
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json)
Hash identifier: QhsjmEBSN3Qxw1RwHHillcZ3Uo6a0AQudjHUXHTIpKE=
Subject key identifier: F0:97:FB:79:ED:D6:C0:28:0C:4B:03:04:38:AB:F1:DA:13:F2:36:F0
Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Certificate serial: 07C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
Manifest number: 079D
Signing time: Tue 28 Jul 2026 21:39:53 +0000
Manifest this update: Tue 28 Jul 2026 21:39:53 +0000
Manifest next update: Tue 04 Aug 2026 21:39:53 +0000
Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: blZ/Ir7gdHmraZy0Ux1GttJ5U/GIwCgV6zS7At681/Q=)
2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: Bnf+utMQMnh8zQjddBOCbwOT7nCJfAIRhLCPTrWZ8Xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991 (0x7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Validity
Not Before: Jul 28 21:39:53 2026 GMT
Not After : Aug 4 21:39:53 2026 GMT
Subject: CN=6a6921a9-5a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:5f:b4:3c:95:2e:0b:a6:16:cf:5f:ee:a4:
d0:b7:7a:e0:fd:a0:51:46:83:a9:b8:2a:9c:52:b9:
16:23:34:53:cf:dc:05:ce:72:35:b5:64:54:40:58:
88:7a:a9:1d:98:47:e1:37:44:05:0e:64:ca:6b:2f:
78:96:16:c6:7f:0d:09:68:0c:d1:f3:2d:a8:74:0a:
70:7c:fd:48:26:80:7e:25:38:ec:91:80:67:44:e2:
e7:de:01:8f:5a:25:05:f4:11:b1:22:91:81:48:0d:
79:95:cd:dd:cb:b5:9a:f4:f4:f8:34:09:3c:a2:1d:
c7:ce:a7:f4:18:76:50:40:8f:ae:ac:10:db:3a:29:
31:1f:0d:c7:4e:61:8c:d9:5f:7e:6c:f8:c9:cb:dc:
79:7f:86:bf:1e:9d:3e:0d:01:9f:a6:cf:41:7f:c3:
e8:19:94:b3:87:c8:ae:4b:08:65:e6:2b:75:4c:83:
eb:09:55:63:63:78:cf:0a:74:80:1b:fe:4f:88:70:
0a:be:d3:60:48:4a:db:9c:4b:3e:d1:5d:f5:3a:e6:
cf:f9:99:a4:17:1d:71:90:0c:62:c6:9f:93:34:9b:
97:06:10:4a:99:fa:a1:b6:64:59:90:1a:20:14:33:
ab:20:a2:91:6c:da:5c:35:89:87:c1:7c:d4:b7:07:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:FB:79:ED:D6:C0:28:0C:4B:03:04:38:AB:F1:DA:13:F2:36:F0
X509v3 Authority Key Identifier:
keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:20:1e:79:14:de:d9:5e:4f:55:27:fa:cc:65:55:3e:ba:f3:
25:13:b8:71:08:d1:3b:37:b5:0e:d7:b4:2e:49:39:d4:06:3c:
5b:a7:fa:4a:b0:98:15:8e:46:43:fd:e2:6c:6a:80:76:72:ce:
bd:fb:98:f4:c3:06:80:ac:f6:c2:fb:c9:03:2c:1a:0a:22:d6:
89:62:e0:08:5a:89:01:df:6b:53:b9:af:53:31:cb:68:38:38:
12:8b:68:e5:75:34:c1:bc:cd:b6:14:72:dc:5e:90:4a:61:0a:
c2:ef:20:54:8f:54:de:b7:be:04:7a:97:9b:e4:13:8b:51:e1:
35:17:db:20:f7:ef:85:a7:9b:0f:de:52:94:d0:9a:a8:68:f2:
49:75:a9:9e:20:51:a3:9c:c7:9f:00:71:40:1c:35:4c:9d:4f:
cb:34:57:49:fc:86:6d:3b:16:e7:46:72:72:2f:fb:70:4e:6e:
f8:02:9a:12:2e:65:0b:de:90:45:37:a6:2b:54:ee:01:c8:91:
95:46:2b:8c:28:5b:72:3b:7c:a2:20:01:cd:7f:85:17:5d:21:
31:4e:64:0f:53:b3:6a:f9:8c:97:3b:f4:ba:8e:64:88:23:b7:
b5:f7:87:a9:52:74:74:76:70:68:3a:33:7c:02:24:26:ef:1d:
6e:ea:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:36 2026 by rpki-client