
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File: bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier: s5zbe0oWyCx0UkG/b3MWZtJQJgEjc19dzPnzCy5V2Q0=
Subject key identifier: B8:44:82:B7:6A:1C:30:5A:31:62:89:61:B1:22:BB:07:AA:98:A2:4D
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer: /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number: 87
Signing time: Wed 23 Sep 2026 07:23:24 +0000
Manifest this update: Wed 23 Sep 2026 07:23:24 +0000
Manifest next update: Wed 30 Sep 2026 07:23:24 +0000
Files and hashes: 1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: qM/iYynW/UZfLH8JI/499yKswOKq4LfGHEdeIgnND1M=)
2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Validity
Not Before: Sep 23 07:23:24 2026 GMT
Not After : Sep 30 07:23:24 2026 GMT
Subject: CN=6ab37e6c-178f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:e1:11:e6:8d:bb:fb:fa:57:13:1d:2a:da:
fb:4f:fe:2a:e8:be:f7:5a:63:af:22:9f:28:ed:27:
49:48:b2:e7:63:34:08:7e:35:42:ba:bb:2e:0b:6f:
b4:4d:69:f6:f1:cf:4f:2c:e6:cf:45:88:59:d5:fe:
75:39:ed:3a:68:d7:0d:09:50:b6:a0:0c:ca:74:0d:
4f:6b:8f:9a:98:da:fd:75:be:3f:1d:8c:34:db:8f:
c2:3a:77:c4:7e:f1:49:21:d1:f4:a7:9f:69:ed:c2:
db:76:8a:79:cf:13:5a:ff:bf:7c:a4:42:f4:d6:6f:
a4:84:f4:d2:e0:7a:22:d6:8e:68:be:69:84:a7:04:
b7:f4:20:8d:af:38:3f:db:ac:cd:9b:02:f8:e8:4f:
d4:ae:0f:80:22:4e:04:47:78:b8:f6:8e:df:24:4e:
54:51:ae:28:d0:6f:65:a1:d4:8b:87:ec:ce:7e:5c:
62:ec:f1:d0:bf:10:32:5e:63:cb:87:e2:ed:22:c7:
a7:12:50:ed:cf:27:b5:94:13:bf:f5:9c:77:4b:41:
28:6b:2f:f0:19:72:02:4a:fa:b4:fe:07:78:ca:62:
08:0c:29:24:dd:da:35:02:d8:12:69:9f:7e:8e:a5:
1c:03:68:b7:bd:2a:7e:46:1b:69:8e:0b:2e:6f:18:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:82:B7:6A:1C:30:5A:31:62:89:61:B1:22:BB:07:AA:98:A2:4D
X509v3 Authority Key Identifier:
keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4d:4f:27:ae:e0:7d:e8:ec:16:a9:f4:6e:70:2d:09:97:7c:
79:57:7f:3b:48:14:4e:fd:41:57:5e:14:58:be:78:8d:d2:4f:
f7:35:4b:15:94:a3:37:db:4f:aa:d8:b3:09:bc:81:14:e6:bd:
ec:5f:88:46:87:69:5d:ba:e9:4e:4f:86:40:3a:73:e9:e3:40:
a8:1d:e8:0d:79:80:d5:f1:30:69:4e:d0:61:8c:36:ee:a4:eb:
ab:14:76:af:8c:d3:4e:7a:aa:c6:93:73:e7:a1:c2:e8:53:a5:
69:d1:e7:ba:18:7d:a6:7e:da:2e:25:6d:c2:42:f7:29:36:27:
d0:b4:89:69:21:05:9f:86:02:48:ac:b5:c9:5b:a1:c2:1b:6b:
39:69:ac:93:97:9a:24:a4:e1:ee:8d:dc:ac:61:12:ca:a8:7f:
6f:0e:dc:ca:0e:cd:16:6a:43:de:ff:01:9f:6d:2c:e4:b6:bd:
2f:00:3d:14:18:b2:c5:35:82:5b:cc:a3:67:a9:9a:75:9f:bb:
ba:71:94:7a:21:55:d6:4a:6f:24:15:a6:f9:36:ac:44:11:fb:
8e:f2:10:34:30:e9:b2:87:f1:5f:66:fb:86:14:0e:d5:dd:ad:
9d:88:90:ff:3b:5b:17:ca:c7:c0:d8:c3:8f:08:c0:ae:bf:11:
e2:6d:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:51:34 2026 by rpki-client