
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier: RKRhZnziFPnu5FBIpjUdhopNyZ7ChOFUhdqHYg4MYtU=
Subject key identifier: 94:D3:62:15:E1:8D:B2:DC:A3:45:1E:41:69:F8:1D:45:57:F6:2A:97
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number: 01AC
Signing time: Fri 17 Apr 2026 03:49:04 +0000
Manifest this update: Fri 17 Apr 2026 03:49:03 +0000
Manifest next update: Fri 24 Apr 2026 03:49:03 +0000
Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: 8lKq0vKCut+pBVnG3w54eiCLHdQnwsZu44f+MVUrL8U=)
2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: MuFeUXJQMqi0fVou2JntsqZgqjdBB8a9imttA6TArYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Validity
Not Before: Apr 17 03:49:03 2026 GMT
Not After : Apr 24 03:49:03 2026 GMT
Subject: CN=69e1adaf-343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:6a:07:77:f4:53:99:6d:df:bb:10:03:a9:
bf:cb:50:29:cf:2a:30:2c:66:83:0e:d4:46:9b:c0:
9e:ad:42:48:7c:97:71:e7:e2:32:ad:f0:07:93:d5:
81:7f:49:dc:6b:de:65:74:51:af:c3:c3:11:aa:d8:
40:28:14:45:eb:ea:00:4b:ae:be:6c:81:a0:07:a4:
9d:b4:71:20:8c:42:0f:d0:ca:92:b7:44:78:e6:4d:
4c:0c:76:c8:b5:ce:f0:87:cc:05:65:de:cc:35:ce:
82:c5:0c:35:a1:63:2e:a4:33:95:a8:7d:f3:c7:3c:
de:e8:47:e0:b2:57:99:b8:2c:d6:33:b4:87:a5:a4:
54:22:29:ad:d4:1c:82:97:82:a0:ec:3c:a4:02:93:
7d:31:a2:b3:ce:ac:0d:8b:ef:db:f8:42:d8:cf:4c:
5f:d2:93:09:d8:c5:b8:6c:36:6a:8a:77:36:cb:82:
2b:8a:37:22:2b:a6:2a:34:d7:02:d4:18:cc:f6:4b:
7b:b1:c6:29:ae:35:78:02:bc:4f:b8:ca:eb:a5:db:
da:71:56:a6:1e:60:2c:05:86:f4:59:8d:9c:f5:bc:
e3:1b:f9:2c:46:ea:f0:ea:2d:13:44:67:b1:51:18:
24:12:10:eb:c5:72:c4:48:f9:d1:3e:1e:e2:2a:53:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D3:62:15:E1:8D:B2:DC:A3:45:1E:41:69:F8:1D:45:57:F6:2A:97
X509v3 Authority Key Identifier:
keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:00:23:81:e4:10:11:7f:32:80:90:ab:0d:2e:be:59:19:5b:
3a:be:16:c5:d3:66:8d:d2:1c:b5:fd:b2:f6:ed:6e:9f:20:a8:
c0:90:05:6c:1a:aa:1a:45:b5:fd:8f:d2:85:80:80:4d:96:f6:
2c:1f:26:8b:a8:55:ec:fe:6f:c8:63:de:fe:80:3b:a6:fe:c1:
86:ef:28:28:36:8d:7f:ee:67:ab:07:97:5d:85:7a:e8:f7:5b:
86:c6:6a:37:0b:35:39:45:91:de:ae:f4:97:2a:71:a1:43:21:
4d:fc:7e:d0:47:44:8c:8e:9f:15:6f:85:12:2b:dc:fd:d0:90:
b1:28:47:1c:d8:0e:42:cb:9e:83:8d:46:11:7a:83:5e:cb:84:
12:f4:3b:2d:fb:2a:bf:9a:7e:92:e4:e1:c5:9b:e5:6d:26:51:
6c:ae:fd:84:7d:a7:bc:61:be:49:10:f8:32:64:3d:80:47:42:
a7:90:9c:73:26:73:f5:58:cb:26:5d:f6:6b:3c:0d:71:61:c5:
63:3f:97:70:f8:f2:df:c1:81:e0:21:7b:34:69:13:d1:d8:01:
d2:75:98:72:77:a1:73:61:a4:5a:3b:39:7f:d6:2b:11:a1:f2:
a4:3b:2b:3b:86:8e:de:38:42:c6:87:fd:8e:c7:0b:d9:4a:b7:
f5:f6:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:04 2026 by rpki-client