
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier: agvJILP8R1GVu2pcbvGhpqfZEFUuGW5m5MQllnrMJZw=
Subject key identifier: DC:FC:47:34:D0:F4:5D:24:9B:57:98:9C:A7:0E:DF:C5:4E:5C:FC:57
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial: 0524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number: 1A66
Signing time: Thu 16 Apr 2026 16:44:15 +0000
Manifest this update: Thu 16 Apr 2026 16:44:14 +0000
Manifest next update: Thu 23 Apr 2026 16:44:14 +0000
Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: 1mvIgOHmJhFqm/V+hyN6jrjTVtElorX0RkcT9cm6Lrs=)
2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: 4w5731lHYfGZnO+SC8VdKGR/fvzbDEpA8YsPdrr+1XY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Validity
Not Before: Apr 16 16:44:14 2026 GMT
Not After : Apr 23 16:44:14 2026 GMT
Subject: CN=69e111df-40d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:a6:a0:86:71:8a:5f:b0:bf:ec:77:7d:4a:
38:02:21:e0:7b:d2:50:e5:30:8e:9e:48:a4:ef:d4:
30:08:64:56:3a:93:5b:b0:2b:58:67:8c:de:1a:c6:
40:51:09:ad:81:d5:08:25:f4:55:c1:26:42:83:5a:
6f:97:16:18:01:fd:f1:be:18:d1:16:2a:12:dd:f4:
56:b2:6b:ef:70:7b:9c:93:d3:4b:d2:a6:eb:f2:c8:
b5:5b:b2:43:62:f2:66:14:8a:21:0e:c9:15:bd:13:
07:60:3f:c2:7f:b7:bc:d6:25:4a:42:6b:82:cd:1d:
4a:49:65:9c:64:da:72:04:9a:db:3a:42:6c:fa:7c:
96:a2:94:90:2f:e7:c7:bd:d8:09:04:89:00:5e:aa:
f9:ec:a8:8c:f3:e1:74:fd:ac:c8:f6:a4:19:4d:a4:
4a:3b:a9:e0:98:6c:a4:54:0c:2f:43:d2:47:da:f1:
f0:b5:1b:fa:05:57:e7:8d:35:0a:a7:7e:ff:ea:b4:
85:7f:69:7a:4a:30:4e:e0:64:61:bf:a9:7a:97:00:
4c:99:8a:f3:6a:88:90:98:dc:06:94:ff:0f:f6:19:
44:ec:d0:e4:0e:3f:f4:f7:f5:2f:26:9d:30:7e:b2:
a8:03:6b:4e:76:6f:2f:49:2d:33:ec:20:4d:b9:84:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:47:34:D0:F4:5D:24:9B:57:98:9C:A7:0E:DF:C5:4E:5C:FC:57
X509v3 Authority Key Identifier:
keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:7a:43:56:d0:a3:64:af:30:28:59:7d:c0:fd:de:da:31:9f:
e4:44:83:ce:9b:87:ff:03:02:85:bf:fd:35:2d:40:fa:c4:50:
0a:d7:b0:ed:d8:2c:11:c8:3e:f0:22:0a:70:41:50:c1:78:f2:
75:19:9a:8c:ff:b5:22:9a:bb:01:de:85:24:5f:04:b0:fc:7e:
7a:17:b1:a0:85:1f:12:99:a4:2f:61:7f:ad:0b:e0:9c:7d:e9:
1b:9b:6d:0b:9c:67:10:3e:7d:bd:27:e1:da:20:fd:9b:f5:f9:
14:93:0c:f3:ce:e5:95:23:f2:17:bf:24:ea:3d:ef:36:5c:79:
a2:1d:79:df:20:22:24:c2:33:05:93:fa:c7:e1:57:a8:18:c7:
53:10:a5:49:58:96:8f:38:9f:2a:4b:a9:6a:b2:52:91:b5:36:
8b:5f:02:92:ad:a1:d7:28:d1:7a:0e:9b:e3:9d:b0:7a:6f:ee:
49:cc:55:cb:7a:7b:0c:fe:e3:fe:80:26:9f:0d:e1:6f:e1:c8:
7e:b5:9f:89:c2:8c:ea:70:fb:c6:a6:ef:ca:19:46:06:1c:03:
88:7c:60:f2:94:f5:81:02:d3:46:0a:1e:7f:08:7a:d5:72:50:
ae:60:ce:80:5f:c6:93:39:9e:53:4f:8a:df:38:51:e5:f6:f3:
d4:56:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:15:24 2026 by rpki-client