
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File: bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier: naTbzifbQZf636SNiYfcK9CnFBJgAjjY0nVJnKopaVo=
Subject key identifier: EF:27:B7:F2:CE:6F:8D:61:B1:C2:0A:6C:5F:46:33:68:58:F6:BD:4D
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer: /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number: 37
Signing time: Fri 17 Apr 2026 08:18:11 +0000
Manifest this update: Fri 17 Apr 2026 08:18:11 +0000
Manifest next update: Fri 24 Apr 2026 08:18:11 +0000
Files and hashes: 1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: dQww6sxtFmp9CrNXlsf4BWRn675bJYDAD7yZjeAAsjw=)
2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Validity
Not Before: Apr 17 08:18:11 2026 GMT
Not After : Apr 24 08:18:11 2026 GMT
Subject: CN=69e1ecc3-5092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:0c:0d:d2:da:1c:d5:11:68:7d:70:c7:21:
76:d1:24:e0:fd:01:05:f8:c7:95:04:4a:ee:e2:9e:
86:90:10:a6:cc:66:40:da:4f:19:6b:c3:70:94:5e:
15:6c:ac:b7:aa:f9:c0:73:fd:1a:91:3d:fe:31:04:
39:11:28:4b:a6:4e:43:a5:67:42:f1:77:ac:75:88:
a6:6f:5b:b9:b7:9e:1e:80:e9:27:f1:a0:6b:14:54:
b5:00:3e:b9:d9:03:c5:76:ef:bf:18:e8:6b:28:1a:
fd:fd:4b:d6:ca:bd:b6:b0:2d:95:8a:15:db:31:74:
14:8c:0e:a5:c1:b4:13:f9:6f:ba:f4:42:01:bc:31:
fc:ef:22:b0:d4:7d:0a:d9:29:c8:fe:5f:76:7b:4a:
65:4c:bd:42:4a:83:4e:37:c5:5a:ab:5c:50:44:c7:
f5:fe:ce:f7:81:a8:60:ed:75:e0:96:68:b2:ef:b6:
70:9a:3d:8b:a4:52:cd:0e:a0:cf:32:03:26:e0:e0:
97:c1:c5:ec:89:91:b1:f4:87:1a:2a:9c:94:28:c5:
3f:75:dd:28:53:ae:a9:f8:e7:4c:a8:86:9f:bc:6a:
c6:17:b4:3a:2b:4a:62:db:cc:d6:91:94:a3:f1:57:
56:b0:44:8a:e2:ac:5b:ca:d8:6e:70:4b:5b:47:51:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:27:B7:F2:CE:6F:8D:61:B1:C2:0A:6C:5F:46:33:68:58:F6:BD:4D
X509v3 Authority Key Identifier:
keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:5a:39:64:79:2a:3b:3c:01:04:40:8b:98:e9:03:6b:32:fc:
cc:d4:b1:be:e4:72:13:d5:08:22:bf:c8:0c:95:e8:02:d4:bd:
e3:02:85:17:55:8b:a6:04:41:c1:b2:1a:8d:d6:eb:67:33:be:
28:32:75:08:ac:00:c7:10:4f:47:76:c3:45:72:ac:47:90:6f:
72:99:d1:1f:eb:ae:86:88:44:ae:97:aa:14:f0:67:79:01:d4:
85:0f:72:17:c0:ad:05:9d:3d:ee:99:a8:81:7d:1d:4f:f2:69:
97:e2:2a:1c:c1:25:80:16:f9:a7:60:ee:85:af:73:93:c2:c3:
7b:e1:d3:56:19:5f:a8:d3:20:5a:86:37:b6:c7:43:d9:d4:d6:
2d:cb:fa:d3:08:3b:c4:a2:31:b5:d2:48:17:9b:93:84:e6:95:
a4:ef:86:c5:5f:79:c2:e7:26:fd:c6:26:51:cb:3b:4b:49:93:
1d:8a:92:c6:1c:74:70:74:26:5d:6e:52:fc:b4:6e:d7:92:dc:
7f:7e:f3:f2:52:f7:79:a8:85:02:c5:34:d6:85:8c:64:12:3a:
30:ac:7c:69:f2:c3:3c:3a:85:a8:77:b0:3a:87:ce:9c:ea:46:
f1:d1:f6:e9:07:b5:ff:64:37:56:12:dd:9e:bc:ec:47:98:bb:
be:3d:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:22:38 2026 by rpki-client