
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier: myR4iVkPf2CcMrMMKMjlj+CChH2FxS90sO29PVMwFp0=
Subject key identifier: AC:40:B5:30:93:AE:34:5F:7B:4D:BA:3C:21:22:FF:40:C0:8F:E3:25
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial: 0558
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number: 1ACE
Signing time: Tue 28 Jul 2026 16:51:56 +0000
Manifest this update: Tue 28 Jul 2026 16:51:56 +0000
Manifest next update: Tue 04 Aug 2026 16:51:56 +0000
Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: v/Nj69+2qHJmSlYLhKN47riHzyvvcTFWDQO0hvw10PY=)
2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: 4w5731lHYfGZnO+SC8VdKGR/fvzbDEpA8YsPdrr+1XY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Validity
Not Before: Jul 28 16:51:56 2026 GMT
Not After : Aug 4 16:51:56 2026 GMT
Subject: CN=6a68de2c-d907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:c7:2e:e6:6b:21:71:3c:90:8b:07:1c:30:
08:a6:a2:8a:d6:a4:43:18:ad:e2:38:96:09:41:e2:
dd:53:26:c6:4d:e9:a4:3a:73:56:6a:9e:da:ac:38:
63:2a:7a:ee:9b:99:54:9a:f2:ce:58:72:0f:d9:c4:
6e:fe:cf:34:3b:44:2c:07:9f:a1:a9:e3:c3:a6:15:
5d:9d:02:fa:7f:f1:a1:13:33:63:85:87:d9:a7:ae:
99:0b:da:9f:c2:05:5b:f9:3f:74:f1:64:79:51:13:
aa:af:41:6c:12:cd:b6:3f:e7:e9:04:ea:1b:cd:d5:
49:f0:4e:eb:56:0f:8b:57:ae:22:67:0f:aa:af:d6:
95:30:c4:07:fb:35:b1:2a:7f:90:97:5d:9b:2b:7b:
82:4e:14:ee:6d:a6:62:d0:b1:66:04:21:3d:6a:22:
cc:42:7d:c0:fa:e0:ea:f0:46:25:20:c1:ee:8d:e2:
5b:e1:23:41:33:45:f7:c9:81:4b:25:43:14:7c:80:
b5:f0:14:5a:b8:95:c6:84:ac:92:90:83:1f:7e:53:
9e:4b:63:c5:9b:df:0f:89:d3:49:4c:6f:c6:17:a5:
99:fa:4e:c4:94:34:5a:4e:92:dd:b8:91:66:9c:45:
74:67:14:1e:4b:fa:ab:7c:18:2f:88:6d:99:63:2c:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:40:B5:30:93:AE:34:5F:7B:4D:BA:3C:21:22:FF:40:C0:8F:E3:25
X509v3 Authority Key Identifier:
keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a1:29:a1:fe:7b:d7:9b:50:f8:8e:c2:e1:71:14:11:a4:c4:
bb:9c:6f:0f:50:e8:69:8e:0c:b6:7c:f0:94:1b:e5:7e:d0:ca:
27:4b:08:7e:f6:83:96:a7:d5:00:c8:f6:84:7f:4f:98:be:d2:
a9:a7:e1:9a:38:cc:35:e1:19:c2:80:7b:c5:a7:10:86:74:24:
f7:6b:a7:33:15:bf:79:f5:61:41:6e:6a:e8:25:bd:87:d9:42:
c5:38:4c:86:3d:3e:92:cb:7c:fa:10:62:22:5a:dd:82:85:86:
40:d9:8f:42:3f:f6:b0:88:04:d2:fe:7d:7b:e1:6d:3a:2e:59:
8e:92:2e:df:23:67:55:94:c7:27:5a:d7:b9:fd:7a:86:cb:ae:
bd:ee:96:6c:6f:f5:65:66:c9:42:72:68:08:ea:f8:86:62:c4:
c0:e9:87:b7:3f:2d:4e:e2:ed:2f:c2:05:44:ea:53:2f:09:a4:
7e:72:9d:36:7d:a0:2f:34:d3:29:2f:b5:b4:ba:12:5d:cf:35:
6c:5e:d8:b4:be:83:4e:4a:17:d4:dd:f9:1d:f8:95:c1:80:c2:
d6:0a:ef:b6:cf:91:b8:3a:9c:d5:a3:45:71:68:47:06:ef:28:
6b:ce:5d:19:1a:11:50:81:8e:19:0e:d1:b3:25:87:35:b8:d9:
44:0c:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:53 2026 by rpki-client