
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json)
Hash identifier: y/LGk1SXQ45lVPK96ko21MG13LtqTF842BbOiIV7PWo=
Subject key identifier: FD:12:80:BB:E6:0A:1C:C2:3A:8F:51:F8:00:89:FE:2C:20:00:E2:B0
Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Certificate serial: 0602
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
Manifest number: 05FA
Signing time: Sun 26 Jul 2026 23:47:40 +0000
Manifest this update: Sun 26 Jul 2026 23:47:39 +0000
Manifest next update: Sun 02 Aug 2026 23:47:39 +0000
Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: 44HGTUr6bT3ZjFyGYyVLm6vIdeqQJ/hZfxMWfEETQ7k=)
2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: OrGWOjKaq8LbnZvZB603X7/PZgRovjlf9H8990xA32M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538 (0x602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Validity
Not Before: Jul 26 23:47:39 2026 GMT
Not After : Aug 2 23:47:39 2026 GMT
Subject: CN=6a669c9c-9ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:dc:ae:4a:8b:3a:c2:33:2a:86:dc:fe:4f:
40:54:c2:ab:da:c3:23:69:25:0d:18:26:c7:db:36:
ec:f0:7b:0f:35:66:30:78:46:4e:e6:81:f7:16:31:
87:08:67:03:1a:09:4a:30:4b:19:75:45:7c:9d:92:
a8:1e:e0:96:3d:14:c2:93:9f:f9:71:22:1e:3f:00:
b2:7f:75:89:58:73:90:04:68:31:10:f1:d5:bd:e8:
f5:71:24:b0:2d:92:05:70:16:2c:6f:b3:21:a4:f0:
95:90:64:bb:b9:fe:e1:9a:78:b1:a0:e1:34:07:d7:
41:1a:91:e4:28:ae:49:c3:31:e7:82:5b:65:ac:56:
e9:e0:3c:83:49:87:96:13:50:10:8a:1b:1c:34:04:
d8:75:4a:db:da:ce:67:91:8d:21:3e:86:50:5e:ee:
a9:78:df:5b:d9:73:f5:74:9d:09:e3:b1:e4:c5:54:
1d:dd:e3:92:fd:02:48:35:b1:b0:84:35:de:e2:ba:
07:55:01:47:0c:93:8a:6a:f6:6e:6c:52:e1:2d:3f:
82:2a:0e:a5:44:86:2d:b1:8e:69:92:c1:9e:c9:d7:
20:3e:bc:1c:39:10:94:07:6b:d2:df:23:8b:9a:ee:
29:15:e4:dd:1e:29:c8:df:5c:2d:db:60:52:fa:ca:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:80:BB:E6:0A:1C:C2:3A:8F:51:F8:00:89:FE:2C:20:00:E2:B0
X509v3 Authority Key Identifier:
keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:23:e1:32:d9:60:98:45:b8:f1:4d:eb:10:2e:53:29:ee:ab:
bf:be:94:ec:f7:eb:43:5b:28:b6:b1:c9:40:21:62:c9:d3:02:
f9:25:8d:86:97:15:a3:70:66:35:19:b4:e9:08:02:56:c5:45:
be:51:c3:c5:26:d2:5b:e5:33:c7:d3:05:eb:00:83:fb:42:09:
2f:4d:f7:f4:7e:1a:43:7f:5c:19:d4:10:50:5f:c9:d2:e2:b9:
ca:ef:4b:d7:80:c0:f6:2e:32:ff:43:38:93:76:55:c2:09:3c:
1d:14:72:f7:66:54:f5:8b:0c:e9:28:63:1d:1f:98:bc:57:1e:
dd:61:fc:87:38:5e:87:f2:85:3f:c5:a6:fc:4c:27:b9:78:1c:
c2:a1:e8:4c:27:9c:e9:cc:48:6c:15:91:45:08:9d:7f:b7:a4:
d4:e5:b5:6d:79:b1:6e:db:dc:8e:c2:b7:64:c7:ce:f9:8d:83:
18:1e:07:30:d6:b1:dd:de:8a:af:cf:5f:4a:d1:35:41:eb:8a:
44:f5:9a:65:4a:e9:61:ce:e8:30:39:d2:31:8a:02:62:a1:f0:
8f:9a:ad:8b:ec:cf:c8:96:6e:78:0e:23:4b:32:e4:c9:85:4f:
42:67:7e:ba:94:d7:53:53:00:0e:64:36:68:d6:8a:23:99:7a:
2e:c3:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:52 2026 by rpki-client