
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json)
Hash identifier: w0YAzLwrvzSFCzH3EL2LUHF57VERHTyu27sJ1yGCHYo=
Subject key identifier: 56:86:62:E3:37:07:C2:29:89:66:5F:09:95:44:D6:F3:A6:68:43:EE
Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
Manifest number: 0113
Signing time: Wed 13 May 2026 06:08:26 +0000
Manifest this update: Wed 13 May 2026 06:08:25 +0000
Manifest next update: Wed 20 May 2026 06:08:25 +0000
Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: VQDw1PrTb/9tvNeb6PTP/VpqwOZXWYb4sVHE0nOtrMI=)
2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: nV38DqB6S2s+obaWtL39HR2W0RXsAZejFz8xEU6bYCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Validity
Not Before: May 13 06:08:25 2026 GMT
Not After : May 20 06:08:25 2026 GMT
Subject: CN=6a04155a-41ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:9a:1e:77:ef:c6:3b:e6:0e:86:2d:cd:9b:
ae:80:f0:c2:d7:18:3e:33:32:38:ea:44:d0:7a:58:
d4:2d:6d:5f:e8:2e:35:0c:57:59:9c:44:37:39:fb:
19:b9:b9:38:fa:7d:40:26:bd:c6:52:2f:e9:cf:84:
1e:19:e4:4b:ad:1f:18:20:d2:0a:d6:00:ea:5d:ca:
3b:67:88:60:6a:4d:86:50:30:12:16:08:59:39:11:
db:5d:59:d9:ec:33:6a:f3:42:d9:36:1f:c5:7e:ce:
aa:1e:e0:47:7a:b7:54:98:10:86:0e:bf:0f:ee:fd:
3a:98:bb:52:59:77:69:4e:ae:bc:2b:2c:5b:0a:62:
c1:5e:f8:64:c6:15:a9:a5:2e:67:7e:c7:d7:32:36:
e1:7b:22:a7:9b:08:2e:ed:11:a3:5f:0a:75:92:2c:
0a:f7:e0:53:d9:b9:6b:04:38:90:c0:94:c7:5c:77:
3f:65:b8:12:2c:ee:62:88:b5:a7:32:e6:76:4f:d2:
46:cf:5a:5c:54:3c:8a:8c:28:97:07:db:52:d8:e5:
0a:62:37:47:b4:ae:72:8c:1b:53:8e:57:b2:1c:d8:
a1:6e:43:0f:16:af:cd:52:75:fa:ae:29:08:51:76:
22:f1:6e:21:46:3d:bf:4b:f8:9c:52:d0:8a:66:39:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:86:62:E3:37:07:C2:29:89:66:5F:09:95:44:D6:F3:A6:68:43:EE
X509v3 Authority Key Identifier:
keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:a2:c8:37:09:b4:be:4d:3e:30:b8:f3:3b:26:4d:3f:46:39:
78:18:a9:a9:7a:65:8d:73:a1:ab:9e:cd:82:f3:b3:33:84:78:
e7:34:66:ce:2c:b2:e1:f8:4f:ad:df:6c:ea:49:e1:d0:63:67:
72:d0:44:6b:56:40:a5:7d:57:fd:85:59:4d:b1:aa:f8:99:ba:
73:66:7c:84:8f:6c:a2:73:b6:ef:ea:66:07:66:ad:5e:55:d7:
ae:ba:45:63:05:5d:ab:f6:96:e2:39:bb:c7:c5:59:74:bf:e8:
3b:63:15:e5:02:9d:cb:00:85:4f:1f:db:b5:ea:72:15:93:23:
88:1d:2d:30:b8:ce:c5:81:b2:69:e3:67:fd:76:4d:11:e7:fd:
d4:24:ca:d9:42:db:c9:22:16:37:c7:41:4c:a0:f0:5e:d3:25:
04:90:75:2d:05:e8:0e:c9:31:74:b8:f2:88:18:19:0a:2a:48:
89:11:36:ec:93:3a:6f:ed:e9:6f:c7:8e:fd:e8:33:d3:2d:98:
1e:03:db:6b:eb:0a:cc:93:91:f4:f5:80:77:00:8a:8c:48:39:
86:65:ab:74:99:c4:1d:2a:a0:a6:1d:be:f0:fe:6d:05:60:f2:
4c:0b:6c:a0:e0:5e:9f:25:c5:9b:a2:49:da:58:a5:88:b0:e6:
42:df:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:38:23 2026 by rpki-client