
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json)
Hash identifier: S3KrDqN1RayZ9PMtMMFRTgd/531ARzJrTzCJBiYdW4U=
Subject key identifier: 54:92:ED:9F:54:CC:82:61:48:DB:7E:19:5F:3B:A8:0A:AD:4E:B6:3D
Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Certificate serial: 07DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
Manifest number: 07B1
Signing time: Fri 04 Sep 2026 21:01:37 +0000
Manifest this update: Fri 04 Sep 2026 21:01:36 +0000
Manifest next update: Fri 11 Sep 2026 21:01:36 +0000
Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: pzYywd4CN5q5VNd0Y7hCAwthdsQZt8jEKd4dSxUU7jk=)
2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: Bnf+utMQMnh8zQjddBOCbwOT7nCJfAIRhLCPTrWZ8Xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2011 (0x7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Validity
Not Before: Sep 4 21:01:36 2026 GMT
Not After : Sep 11 21:01:36 2026 GMT
Subject: CN=6a9b31b0-3aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:4f:21:5b:88:15:04:36:9d:fb:1d:9d:58:
c0:f4:26:34:31:6c:c3:14:3c:ff:24:7b:57:78:fc:
8c:13:2a:93:4a:cc:f3:9d:a7:a9:f7:41:dd:bc:9a:
b1:d0:b4:36:17:dc:e9:0d:7f:01:4e:61:37:06:82:
4b:d8:17:4f:5f:0f:cf:da:84:32:75:ea:ac:a8:cd:
b5:4e:bf:e4:ad:e7:b6:9c:35:7f:4a:a3:ba:a9:d6:
31:26:fb:33:fb:19:6c:f4:8d:1e:cb:fb:b0:32:cf:
a7:6d:a9:1c:98:d4:4f:b4:bf:3b:7a:68:6a:a6:28:
aa:89:68:00:c2:4d:03:4a:49:76:df:71:83:c5:f2:
91:bd:1a:0b:b7:1c:2e:43:f0:b6:e8:c5:29:84:6d:
e1:5c:d7:e6:d2:3d:f2:8b:c8:8b:f9:bf:fb:c7:28:
72:f6:2f:a4:b0:e6:71:be:9c:b3:c7:f6:8e:7a:43:
1f:1d:cc:e2:18:93:61:24:de:93:8b:71:fc:26:a3:
79:96:51:5a:00:ef:18:4b:1d:08:c2:f3:ad:ed:a6:
bf:84:04:60:52:46:a4:e2:9f:b7:96:12:af:a3:c7:
31:f6:10:fa:37:ba:53:3c:c4:2c:6d:11:25:e3:ee:
7e:3c:29:a0:2e:ff:1c:59:d5:5d:a4:a7:fb:e9:ae:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:ED:9F:54:CC:82:61:48:DB:7E:19:5F:3B:A8:0A:AD:4E:B6:3D
X509v3 Authority Key Identifier:
keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:dd:61:4f:50:71:69:ad:a3:6b:e7:9b:c6:80:0f:8d:0a:a6:
8a:d2:32:3a:ee:c0:63:5f:a5:86:c6:a2:0c:1b:05:e2:b8:2a:
02:52:7e:53:83:e4:9d:a0:ac:c3:4f:94:e2:89:95:45:c5:76:
09:3a:87:c7:e6:48:f7:6b:02:e8:23:ae:4c:db:c0:f0:fb:68:
13:51:d6:1f:4a:ea:79:84:d2:b5:fe:46:06:98:e4:5a:1d:60:
ee:b4:b6:da:c1:e4:49:89:ff:d4:4c:cd:17:a7:9a:5f:a8:7f:
c9:5f:de:c5:a3:aa:a3:68:bf:b5:b0:e7:2a:f4:06:b5:10:95:
5d:60:7e:29:85:11:84:17:01:18:0c:0f:b7:d2:21:1f:cc:93:
81:3c:45:16:97:3d:19:63:1b:51:16:4a:7e:af:83:a2:2b:dd:
a5:00:ae:6d:c8:2f:4a:53:bb:53:b9:69:64:20:d1:60:c7:bf:
aa:14:4e:16:8f:77:78:a5:7f:b6:c6:0c:e7:7a:28:57:7d:c9:
64:d6:b3:d6:0e:d5:df:c9:18:3b:6b:4c:d3:7d:5c:5b:35:50:
ae:eb:a0:ea:ed:0e:bf:0e:14:0c:f5:4c:2b:3a:06:28:fe:db:
b7:f5:75:15:b0:1b:73:9c:ab:c6:6b:8c:6a:07:1c:24:9d:b5:
52:72:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:14 2026 by rpki-client