
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier: fjwenXXPRrTjdxYiYbUUVNaqHC45qIn++yE4D2eHVYw=
Subject key identifier: E9:7D:D5:A6:A8:03:63:AE:AD:F2:7D:C3:1B:1B:49:3A:0F:D4:D9:C2
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number: 0105
Signing time: Sun 01 Mar 2026 07:09:42 +0000
Manifest this update: Sun 01 Mar 2026 07:09:41 +0000
Manifest next update: Sun 08 Mar 2026 07:09:41 +0000
Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: gCEA4FW+1fF03ZXSKuEg/pwX8TReJb86aRmm+6zB4Xs=)
2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: 2f3u95lJSNskCNREu+ioXj6oMF+zHFPqIr2DagPPIWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Validity
Not Before: Mar 1 07:09:41 2026 GMT
Not After : Mar 8 07:09:41 2026 GMT
Subject: CN=69a3e636-1341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:cc:5c:8b:4b:60:9a:26:c8:4c:cd:3e:0b:
96:1f:e8:fd:e7:99:e6:85:ea:f9:fd:4d:07:13:2e:
18:45:12:d3:ee:d7:0e:bb:85:c8:56:c8:19:d4:89:
6e:43:6b:cf:24:fd:63:02:03:61:5f:42:4b:4e:5d:
b7:d5:0f:fe:08:ba:95:33:ed:51:99:e8:d3:a8:d2:
53:a0:f7:ec:f9:c0:f1:62:a0:c9:95:f2:39:00:5c:
ab:4a:db:57:15:b3:8c:57:bb:37:9d:fc:23:1a:6d:
ad:66:e1:8b:f6:9c:b6:96:b8:45:90:02:b0:45:72:
16:7f:96:0b:eb:e6:7a:94:00:f7:23:5c:bc:ad:61:
26:c3:33:88:a9:13:f1:f3:e2:0f:29:1d:90:18:d6:
44:2b:5d:4a:31:b1:ff:ff:19:68:b8:59:cc:21:46:
93:1d:ce:db:87:84:de:0f:e0:45:49:fe:06:41:ef:
4b:82:d9:6e:0d:1f:d8:ae:0b:b6:fe:29:c5:c7:db:
58:af:f1:d6:ba:b5:c3:bb:d0:09:b0:f3:aa:20:01:
3c:10:f9:ea:10:70:0b:a7:8e:71:3e:24:e7:52:da:
99:b5:55:de:15:4c:31:c9:91:44:06:43:26:07:d8:
ed:52:93:52:73:f2:ce:55:ab:d9:90:a1:3c:4b:2e:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:D5:A6:A8:03:63:AE:AD:F2:7D:C3:1B:1B:49:3A:0F:D4:D9:C2
X509v3 Authority Key Identifier:
keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c5:de:c7:39:12:67:c3:e3:a9:66:7f:a4:c7:9f:b1:eb:22:
31:7b:6c:26:5b:b1:ac:b6:fc:d2:62:4e:14:1b:a2:e5:74:08:
04:10:39:69:cb:91:a4:c2:9e:67:3e:16:88:62:ba:fa:f1:96:
5f:6a:2c:91:9f:7e:18:eb:62:96:f6:f6:2f:04:85:af:36:84:
9d:ec:f2:a1:a6:ec:20:f5:66:94:63:26:1b:e7:1e:41:98:9a:
f7:bd:ce:e4:6d:9e:d3:ef:e6:00:02:b2:ed:02:59:ed:00:11:
aa:07:1b:74:5d:0d:1b:4d:4f:23:8e:63:b1:39:0b:44:0b:d1:
41:06:07:67:ab:aa:3d:b3:31:e1:f9:b7:6d:28:c7:ab:e1:0f:
f6:1f:77:29:56:d8:13:36:4a:e9:74:8c:5f:c9:f9:e9:6c:3f:
6c:b7:4f:30:40:b2:01:7a:21:48:4d:ac:02:8f:be:b4:c0:35:
9c:56:83:0b:08:71:73:79:d7:db:a5:ab:c9:ef:f0:c6:f1:30:
e3:84:3e:de:32:46:f7:c5:b3:dd:3e:4d:15:f0:43:23:fd:0f:
19:23:eb:89:b2:31:cc:cd:25:ac:61:64:af:39:57:21:30:6c:
37:10:bf:49:2f:9d:ea:ba:27:5c:9d:0a:c4:ab:08:70:6f:11:
a9:90:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:16:09 2026 by rpki-client