
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json)
Hash identifier: TZUZKAOwMsUHMhAfJAuqWEXZV1AhCfTZVkjQVsj6oq0=
Subject key identifier: F1:87:8B:BF:52:08:9E:4E:93:84:54:43:C1:8A:B8:74:A0:3D:B1:FE
Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5
Certificate issuer: /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5
Certificate serial: 06EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
Manifest number: 06E0
Signing time: Mon 02 Mar 2026 01:17:54 +0000
Manifest this update: Mon 02 Mar 2026 01:17:52 +0000
Manifest next update: Mon 09 Mar 2026 01:17:52 +0000
Files and hashes: 1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: 7LNSXWCInSUmKF29mvOpMcHssYjN9PnTijwaI1hm6FQ=)
2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: soeXAXHkILnd67DHL4JHu+zMCSMiMUbgDnhdT/ehP9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl
rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDA7, serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5
Validity
Not Before: Mar 2 01:17:52 2026 GMT
Not After : Mar 9 01:17:52 2026 GMT
Subject: CN=69a4e542-34f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:ed:e8:fb:6e:24:c2:8b:49:a4:53:fd:5c:
51:f9:9d:d3:b0:d5:84:8f:7c:20:36:e8:58:83:0d:
77:52:74:36:e6:fc:58:14:49:13:f6:c6:72:26:a0:
8d:fd:ae:c8:33:c6:20:58:f6:c8:d5:6f:07:b5:f3:
11:0d:7b:6e:70:cb:e5:fc:6c:15:d6:c9:b6:d8:ba:
c2:20:25:fb:94:2f:e1:e5:c0:97:d0:b7:cb:f5:00:
e1:ee:51:2d:9a:e9:f3:34:ba:0a:6e:ee:ae:34:41:
ec:82:51:6f:be:e3:5c:5f:42:9e:99:69:12:f0:f0:
51:bf:65:49:4c:2d:b3:12:c5:b3:d3:56:00:90:b7:
8a:21:12:f8:19:81:3e:e2:f3:d0:89:79:cd:40:bb:
27:7e:0d:49:7a:72:95:87:f3:c5:b3:d6:3c:ba:04:
23:ec:d7:e8:f7:d8:45:fd:10:fb:a2:a6:9c:56:96:
10:6e:44:e5:61:2a:76:8a:38:cc:0c:51:31:98:be:
16:42:c5:5a:bf:b8:35:11:ef:bc:36:9e:12:c6:02:
fa:a4:32:e5:ce:6b:6b:1c:b4:95:63:6c:a9:e1:a5:
64:9b:fa:e2:f7:41:cf:bc:9f:07:67:9c:2d:b0:20:
d2:7d:98:fa:b0:a7:2f:f1:b7:2c:ff:4e:61:d2:92:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:8B:BF:52:08:9E:4E:93:84:54:43:C1:8A:B8:74:A0:3D:B1:FE
X509v3 Authority Key Identifier:
keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:40:06:b4:b9:f1:97:b7:8f:40:5a:4a:28:d5:80:56:2e:c7:
36:76:cd:b7:75:2e:71:f4:96:d1:a4:8d:63:f0:36:28:14:d4:
de:70:f2:37:1c:5b:f6:ae:28:aa:c3:a6:ee:c9:de:fe:bc:60:
4d:c9:f2:a5:6b:66:86:51:96:b5:dd:bd:0e:1b:c7:a2:b0:c7:
97:48:1f:3f:3b:2c:21:bd:f8:24:1a:6b:15:30:bf:08:99:c2:
64:d0:7e:4e:85:15:09:52:34:37:aa:88:10:86:1a:67:38:c1:
54:1c:97:9f:ad:d8:bb:de:74:2d:da:95:f8:dd:27:63:1e:27:
de:c2:3f:ac:a1:0c:22:4a:ed:7e:6a:a1:59:33:e1:91:61:46:
04:cb:e5:22:be:1b:59:f3:41:06:03:30:35:24:86:d4:92:7a:
db:e7:3d:fc:bd:02:8a:3f:32:1d:9c:7b:8d:d1:f3:24:82:b5:
a4:08:7e:f7:4c:e8:b4:4a:28:b4:32:28:b7:27:ac:04:81:e6:
e3:c5:ba:f9:43:88:57:5b:06:8a:c6:2f:f8:8a:a1:96:51:73:
da:fb:9c:4b:54:4a:da:62:2d:31:50:c8:98:df:93:1d:fc:f2:
d3:ac:ad:6f:db:75:14:57:a3:bb:ad:f7:c9:70:b5:bc:77:df:
3b:3e:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:02 2026 by rpki-client