d:23:65:3f:
f6:52:ca:2e:d2:56:bc:85:d3:74:c9:00:25:63:0e:
16:ed:e7:f5:80:ff:47:4d:4f:32:c1:1b:4f:c6:5f:
66:e2:1a:e1:14:79:9d:6d:73:85:66:f9:dd:65:cd:
12:09:1e:54:b3:21:88:96:06:6a:31:c7:e6:72:10:
e6:60:2d:2a:29:3c:a1:e8:c5:88:f4:91:c5:73:df:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DA:7B:64:02:05:7C:1D:C9:07:CD:AE:7C:D8:A8:E4:73:51:BF:87
X509v3 Authority Key Identifier:
keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:aa:ca:35:fb:bb:37:77:ba:59:45:20:c6:48:b8:59:cd:11:
9c:f0:00:85:cf:7b:c5:4e:80:45:d5:c9:d6:7a:ae:d7:53:b3:
16:d3:64:5b:17:03:6c:87:9d:aa:fe:c8:54:a4:46:b8:99:9a:
c3:e3:0a:ec:85:d8:1b:18:a7:7b:65:14:fe:c7:ef:d7:13:51:
a8:43:98:41:55:3f:81:94:a9:82:c5:15:73:72:24:0d:f5:63:
75:5e:03:25:25:d0:94:b7:99:65:20:7d:68:9b:35:34:dc:b8:
11:a1:79:1a:b4:54:26:ab:05:d0:63:40:c0:b8:f4:01:b3:50:
32:1d:27:08:e5:ff:c6:cd:bd:72:d4:c8:a5:ad:55:2f:81:a9:
d0:fb:1c:86:68:a2:52:98:ef:18:a1:48:4b:33:d4:8f:21:01:
fb:58:97:6e:24:32:5d:c6:1f:a4:67:ed:06:d1:34:f7:ec:e2:
d9:17:ba:23:a7:66:1d:ce:e1:72:d3:96:d6:05:ab:fc:24:20:
c3:16:84:74:be:0a:66:87:0e:ee:18:26:19:f7:55:aa:af:5a:
b2:04:38:e4:68:cb:62:cf:c5:e7:f6:39:05:e9:2a:47:67:9f:
5a:8f:aa:52:e8:e7:92:44:80:95:e5:f4:90:59:d0:17:d7:31:
f8:be:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:52:22 2026 by rpki-client