
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json)
Hash identifier: 9bZj5DfoDDcq67ByOkfP+HyyJ5uGXBCYzxFkTkyTqGE=
Subject key identifier: A6:2E:F3:17:73:41:C9:06:5D:A4:0B:FB:B7:B4:E3:BA:45:18:18:BA
Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Certificate serial: 0AAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
Manifest number: 0AA2
Signing time: Tue 12 May 2026 19:34:35 +0000
Manifest this update: Tue 12 May 2026 19:34:34 +0000
Manifest next update: Tue 19 May 2026 19:34:34 +0000
Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: KBkzJ1vyv2Hm8fzOj9QQVhGDSdqAC/E+Uml7lWNclOc=)
2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 6zwL+CyahpyzOQDZ6R2F0afujTGC0qWAsIklrEXhVhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2735 (0xaaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Validity
Not Before: May 12 19:34:34 2026 GMT
Not After : May 19 19:34:34 2026 GMT
Subject: CN=6a0380cb-ce32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:79:35:4e:a6:0d:69:f7:98:92:cc:3c:09:
ea:d5:d3:c7:4e:8a:3d:14:41:06:24:08:d1:8c:4d:
ca:84:51:9e:0d:31:66:8e:31:c0:eb:9a:1a:b3:4f:
58:80:05:02:a1:9c:6a:1c:3d:99:f6:d8:8d:8b:55:
40:b3:70:08:d5:dd:ba:61:43:59:16:c3:e0:3f:be:
78:8b:0c:f1:38:bd:83:05:2a:19:72:6c:8d:54:96:
12:c2:2d:f0:85:46:59:ee:58:3b:7d:ff:e3:43:87:
1b:e3:c3:59:55:d7:02:ea:2b:9c:29:75:25:19:3b:
27:df:dd:2b:8f:f9:d7:3a:62:94:65:7e:59:a9:1c:
6a:03:b4:cd:40:4a:81:99:4a:b9:7b:2b:8b:cc:82:
60:a5:9e:39:5b:41:8c:50:02:99:86:25:6e:b6:fd:
84:56:a2:04:43:49:68:2a:f0:da:91:2c:31:8a:a6:
97:24:a0:02:aa:65:04:02:f9:05:79:4b:a1:1e:3d:
c1:df:cd:aa:0c:30:4c:46:89:f1:c0:1e:e8:b2:42:
a7:9f:6c:96:e2:46:78:18:90:4b:c4:c7:b7:36:64:
4b:95:97:38:c5:68:2c:76:15:6b:d9:d0:1d:c0:7a:
84:02:c2:ab:63:65:1d:32:f1:6b:1b:60:13:d8:16:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:F3:17:73:41:C9:06:5D:A4:0B:FB:B7:B4:E3:BA:45:18:18:BA
X509v3 Authority Key Identifier:
keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:f0:c3:6f:87:92:ea:2a:77:5c:80:e1:9e:53:af:f7:20:86:
2e:ac:7a:0a:a1:38:05:be:0c:a2:c3:85:10:db:fd:b6:75:56:
b4:da:c0:55:81:14:b1:4d:a1:c7:91:15:ec:9b:ae:9b:ef:c9:
f8:bc:9b:17:f1:ac:ee:03:7f:80:a7:18:69:9b:74:fe:9a:3f:
21:16:9a:4b:55:64:9b:89:2a:e8:00:c2:64:cd:30:09:00:7a:
fd:16:7b:26:e1:e9:42:da:4f:35:00:76:78:1d:21:7e:de:fd:
af:43:19:a2:90:50:89:c9:5c:cb:9b:c3:33:e0:3f:52:e6:d5:
ec:ff:3b:3c:8f:cf:7f:63:5b:6e:f8:ef:6c:fb:20:6c:2e:c7:
d9:fa:db:a3:83:1e:f5:6f:c7:24:91:45:4c:fb:2c:b6:ea:e4:
81:0d:97:40:19:35:4e:83:a0:87:26:8a:87:bc:35:9c:2c:16:
55:89:40:f9:8c:f1:ae:cf:00:cc:65:68:b9:42:67:14:b8:9e:
34:d8:c1:58:4d:84:68:ac:1d:c3:3f:9d:f5:1c:ac:4b:5a:ef:
3d:8b:7c:64:29:0e:0a:58:ed:a8:a2:31:ee:97:43:4a:bf:6d:
ad:e5:d4:3f:15:a6:7a:ff:69:a3:82:40:6c:7d:90:e2:5b:ba:
5e:78:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:40 2026 by rpki-client