
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier: gmlu0vu6li9STWWblkJMacRxCZkNnsG/gmM5AIRr0po=
Subject key identifier: 80:21:45:AB:A8:19:18:CE:0C:20:80:D9:99:AE:E6:A5:E2:0E:40:31
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number: 0151
Signing time: Mon 27 Jul 2026 07:05:54 +0000
Manifest this update: Mon 27 Jul 2026 07:05:53 +0000
Manifest next update: Mon 03 Aug 2026 07:05:53 +0000
Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: 3+9mHw7oc1Qcmv5hUHY01RVB2pMrPrAzynbENP0aCbM=)
2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: N8OST72L0V0eTFnYcjzgV/oZzJ5hZOrN4k5ZtWUp5Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Validity
Not Before: Jul 27 07:05:53 2026 GMT
Not After : Aug 3 07:05:53 2026 GMT
Subject: CN=6a670352-6026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:08:ca:a9:0b:85:2d:40:bd:8b:80:26:13:9c:
a0:56:28:d2:29:c7:85:63:f9:56:02:4e:6e:06:c6:
15:b0:26:25:53:16:23:ea:67:e8:f0:06:b4:ca:9c:
a8:43:1d:58:83:5f:bd:b0:61:5c:78:7e:ba:78:10:
0a:fc:03:ff:a0:6e:98:60:1f:dd:3f:8f:40:b0:e6:
aa:fb:90:58:78:9b:6f:5d:ad:41:01:ec:87:b8:f4:
d8:b7:77:41:a9:39:6e:27:95:65:01:12:48:07:e5:
2c:50:14:df:1a:93:1f:61:f9:40:75:4a:a1:3c:13:
cf:4c:39:87:02:e6:42:20:84:fe:9b:2b:d3:ce:01:
fb:b3:c3:4e:43:44:ec:e7:9a:cf:a3:86:76:24:75:
9a:95:df:93:1f:c9:f5:e9:df:30:9d:27:19:6a:cf:
73:10:cb:4b:cd:36:dd:24:1d:27:54:f6:b6:7f:d6:
5e:a9:13:d6:e2:ac:af:4d:78:0c:9d:b7:f6:82:d5:
c2:9c:0f:33:21:f6:5e:0d:b4:17:bb:a1:57:ce:b1:
89:b2:fa:35:a9:9f:a6:7d:ba:5e:cb:a6:c3:b9:a0:
26:41:01:92:31:7e:45:95:e2:ef:84:f2:94:cc:b3:
90:4c:f1:b6:f7:44:85:bb:f7:3b:80:f4:f3:ee:74:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:45:AB:A8:19:18:CE:0C:20:80:D9:99:AE:E6:A5:E2:0E:40:31
X509v3 Authority Key Identifier:
keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ac:3b:c1:b6:6b:a6:26:94:ee:77:2e:d9:5b:ad:57:18:bd:
6a:59:d0:5f:b2:79:1c:ea:4e:53:41:6b:89:e1:d8:87:75:36:
81:74:12:bc:97:4b:52:3d:2e:0c:c3:44:4b:65:ae:92:3d:ed:
7c:b9:fa:cc:5b:55:4d:5b:0b:15:2e:15:c3:30:ca:84:cd:f0:
25:42:78:12:13:8f:3e:18:b1:06:77:88:0c:24:73:bd:da:42:
1f:e3:d6:9f:11:75:88:0d:89:48:5d:15:59:f0:da:9c:26:2e:
25:10:92:8e:8d:a2:d0:de:81:43:f9:4d:cf:76:90:17:17:35:
a0:b7:a0:ff:f2:33:aa:2c:73:8b:2f:b7:9b:92:7c:24:47:59:
e1:4a:cf:01:4f:60:a0:11:98:ff:45:78:05:f9:14:c9:af:11:
e8:39:37:c3:96:56:bd:e7:a8:6c:78:1c:60:c4:b4:fe:84:14:
52:36:95:9b:07:49:67:e4:27:69:02:b8:4d:1e:97:f0:55:ad:
ab:bf:3a:31:6f:d3:85:6d:bb:e3:09:b8:db:fb:e5:55:e7:bf:
4a:66:0b:a9:49:53:b9:8e:3e:a7:95:d2:05:37:05:6c:a7:51:
69:6f:e0:c5:79:d7:04:c2:10:22:24:49:a3:f9:4d:3d:dc:be:
c3:31:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:21:42 2026 by rpki-client