
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json)
Hash identifier: Lbo4rMV4bmK6uipTo3RWDDubw7uW8puas2BFMYyiuAo=
Subject key identifier: 8F:0D:7A:74:BA:F2:0D:4D:7C:5E:E9:46:35:67:36:B5:3F:35:27:59
Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
Manifest number: 0106
Signing time: Sat 13 Jun 2026 06:12:20 +0000
Manifest this update: Sat 13 Jun 2026 06:12:20 +0000
Manifest next update: Sat 20 Jun 2026 06:12:20 +0000
Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: 1XKPgaS2Co7Ay8xp2TLzKr5h+KPdLHaUDxDjzhICZ0w=)
2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Validity
Not Before: Jun 13 06:12:20 2026 GMT
Not After : Jun 20 06:12:20 2026 GMT
Subject: CN=6a2cf4c4-f441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:68:f1:c4:78:3d:6d:ad:88:14:16:4f:ae:
a0:33:27:3f:5e:32:a5:83:e7:22:c1:52:16:97:d5:
41:00:bc:b5:61:a8:25:2f:fd:a6:be:8d:ae:a6:6e:
59:bb:52:1e:cb:e6:1d:e0:4e:b0:f9:93:3e:f6:41:
f7:c9:2c:52:30:91:a6:9c:32:00:bb:80:46:3c:ad:
98:c5:5c:09:0c:8d:ce:46:e6:c3:53:b2:46:e7:e7:
dc:cf:a3:95:5a:d0:cf:23:46:1f:c9:2e:5c:d6:0c:
ef:9e:8a:83:74:d9:95:9b:ef:de:5e:a6:fa:14:6c:
36:2e:06:44:1e:b2:4f:8b:8f:13:e9:b2:07:83:8c:
09:1c:bc:4e:0b:17:b0:70:53:9d:01:43:2a:45:43:
32:31:f0:bf:e2:6c:07:0d:5c:6b:43:06:11:4d:74:
ed:ef:e3:05:0a:0a:d1:a6:12:03:ed:77:88:01:e4:
9b:79:a2:44:3b:56:20:c6:6e:74:22:f9:b2:90:a3:
84:b7:2b:49:bb:96:7d:5d:ea:a9:c4:d0:56:2c:30:
c3:2a:3f:55:05:4c:47:dc:b8:8f:33:0e:ef:1f:de:
2e:b0:3a:57:05:3f:fb:e5:0a:40:34:98:98:e9:3e:
f5:0e:6a:a5:c0:6a:16:9e:82:b1:22:0f:89:71:75:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:7A:74:BA:F2:0D:4D:7C:5E:E9:46:35:67:36:B5:3F:35:27:59
X509v3 Authority Key Identifier:
keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4e:95:49:ce:43:98:ff:7e:f3:4b:1f:41:56:fa:72:cb:b5:
97:38:b9:03:16:d2:9f:2d:18:70:61:e5:dc:05:2a:65:4d:2f:
f9:13:19:ee:5f:42:69:6e:6d:ed:fa:29:1f:fe:9d:4b:fb:c0:
4b:14:56:f1:7b:40:6c:42:0f:3d:00:d8:82:ce:9e:9e:36:16:
cc:ab:c8:94:c1:13:df:e2:cd:4d:25:ac:16:a2:a8:d0:a9:11:
fc:bf:f5:12:62:5d:56:9c:a4:e3:72:b4:d2:96:5f:34:d7:e8:
f2:2d:79:23:c7:9e:9b:de:80:59:eb:73:50:c8:9c:bf:00:9b:
15:b1:f9:37:1d:20:40:27:f8:48:ae:fa:d0:e6:62:e3:e6:88:
c2:e5:f4:70:48:2d:99:cf:43:52:74:a7:af:05:d2:0e:d3:c0:
e5:53:b8:fb:7f:16:9e:73:e8:05:63:29:2c:ba:28:4a:a5:fa:
1b:29:f7:a3:d6:40:50:c3:b5:cd:8b:c2:d9:05:3a:3d:d8:27:
b1:5e:09:87:94:e7:77:72:69:39:16:ca:f6:19:1c:bd:4f:8b:
ed:53:63:c3:f9:e3:76:94:5d:4c:3d:49:f6:75:1b:be:77:32:
13:b5:63:e8:de:38:26:0e:75:1e:35:73:fc:6d:28:26:03:6f:
46:33:30:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwNjMxMTAvBgNVBAUTKDZDQjM4MjBEQTVBNEE4NEIyRDk0MDlCREYwN0YyNTQ1
RkU2RDBCMTEwHhcNMjYwNjEzMDYxMjIwWhcNMjYwNjIwMDYxMjIwWjAYMRYwFAYD
VQQDEw02YTJjZjRjNC1mNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtc1o8cR4PW2tiBQWT66gMyc/XjKlg+ciwVIWl9VBALy1YaglL/2mvo2upm5Z
u1Iey+Yd4E6w+ZM+9kH3ySxSMJGmnDIAu4BGPK2YxVwJDI3ORubDU7JG5+fcz6OV
WtDPI0YfyS5c1gzvnoqDdNmVm+/eXqb6FGw2LgZEHrJPi48T6bIHg4wJHLxOCxew
cFOdAUMqRUMyMfC/4mwHDVxrQwYRTXTt7+MFCgrRphID7XeIAeSbeaJEO1Ygxm50
IvmykKOEtytJu5Z9XeqpxNBWLDDDKj9VBUxH3LiPMw7vH94usDpXBT/75QpANJiY
6T71DmqlwGoWnoKxIg+JcXWUvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8NenS6
8g1NfF7pRjVnNrU/NSdZMB8GA1UdIwQYMBaAFGyzgg2lpKhLLZQJvfB/JUX+bQsR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82QzBGOTYxMEQ2
RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FFc3RsQW05OEg4bFJmNXRD
eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjA2My82QzBGOTYxMEQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FF
c3RsQW05OEg4bFJmNXRDeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATk6VSc5DmP9+80sfQVb6csu1lzi5AxbSny0YcGHl3AUqZU0v+RMZ7l9CaW5t
7fopH/6dS/vASxRW8XtAbEIPPQDYgs6enjYWzKvIlMET3+LNTSWsFqKo0KkR/L/1
EmJdVpyk43K00pZfNNfo8i15I8eem96AWetzUMicvwCbFbH5Nx0gQCf4SK760OZi
4+aIwuX0cEgtmc9DUnSnrwXSDtPA5VO4+38WnnPoBWMpLLooSqX6Gyn3o9ZAUMO1
zYvC2QU6PdgnsV4Jh5Tnd3JpORbK9hkcvU+L7VNjw/njdpRdTD1J9nUbvncyE7Vj
6N44Jg51HjVz/G0oJgNvRjMw5A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 11:11:28 2026 by rpki-client