
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
File: bZSAzzKE0AK1kfXiHbESCX_OcLE.mft (raw, json)
Hash identifier: pXW7Lm6znsLgUrEodyRs6xdG1+CQOzD8RrCm6KWqGuA=
Subject key identifier: FE:F6:89:30:A1:62:E4:9A:80:C8:0A:A9:31:0B:61:99:2D:34:26:84
Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
Certificate issuer: /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
Manifest number: 20
Signing time: Thu 03 Sep 2026 09:07:36 +0000
Manifest this update: Thu 03 Sep 2026 09:07:35 +0000
Manifest next update: Thu 10 Sep 2026 09:07:35 +0000
Files and hashes: 1: bZSAzzKE0AK1kfXiHbESCX_OcLE.crl (hash: hPxC0BroUyAjhSwB4CDgGSwNnBX6cBpi7xj0WCtfPFM=)
2: kk8aRD5asQ84XiRhDQ4hreQ8Hkc.asa (hash: 7xNDhFxLgQU7zKgX3ZN4lOKOG19lMfG1qRvfW2vvAxU=)
3: 9035F5F07A4A11F1B8163F0086A30FBC.roa (hash: VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Validity
Not Before: Sep 3 09:07:35 2026 GMT
Not After : Sep 10 09:07:35 2026 GMT
Subject: CN=6a9938d8-39a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:cf:ef:06:1e:85:8f:cb:00:4c:e9:90:3f:
99:f0:19:04:da:f1:92:c3:8d:ba:5a:b9:c8:e1:c5:
cf:db:2d:fe:b0:54:ad:12:2d:f7:73:42:c3:d4:a1:
23:e8:cd:3f:48:88:2d:41:fe:ba:45:c8:ec:8d:7b:
a5:15:5d:58:08:fc:df:be:bd:ab:95:74:fe:95:1f:
9a:d0:56:54:f9:82:a1:37:d8:e2:80:2e:ea:f9:c4:
aa:48:85:5f:68:23:50:64:21:76:35:32:5b:7a:f4:
96:81:19:b3:c7:22:dd:78:80:5b:58:6b:5a:a1:78:
76:11:4b:8e:d3:3c:c3:93:a2:9c:23:71:c0:26:e4:
d0:73:46:c0:51:4c:42:7d:75:10:1b:7a:37:55:c0:
8b:49:33:76:f6:17:76:67:8d:6f:80:27:db:ca:65:
52:e8:db:46:cd:d7:10:a6:1d:21:a2:da:94:e0:0e:
c6:a5:e1:f1:71:b6:25:07:5d:40:3c:75:6e:3a:c8:
9b:3e:31:59:33:04:88:29:63:c5:52:46:a6:50:e1:
a8:33:97:46:58:41:0e:30:f2:dc:1d:c8:9b:81:00:
84:1f:e9:f5:e3:fb:aa:77:d3:21:8e:b4:90:03:1e:
b3:f3:94:fd:26:76:93:8c:98:85:97:6c:1f:a9:86:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F6:89:30:A1:62:E4:9A:80:C8:0A:A9:31:0B:61:99:2D:34:26:84
X509v3 Authority Key Identifier:
keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:07:0a:04:b2:84:59:28:ab:b0:13:79:d7:8e:02:60:12:35:
7b:74:15:17:41:98:a6:28:73:3b:29:1f:66:17:f4:6f:54:c2:
5e:4e:f9:c0:c6:06:cf:22:aa:5f:1c:28:31:82:26:b4:cf:0e:
29:23:34:f4:5e:a1:a1:1e:7a:8e:94:97:96:24:a3:b0:af:89:
b7:11:59:07:07:97:a5:25:eb:4b:e6:f0:da:82:85:6d:a8:88:
9a:c7:72:46:17:87:31:35:86:27:c5:e9:c0:40:1f:3f:94:7d:
1c:e6:51:ab:21:eb:e6:d5:70:4f:6f:50:24:5a:13:c1:06:3c:
09:c7:1c:d2:32:f0:3f:62:79:5a:97:15:2e:13:df:36:23:e5:
25:37:5d:93:c6:0f:93:8a:c2:da:1e:9e:bd:c2:79:b5:b0:f5:
44:c2:01:5e:5c:cc:ab:e6:4c:23:8d:a7:35:d5:7a:1f:f7:a6:
e5:8f:3c:99:8a:8a:c2:21:b1:0a:0e:ab:41:4a:19:c5:49:e0:
63:a6:58:25:f0:91:af:e7:ce:9a:e7:4e:91:a6:78:fa:9e:b4:
9f:7e:20:06:63:f7:0a:5d:32:db:c7:d4:04:9a:db:d7:43:68:
c5:48:51:fc:00:e7:2c:4b:95:97:61:38:90:9f:f7:93:ce:e5:
f7:a9:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:29:55 2026 by rpki-client