
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json)
Hash identifier: 99ThG6nS0CIEE/2fYgUIdnOyknZi1G4rg0236BOecjM=
Subject key identifier: B9:5B:6B:FD:63:BE:35:86:71:BB:E5:DC:71:21:82:1B:E6:7D:E9:AD
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
Manifest number: 0179
Signing time: Mon 21 Sep 2026 04:46:18 +0000
Manifest this update: Mon 21 Sep 2026 04:46:18 +0000
Manifest next update: Mon 28 Sep 2026 04:46:18 +0000
Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: WkEwgpQTcT0nODFZtAxotlVaBWGMGO0n4AKf5lbtJ4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Validity
Not Before: Sep 21 04:46:18 2026 GMT
Not After : Sep 28 04:46:18 2026 GMT
Subject: CN=6ab0b69a-2b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:ab:e1:aa:0a:4c:a0:38:f3:a3:cc:1d:e3:
fb:4d:a5:80:d8:8a:60:64:52:e0:8a:1c:6d:60:87:
83:40:2f:4f:4b:c0:4a:96:78:50:83:a0:60:4c:0c:
e0:b9:c8:aa:c8:c8:a4:ad:1c:11:b9:7f:8a:0c:be:
72:d3:0d:52:d5:17:e5:76:ac:af:59:95:39:1b:d9:
d5:10:74:7b:5b:77:35:87:b8:70:55:6f:8d:cf:be:
66:fc:76:3c:f7:89:67:14:3c:a6:a7:17:d3:96:82:
35:2e:a2:d5:37:cf:44:f8:27:3c:29:94:c2:97:bd:
99:d7:f6:87:60:eb:e1:8f:ef:8e:6f:b1:c7:16:19:
c1:be:5d:f3:e8:2d:5c:ae:a1:42:76:af:84:ae:1d:
fe:b3:64:fb:e9:82:85:d5:7d:83:d5:02:57:bc:af:
2b:bb:34:53:4a:b8:d3:b6:ca:e4:58:a5:7c:58:e9:
f3:e4:86:b3:6a:99:9e:27:76:7a:24:cd:a3:28:0c:
d4:32:29:6e:30:ef:67:78:98:f3:b6:0b:10:a2:8c:
ab:c4:6e:5e:16:44:dc:ae:cc:5f:dc:4b:4e:02:ee:
24:f8:cf:ca:09:f9:47:f1:6a:59:e4:e5:bd:c0:82:
22:0d:7b:66:11:e7:76:e8:13:f5:8a:0b:51:5a:d2:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5B:6B:FD:63:BE:35:86:71:BB:E5:DC:71:21:82:1B:E6:7D:E9:AD
X509v3 Authority Key Identifier:
keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:72:d5:0d:82:64:e6:96:94:ad:90:51:7e:7f:e0:f6:db:e2:
9f:c8:95:1a:48:ab:c8:d4:97:48:58:f4:0d:7e:88:ba:30:5a:
d9:11:1e:ad:bc:61:52:8d:2b:b9:b8:fd:93:8a:fe:a1:3e:3e:
97:c1:1c:aa:0a:70:31:d7:b7:a9:88:66:18:36:8b:43:48:b7:
8d:d8:7c:2f:49:bd:4e:dd:c3:8b:de:e4:57:0f:3f:72:27:84:
f6:00:a3:6b:ff:04:e0:e9:79:51:77:dd:9e:92:34:33:49:34:
e3:e7:c9:4e:c8:2c:9e:94:39:2b:58:fa:2b:1f:7c:6d:66:e0:
4b:4f:ed:47:33:d4:3a:59:b5:bb:4c:cf:bc:b1:8d:81:54:c0:
ee:84:b7:61:94:dc:61:9c:5e:7e:37:dd:1e:ee:92:e6:83:26:
bc:b2:63:ef:59:df:20:8b:05:51:4f:cd:eb:03:5d:64:19:cb:
8e:0c:39:63:56:bc:04:b6:d8:f2:6d:86:71:3f:b7:f3:44:ae:
09:b4:74:fc:dc:cb:03:a4:b5:60:7c:90:79:7e:5b:34:e2:81:
34:2e:a7:43:b4:91:e6:df:38:22:91:3e:0d:34:39:68:1e:dd:
6a:62:12:cb:2d:ed:38:4f:ce:87:53:40:ec:48:21:15:3e:f9:
eb:ff:65:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQzRjgxMTAvBgNVBAUTKDZEQjY2MDdEQTY5NUREMDlFMDI5ODAzQTJGRjI2MjVB
RDg4MzgyRTMwHhcNMjYwOTIxMDQ0NjE4WhcNMjYwOTI4MDQ0NjE4WjAYMRYwFAYD
VQQDEw02YWIwYjY5YS0yYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA356r4aoKTKA486PMHeP7TaWA2IpgZFLgihxtYIeDQC9PS8BKlnhQg6BgTAzg
uciqyMikrRwRuX+KDL5y0w1S1RfldqyvWZU5G9nVEHR7W3c1h7hwVW+Nz75m/HY8
94lnFDympxfTloI1LqLVN89E+Cc8KZTCl72Z1/aHYOvhj++Ob7HHFhnBvl3z6C1c
rqFCdq+Erh3+s2T76YKF1X2D1QJXvK8ruzRTSrjTtsrkWKV8WOnz5IazapmeJ3Z6
JM2jKAzUMiluMO9neJjztgsQooyrxG5eFkTcrsxf3EtOAu4k+M/KCflH8WpZ5OW9
wIIiDXtmEed26BP1igtRWtItiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlba/1j
vjWGcbvl3HEhghvmfemtMB8GA1UdIwQYMBaAFG22YH2mld0J4CmAOi/yYlrYg4Lj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDNGOC9GNzkwQ0M1QTdD
NkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNRbmdLWUE2TF9KaVd0aURn
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDNGOC9GNzkwQ0M1QTdDNkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNR
bmdLWUE2TF9KaVd0aURndU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEHLVDYJk5paUrZBRfn/g9tvin8iVGkiryNSXSFj0DX6IujBa2REerbxhUo0r
ubj9k4r+oT4+l8EcqgpwMde3qYhmGDaLQ0i3jdh8L0m9Tt3Di97kVw8/cieE9gCj
a/8E4Ol5UXfdnpI0M0k04+fJTsgsnpQ5K1j6Kx98bWbgS0/tRzPUOlm1u0zPvLGN
gVTA7oS3YZTcYZxefjfdHu6S5oMmvLJj71nfIIsFUU/N6wNdZBnLjgw5Y1a8BLbY
8m2GcT+380SuCbR0/NzLA6S1YHyQeX5bNOKBNC6nQ7SR5t84IpE+DTQ5aB7damIS
yy3tOE/Oh1NA7EghFT756/9l7g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:53:47 2026 by rpki-client