
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json)
Hash identifier: YzWhDT73HMhmk7ZmlTOcuCj66U7Zz/wJ0keZlYab29c=
Subject key identifier: A9:24:D2:04:77:DE:59:70:4F:B5:96:98:0B:6E:21:22:68:C0:0C:47
Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
Manifest number: E9
Signing time: Wed 15 Apr 2026 06:01:46 +0000
Manifest this update: Wed 15 Apr 2026 06:01:46 +0000
Manifest next update: Wed 22 Apr 2026 06:01:46 +0000
Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: cWq/DdWsWt+5y6o2MZh5hCW4/GfG7tjh1BCth5sTFMM=)
2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11
Validity
Not Before: Apr 15 06:01:46 2026 GMT
Not After : Apr 22 06:01:46 2026 GMT
Subject: CN=69df29ca-1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:cc:d6:a6:30:2c:5c:ec:4a:1b:d5:44:5a:
95:5a:32:64:86:e7:0c:1d:e7:d5:32:7d:e9:a7:fd:
01:0e:66:b9:0d:49:45:04:ef:96:1f:05:53:46:cb:
c2:dd:3e:8b:fa:70:69:0a:39:7d:ec:9f:ff:4c:c6:
2e:da:c8:71:2b:de:70:b4:8e:27:ef:2d:7f:5b:c7:
ba:87:cc:f5:7f:21:ec:66:12:87:e0:c4:03:fd:d7:
02:96:29:71:34:7d:09:40:e6:9b:c2:e4:08:8b:f1:
4a:49:8e:09:75:5e:ca:f4:94:fa:65:e0:15:c3:0a:
f8:8f:9e:3e:5a:f2:9d:e3:8a:ad:89:29:d4:96:70:
3f:08:9d:fb:50:07:d1:ef:0e:9d:fe:c2:04:5e:a0:
22:b7:36:5d:34:2c:41:99:e3:0a:81:f0:6a:71:67:
68:ca:b4:c6:05:ca:ce:9e:a5:4f:be:8c:4b:d2:36:
c7:bb:c8:95:d1:c6:a9:ce:9b:8d:04:b8:06:d0:b4:
1c:2f:36:80:ac:5e:6a:d7:24:59:ab:3f:62:64:05:
70:2d:5c:d7:a3:83:86:8d:70:f8:1d:5b:71:de:a0:
4b:33:a3:2c:e7:7a:30:2e:3e:0b:44:fa:e1:6a:f7:
3a:01:7e:ab:af:e9:58:dd:34:ee:24:f2:75:d8:9e:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:D2:04:77:DE:59:70:4F:B5:96:98:0B:6E:21:22:68:C0:0C:47
X509v3 Authority Key Identifier:
keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:3d:c8:a8:7a:f7:21:85:f3:af:24:01:20:80:55:6a:07:9d:
9f:24:ec:b2:76:97:80:f7:79:0b:46:25:ea:05:0c:2e:53:5e:
aa:93:48:75:d8:e1:4a:9f:38:d1:77:95:fa:42:e6:bb:e2:46:
0a:45:87:ef:ee:b5:31:a0:84:83:d1:36:d4:b0:58:57:99:0b:
c7:1e:ab:fb:03:b1:18:46:91:98:0b:e8:7f:21:f7:da:83:3d:
76:2e:e6:98:ce:ce:b7:52:66:6b:a7:5a:47:b2:50:aa:14:ed:
a8:03:f7:53:4b:28:5c:6c:65:f7:33:66:e4:b8:48:6c:e3:2e:
fa:94:a6:c2:30:4a:6d:37:e1:6f:92:e2:48:56:4f:0e:e2:8d:
ec:e0:ca:55:81:98:46:34:51:f6:30:95:e4:06:72:06:89:f7:
25:f8:bd:e7:b1:ec:77:c7:17:0e:33:90:8a:24:0d:23:d9:e6:
ec:48:23:83:72:49:42:f1:2f:9c:69:6a:65:e2:ce:f7:1e:ec:
d8:c6:b2:c9:d9:58:e3:9b:0e:39:1c:57:48:35:cd:b1:b6:8c:
1d:6d:b8:a6:6a:35:99:58:31:d6:b7:7a:16:cc:0d:68:af:e7:
89:3c:70:5f:c1:ac:c1:43:6c:b4:66:7a:f7:40:0f:55:a8:19:
28:c1:48:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwNjMxMTAvBgNVBAUTKDZDQjM4MjBEQTVBNEE4NEIyRDk0MDlCREYwN0YyNTQ1
RkU2RDBCMTEwHhcNMjYwNDE1MDYwMTQ2WhcNMjYwNDIyMDYwMTQ2WjAYMRYwFAYD
VQQDEw02OWRmMjljYS0xNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4HM1qYwLFzsShvVRFqVWjJkhucMHefVMn3pp/0BDma5DUlFBO+WHwVTRsvC
3T6L+nBpCjl97J//TMYu2shxK95wtI4n7y1/W8e6h8z1fyHsZhKH4MQD/dcClilx
NH0JQOabwuQIi/FKSY4JdV7K9JT6ZeAVwwr4j54+WvKd44qtiSnUlnA/CJ37UAfR
7w6d/sIEXqAitzZdNCxBmeMKgfBqcWdoyrTGBcrOnqVPvoxL0jbHu8iV0capzpuN
BLgG0LQcLzaArF5q1yRZqz9iZAVwLVzXo4OGjXD4HVtx3qBLM6Ms53owLj4LRPrh
avc6AX6rr+lY3TTuJPJ12J4wcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkk0gR3
3llwT7WWmAtuISJowAxHMB8GA1UdIwQYMBaAFGyzgg2lpKhLLZQJvfB/JUX+bQsR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82QzBGOTYxMEQ2
RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FFc3RsQW05OEg4bFJmNXRD
eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjA2My82QzBGOTYxMEQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FF
c3RsQW05OEg4bFJmNXRDeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcj3IqHr3IYXzryQBIIBVagednyTssnaXgPd5C0Yl6gUMLlNeqpNIddjhSp84
0XeV+kLmu+JGCkWH7+61MaCEg9E21LBYV5kLxx6r+wOxGEaRmAvofyH32oM9di7m
mM7Ot1Jma6daR7JQqhTtqAP3U0soXGxl9zNm5LhIbOMu+pSmwjBKbTfhb5LiSFZP
DuKN7ODKVYGYRjRR9jCV5AZyBon3Jfi957Hsd8cXDjOQiiQNI9nm7Egjg3JJQvEv
nGlqZeLO9x7s2MayydlY45sOORxXSDXNsbaMHW24pmo1mVgx1rd6FswNaK/niTxw
X8GswUNstGZ690APVagZKMFIrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:16 2026 by rpki-client