
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
File: bLMNwI7ylzDp3wScVPOVgquFvpQ.mft (raw, json)
Hash identifier: InWDuNVHDv26QMuauNmJkjToR1LZ8zm5vK2WxTf912I=
Subject key identifier: F0:AD:6A:BE:0C:09:C2:D4:76:79:FD:E4:E5:89:47:12:87:0E:B9:12
Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94
Certificate issuer: /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
Certificate serial: 139C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
Manifest number: 138E
Signing time: Tue 28 Jul 2026 17:03:44 +0000
Manifest this update: Tue 28 Jul 2026 17:03:44 +0000
Manifest next update: Tue 04 Aug 2026 17:03:44 +0000
Files and hashes: 1: bLMNwI7ylzDp3wScVPOVgquFvpQ.crl (hash: YPYq+X0xDxz+gbAjADLfvJiIgvOkXmheiBoWcEDsKcs=)
2: 18272628C30B11E8A6851824C4F9AE02.roa (hash: kMK6cFoyDF+YC63uz7mLOHILoZmbrgDgimkdvFEz5OA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl
rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5020 (0x139c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D1, serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
Validity
Not Before: Jul 28 17:03:44 2026 GMT
Not After : Aug 4 17:03:44 2026 GMT
Subject: CN=6a68e0f0-65b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:7a:f8:a3:28:f4:5b:4f:22:2b:8f:a0:38:
2c:db:63:a2:ea:f3:26:c4:9e:bb:25:a9:df:90:85:
5b:60:2a:73:60:db:8f:0b:2e:1f:40:5c:bb:7a:09:
a9:1c:bf:2a:41:9d:98:c6:ef:ad:ab:fe:f5:b6:ea:
02:ee:cf:04:52:22:b8:3c:9f:4b:91:ad:e5:0b:10:
02:e8:2a:ac:8e:65:d6:c6:20:1c:e4:c3:6c:f2:ee:
f8:22:5b:b7:7e:e6:3d:dd:9e:14:9a:1b:e4:c5:50:
76:64:71:9a:31:c8:a8:3a:d4:07:2b:57:6f:8b:cc:
12:20:e1:ee:cb:ec:15:46:c4:3f:40:6d:22:0b:02:
65:d6:26:52:ce:fb:9d:b6:f0:81:7f:b9:af:43:a4:
a1:83:81:9f:18:3d:83:b9:b8:30:f9:3c:cf:d8:b4:
ff:39:57:f4:49:a7:73:c9:bc:27:4f:2e:71:1d:62:
77:24:9f:27:66:09:cd:ee:c5:48:7a:8a:b8:7e:a3:
c0:64:9c:1d:2a:08:26:59:64:84:2e:f1:a7:70:79:
65:7b:18:43:d8:00:19:33:c0:76:0f:41:be:58:1a:
75:7b:41:04:4b:be:8a:84:72:58:bb:07:6c:0d:f3:
68:36:47:a3:76:28:6a:6a:df:c8:e4:e7:9e:61:71:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AD:6A:BE:0C:09:C2:D4:76:79:FD:E4:E5:89:47:12:87:0E:B9:12
X509v3 Authority Key Identifier:
keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a4:23:7d:5a:93:2f:f2:69:0a:6c:45:65:49:c6:9d:25:da:
6a:19:e9:b9:0f:df:8a:aa:5a:d7:71:68:d9:16:32:86:c2:05:
79:29:5a:f7:9c:b3:48:d6:70:db:a2:cd:2e:9b:cf:83:ab:6e:
b4:e4:d8:9e:c0:d7:48:60:95:14:ac:7f:d6:13:bc:03:69:81:
a8:1a:2a:02:b6:de:7a:4d:4c:0f:f5:40:32:f1:13:33:65:42:
46:19:62:9a:c1:74:81:20:44:d7:de:e6:fb:0f:45:5b:7b:fb:
3f:c5:9c:ea:7c:f9:69:19:da:e1:2f:f6:ba:87:88:61:15:b4:
68:c9:30:b6:87:0f:c3:41:19:fe:60:6a:46:28:01:a7:9c:61:
11:30:19:4b:98:bb:3d:7d:4e:4e:e9:e8:aa:b6:64:0a:2e:65:
16:06:9c:8c:03:63:a2:be:92:aa:21:64:9a:b9:93:f2:c7:71:
14:aa:a9:cb:4d:66:9a:a0:20:35:97:e8:70:7a:d7:e8:bd:b6:
fd:2f:5f:8a:a9:ad:3b:8b:dd:18:3d:28:73:cd:0e:40:cb:df:
5c:df:ca:20:55:26:ab:b1:58:da:a0:a6:e1:bf:c8:32:0e:69:
59:de:b9:e3:2a:8a:a6:92:87:4b:3f:87:b8:63:d5:d4:4b:44:
1c:f5:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:39 2026 by rpki-client