
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File: bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier: Kc8yMLeS9ud7C4lkKVyNdI/e4S1jvIGIzzorZNIXbvY=
Subject key identifier: C1:9A:33:BE:FB:DE:BA:E8:F7:04:87:28:ED:24:73:E9:14:CD:9A:C3
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer: /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number: 69
Signing time: Mon 27 Jul 2026 10:15:52 +0000
Manifest this update: Mon 27 Jul 2026 10:15:51 +0000
Manifest next update: Mon 03 Aug 2026 10:15:51 +0000
Files and hashes: 1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: 8EnRsVP6VCPE6BFrcoIn9tcjHNzk+AHch07shGo5T0U=)
2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Validity
Not Before: Jul 27 10:15:51 2026 GMT
Not After : Aug 3 10:15:51 2026 GMT
Subject: CN=6a672fd8-65df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:86:4e:4a:2f:ae:bd:41:2c:fc:a9:89:95:
de:b2:66:4e:e5:1d:ff:f1:24:95:48:6a:f8:98:86:
74:5c:7f:bc:00:51:e4:29:8e:a2:bd:d5:64:eb:a4:
b7:b7:3d:61:f8:f7:30:39:a2:2f:14:eb:72:2b:d7:
d3:c8:95:ea:47:68:4e:91:a3:d6:5b:71:47:19:de:
3a:26:f3:94:55:64:59:8a:d1:1c:d6:de:f8:6a:26:
22:22:69:9b:73:f5:c9:82:d6:67:0d:94:51:83:68:
31:f4:70:60:55:2d:30:91:b6:15:a3:c9:44:d5:7f:
c3:83:21:7a:8a:a2:79:93:a9:37:cc:e9:ec:b8:0a:
ca:2c:8c:e4:97:13:ca:48:6e:a1:73:fe:f9:61:ea:
3b:63:d4:e7:c4:49:70:3c:65:fd:1f:48:44:bf:da:
84:90:78:1f:e6:6d:bd:82:be:d8:71:55:4e:4f:6e:
72:04:bc:16:e1:7d:6b:40:3a:e1:ab:18:3e:2c:83:
09:91:4e:5c:eb:f0:6c:5a:0c:57:66:bd:3e:7e:bd:
f6:8e:09:2f:af:53:b8:8e:60:42:07:40:06:12:8f:
a9:04:4f:73:04:a6:64:67:89:e1:f0:de:f1:f4:ad:
22:4c:30:88:a6:42:3a:09:52:99:99:4c:29:fb:c9:
e4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:33:BE:FB:DE:BA:E8:F7:04:87:28:ED:24:73:E9:14:CD:9A:C3
X509v3 Authority Key Identifier:
keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fc:d5:8c:8e:37:8c:4f:4b:e3:e4:ec:2b:81:f3:01:f8:70:
d0:c6:53:43:1e:12:3c:cd:87:c7:2f:3d:ee:37:36:64:1d:a5:
02:bf:dc:47:b1:8d:32:2e:69:4f:a1:58:1e:60:59:b5:d2:98:
12:f9:21:f9:4a:e7:10:65:66:04:db:4c:8d:a3:f4:2b:8c:d4:
72:55:8d:5f:31:c1:52:9e:fe:06:0c:cb:3f:82:6b:4a:1b:4f:
b8:ad:46:88:95:9a:20:96:c4:74:85:dd:65:0a:db:97:37:6e:
db:bb:7d:60:d0:78:48:05:ff:80:90:85:a0:96:0a:38:c0:33:
40:8c:75:32:eb:3e:a7:39:4f:a4:13:a0:1e:3c:a4:09:d3:6d:
3e:23:9a:a5:62:3a:e4:98:0b:85:f5:8e:38:69:33:85:08:54:
17:59:2b:98:6a:8d:e0:08:68:40:b5:19:15:e4:3c:99:a0:28:
51:8e:92:c1:73:74:ca:60:d3:2d:dc:46:c4:a2:14:9d:c8:41:
de:9a:9d:0c:d7:9d:4d:b1:12:48:5b:da:76:08:fc:ac:de:0f:
f4:6d:59:f3:9f:18:e5:09:d7:35:fc:bc:d6:2c:32:35:5a:c9:
d1:95:95:02:e7:31:b9:6b:e3:d6:7e:4b:80:be:42:e8:58:f8:
61:6f:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:40 2026 by rpki-client