
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json)
Hash identifier: W6ud98xPXEljcmZ45Fdgtb/loERSZ+BF2ni16Z7o6qs=
Subject key identifier: 73:5D:BB:9F:DB:6C:06:7C:03:26:BE:57:CD:BE:52:B6:02:F8:EE:17
Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Certificate serial: 0AF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
Manifest number: 0AE5
Signing time: Sun 20 Sep 2026 19:20:32 +0000
Manifest this update: Sun 20 Sep 2026 19:20:31 +0000
Manifest next update: Sun 27 Sep 2026 19:20:31 +0000
Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: lXcZG0f8TrmsaDDid+eDrylN/QG8igIIEH92N8B5ZVc=)
2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 6zwL+CyahpyzOQDZ6R2F0afujTGC0qWAsIklrEXhVhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Validity
Not Before: Sep 20 19:20:31 2026 GMT
Not After : Sep 27 19:20:31 2026 GMT
Subject: CN=6ab03200-8671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:6f:03:de:2b:aa:79:00:bd:d2:44:8d:af:
e2:b5:9a:d3:e4:3b:59:e6:da:2d:17:2a:b8:fc:9d:
46:ec:d3:60:fb:dd:82:88:74:65:95:13:09:3e:42:
f7:07:fc:55:22:04:15:24:85:d8:1e:6d:13:87:59:
30:06:e9:5f:bf:5f:fe:2c:24:1f:42:1a:20:05:22:
0d:76:c4:68:e0:4e:99:94:e4:19:dd:98:99:2f:4c:
5a:04:3d:ef:cd:6a:75:7c:4c:6a:b1:b1:4d:af:fc:
b9:30:6c:a8:c3:d9:00:17:01:73:bf:f4:4e:78:2c:
75:23:e7:f7:50:77:65:72:77:f3:5b:41:1e:74:94:
99:8e:4a:ae:20:37:b7:ca:cf:67:b5:75:c5:97:98:
28:b0:c5:47:27:00:70:96:5d:1e:94:ef:2e:26:b5:
2f:f0:91:99:bc:03:e3:67:56:cf:9e:0f:a7:70:39:
c5:2a:bc:85:d7:cd:75:cd:0f:72:c9:b7:54:71:7b:
ca:76:b5:53:b7:23:ed:4f:31:41:b3:00:d3:47:2d:
d1:d2:a0:90:a0:f1:29:19:47:2d:dd:75:69:4c:1e:
e5:fa:9f:2b:93:24:09:88:36:f1:35:4d:05:89:b6:
1a:58:16:96:7b:0b:df:86:62:85:07:b0:8a:e3:92:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:BB:9F:DB:6C:06:7C:03:26:BE:57:CD:BE:52:B6:02:F8:EE:17
X509v3 Authority Key Identifier:
keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0b:2a:fa:5a:8e:e2:49:30:ca:4c:eb:d5:55:5a:3b:65:ae:
81:f3:c1:fd:e4:8d:48:e0:f3:35:cb:58:f8:60:bd:33:4a:f6:
7c:e3:58:0f:1f:65:5d:6d:5a:7f:ea:a0:f6:e8:3b:ac:e7:0c:
c4:ca:c9:7c:10:0e:5c:1c:72:0a:08:6d:b7:1a:6c:51:29:1c:
76:c1:bf:cb:1d:e1:67:bf:1c:b7:69:ed:9d:fb:a8:3d:68:c8:
5a:22:b1:a0:e1:fa:0a:2c:18:6e:fc:a0:f6:40:aa:c9:b9:f7:
01:03:33:a7:1e:3f:37:ea:5f:3c:03:98:77:b4:fe:25:f3:d1:
f2:45:63:7d:bb:3b:1b:b9:9c:89:c4:0a:b1:a0:5e:17:53:18:
2b:cb:d5:80:02:84:57:43:1b:b8:00:d3:8c:88:48:a4:ef:04:
6e:47:78:4f:66:a7:9a:13:14:ad:2b:e7:98:b8:99:59:f4:25:
3f:eb:08:ec:20:33:ff:15:e2:bd:7c:1b:2b:71:0a:60:85:35:
70:14:cf:bc:66:38:20:13:02:cb:69:00:ac:61:d4:34:d5:0b:
ca:00:20:01:5b:fb:17:09:b2:2a:5b:75:95:1a:f6:af:d0:c9:
f5:ee:59:39:40:8a:0c:d7:0c:7a:d1:a6:86:40:40:ee:8f:c7:
45:11:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:57:35 2026 by rpki-client