
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json)
Hash identifier: so4iCuNXxWIDhlYT21mC6gAh8z0Iu9A6TKGl09d4+sk=
Subject key identifier: 16:B7:46:21:D1:73:73:AA:25:C2:E2:35:95:5E:DE:BE:87:CF:C2:4F
Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71
Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71
Certificate serial: 070C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
Manifest number: 06F7
Signing time: Sat 28 Feb 2026 22:29:13 +0000
Manifest this update: Sat 28 Feb 2026 22:29:12 +0000
Manifest next update: Sat 07 Mar 2026 22:29:12 +0000
Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: Y7u0YJB1M70aED9MtEdPHbI5DfBNVXOx/RoA+KqB7Cw=)
2: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: VneqGQNP18iG+RzoK9rzGT1v0y/EKMK88ucBZjMvCCE=)
3: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: hmEwq8j3GlUgHO4QkFMDsLDsFyKYgDX+OadwrR+PhRU=)
4: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: //P4Dwc0yC8aNI6dL5grZWmAPuUGPAB2QMNisS1s91o=)
5: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: sO+5ZUlz1ZfgN4m9jGacz4xKmgRg5xQ7WfaHnr5n8EY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl
rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804 (0x70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71
Validity
Not Before: Feb 28 22:29:12 2026 GMT
Not After : Mar 7 22:29:12 2026 GMT
Subject: CN=69a36c39-fda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:fb:e3:cf:95:db:38:0c:03:23:ef:81:d3:
42:cb:3c:fc:c4:e6:5e:20:88:13:ba:10:43:33:aa:
d1:3e:e6:75:57:b7:cb:df:09:a9:c8:9d:c0:11:4b:
b3:ee:ff:10:83:03:79:bb:0c:88:e4:90:75:2a:8f:
a8:50:69:d6:20:c2:0b:2a:4b:be:28:72:d5:d0:08:
cb:c0:27:fc:51:7b:fc:fe:cb:0a:38:12:4d:f6:98:
11:36:20:34:11:cf:f7:7c:70:ac:5c:7a:0c:82:08:
4e:dd:95:3d:59:cd:7f:02:8c:f1:fb:38:c0:ec:3b:
ee:c7:1f:47:1a:69:64:f9:fb:6d:76:02:98:10:91:
2d:9d:65:41:fe:c1:6b:f0:71:a9:0a:24:fd:65:0a:
d2:a3:a3:98:13:1d:82:4f:a4:36:25:5b:b4:87:04:
5a:cf:bd:c7:96:ef:ab:ac:85:97:5b:83:99:40:d0:
50:7f:72:8e:e9:62:9a:c1:fc:64:85:9b:34:56:61:
a1:93:f3:5b:44:7d:fb:6d:38:ab:56:bf:54:a9:11:
79:af:19:09:31:0b:7c:87:ec:ed:c9:85:9f:c4:60:
66:87:44:bd:80:e8:da:d6:bd:26:8d:1e:40:4a:23:
82:ed:27:3f:2a:b6:0d:d5:b9:dd:ca:92:24:ab:d9:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B7:46:21:D1:73:73:AA:25:C2:E2:35:95:5E:DE:BE:87:CF:C2:4F
X509v3 Authority Key Identifier:
keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fe:fe:bb:6f:8f:b2:ad:76:5d:88:a9:03:5f:6c:61:71:54:
be:8b:0a:bb:31:04:bd:90:ef:6c:5a:d6:7c:cd:6c:64:8b:62:
91:be:fd:f5:e3:62:9d:0a:ef:c8:e9:a9:11:c2:ef:65:d3:53:
81:fa:b8:b8:af:b8:f5:ba:a7:f4:43:ce:e2:7e:88:d9:af:6d:
0d:bb:4e:ae:69:2d:e5:9a:88:2d:21:bc:d0:16:33:85:0e:20:
79:97:db:4f:cd:b3:9d:21:36:4d:fd:e6:ed:cd:2f:04:36:07:
6b:de:6e:6e:cf:36:dd:f4:50:8f:48:ad:d1:c3:9d:1f:fc:aa:
bc:f4:4a:02:39:45:10:2b:a9:7a:cc:33:4e:30:01:a9:fe:6e:
de:e7:66:a4:c0:89:8c:08:04:ae:1a:d8:1c:ef:e3:4e:33:b6:
14:62:d4:d5:5a:c7:ad:57:12:32:f5:e2:5a:e0:f1:5e:db:b1:
fc:d8:80:36:bd:46:36:a1:6b:82:d7:e5:58:87:a8:a1:25:2a:
3d:95:50:05:f9:8b:a9:36:2f:41:f9:7e:73:d2:23:a1:45:62:
95:d1:b1:77:6f:36:14:82:c3:3e:db:d6:d0:28:e8:50:1b:45:
4c:a5:59:ca:c2:cc:0f:59:d9:b1:6b:80:55:99:47:66:ec:0a:
14:a2:9f:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3
RDBFNDBCNzEwHhcNMjYwMjI4MjIyOTEyWhcNMjYwMzA3MjIyOTEyWjAYMRYwFAYD
VQQDDA02OWEzNmMzOS1mZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuID748+V2zgMAyPvgdNCyzz8xOZeIIgTuhBDM6rRPuZ1V7fL3wmpyJ3AEUuz
7v8QgwN5uwyI5JB1Ko+oUGnWIMILKku+KHLV0AjLwCf8UXv8/ssKOBJN9pgRNiA0
Ec/3fHCsXHoMgghO3ZU9Wc1/Aozx+zjA7Dvuxx9HGmlk+fttdgKYEJEtnWVB/sFr
8HGpCiT9ZQrSo6OYEx2CT6Q2JVu0hwRaz73Hlu+rrIWXW4OZQNBQf3KO6WKawfxk
hZs0VmGhk/NbRH37bTirVr9UqRF5rxkJMQt8h+ztyYWfxGBmh0S9gOja1r0mjR5A
SiOC7Sc/KrYN1bndypIkq9noaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBa3RiHR
c3OqJcLiNZVe3r6Hz8JPMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG
MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k
eE9tTWlFYmdPbjE5RGtDM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArv7+u2+Psq12XYipA19sYXFUvosKuzEEvZDvbFrWfM1sZItikb799eNinQrv
yOmpEcLvZdNTgfq4uK+49bqn9EPO4n6I2a9tDbtOrmkt5ZqILSG80BYzhQ4geZfb
T82znSE2Tf3m7c0vBDYHa95ubs823fRQj0it0cOdH/yqvPRKAjlFECupeswzTjAB
qf5u3udmpMCJjAgErhrYHO/jTjO2FGLU1VrHrVcSMvXiWuDxXtux/NiANr1GNqFr
gtflWIeooSUqPZVQBfmLqTYvQfl+c9IjoUVildGxd282FILDPtvW0CjoUBtFTKVZ
ysLMD1nZsWuAVZlHZuwKFKKfxw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:17 2026 by rpki-client