
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier: l2RA2vQmQx18RzsVBEqI+QyvPoQdXzaWvgASYpdvg+A=
Subject key identifier: 30:FF:F7:8F:DB:86:B7:06:B3:43:78:0F:94:7E:3F:34:07:E8:E2:B4
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number: 01A0
Signing time: Wed 25 Mar 2026 03:31:25 +0000
Manifest this update: Wed 25 Mar 2026 03:31:25 +0000
Manifest next update: Wed 01 Apr 2026 03:31:25 +0000
Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: HYSpLc+wNn175lZEy/dSW0J+zEbL3N5/alhIq4NKq+4=)
2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: MuFeUXJQMqi0fVou2JntsqZgqjdBB8a9imttA6TArYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Validity
Not Before: Mar 25 03:31:25 2026 GMT
Not After : Apr 1 03:31:25 2026 GMT
Subject: CN=69c3570d-74b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:d4:58:c3:4c:3c:e6:25:51:9d:45:48:7d:
7c:46:97:74:77:7b:1b:7f:e7:96:63:a4:e6:e9:b2:
ed:bb:ea:d8:df:d9:46:b2:fc:20:98:a7:fa:c6:52:
fa:e2:5a:3f:96:4c:41:a0:f1:4e:c4:0b:f3:8a:08:
1a:23:97:20:1f:06:1c:61:b9:71:92:c8:e5:71:78:
75:43:42:98:ce:73:da:78:cc:f5:0f:ee:58:6a:5a:
1e:1d:75:57:ec:b4:68:cf:02:28:7c:bb:ad:19:ae:
fd:9e:da:e3:52:b6:03:2d:ad:e7:0c:47:8a:91:85:
91:63:1a:b1:58:0f:a9:e5:3f:45:0e:b7:47:21:c5:
08:23:44:3e:87:4d:26:26:9e:9e:07:fc:dd:bb:a2:
b5:1f:fc:3e:61:44:74:92:b7:fd:59:45:b9:87:50:
e4:d6:51:a8:e9:ae:2a:23:41:c9:ed:36:09:4d:72:
d9:95:6d:df:de:40:6e:08:6a:c0:1a:0e:14:a7:b0:
3e:c6:39:25:5b:82:b2:54:22:49:f1:cd:cd:06:8f:
b8:9d:57:ee:86:ce:66:2b:c3:f3:7f:31:46:89:00:
e6:f3:b7:4f:c8:14:04:31:a6:9a:12:81:ce:8d:18:
88:1b:c0:6a:09:4f:19:14:7b:fa:d9:b4:95:1b:a9:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:F7:8F:DB:86:B7:06:B3:43:78:0F:94:7E:3F:34:07:E8:E2:B4
X509v3 Authority Key Identifier:
keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:21:0c:57:97:0e:22:76:7e:85:14:f5:1d:c4:ea:d7:9e:40:
30:17:d3:68:83:ac:2b:81:61:a2:76:a4:90:c7:3d:36:46:f6:
24:72:d4:38:52:1b:75:f9:42:36:28:29:ac:14:12:d8:b7:65:
a1:a0:9b:d7:54:b5:a9:36:84:d4:14:d1:a7:06:95:8f:ad:6d:
1c:95:6b:2a:94:83:a4:c4:81:a6:64:c5:e4:a4:cb:e3:fa:5c:
50:21:62:ca:83:76:21:2c:28:ad:bf:63:dd:c3:2e:9a:84:60:
f6:a8:2e:2b:84:b7:88:d3:a0:c7:06:43:10:94:06:e1:70:a6:
0e:73:cb:6f:89:83:ad:5d:de:4c:60:9d:a4:08:25:5c:99:be:
24:cd:bb:08:60:95:d9:05:a2:9a:e5:ab:ac:b5:b6:8e:61:55:
a6:db:14:47:b7:a3:73:28:3f:f7:1e:df:b3:84:89:bd:9c:50:
97:01:8b:b2:1e:6e:ea:9d:0e:5a:b8:65:a3:b4:f7:92:b6:cb:
3e:85:73:df:d8:ca:aa:94:91:34:6e:b3:0a:3c:4a:8b:3f:fc:
ec:e1:4c:59:98:4b:47:c4:65:d4:11:3c:b0:85:1e:59:c6:4e:
0d:59:03:60:e7:7c:d8:a2:fa:c8:1e:cf:3f:7b:f1:b5:87:44:
76:10:28:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx
N0U0QzU3OEEwHhcNMjYwMzI1MDMzMTI1WhcNMjYwNDAxMDMzMTI1WjAYMRYwFAYD
VQQDEw02OWMzNTcwZC03NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGLUWMNMPOYlUZ1FSH18Rpd0d3sbf+eWY6Tm6bLtu+rY39lGsvwgmKf6xlL6
4lo/lkxBoPFOxAvziggaI5cgHwYcYblxksjlcXh1Q0KYznPaeMz1D+5YaloeHXVX
7LRozwIofLutGa79ntrjUrYDLa3nDEeKkYWRYxqxWA+p5T9FDrdHIcUII0Q+h00m
Jp6eB/zdu6K1H/w+YUR0krf9WUW5h1Dk1lGo6a4qI0HJ7TYJTXLZlW3f3kBuCGrA
Gg4Up7A+xjklW4KyVCJJ8c3NBo+4nVfuhs5mK8PzfzFGiQDm87dPyBQEMaaaEoHO
jRiIG8BqCU8ZFHv62bSVG6kqaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDD/94/b
hrcGs0N4D5R+PzQH6OK0MB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0
MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM
bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABiEMV5cOInZ+hRT1HcTq155AMBfTaIOsK4FhonakkMc9Nkb2JHLUOFIbdflC
NigprBQS2LdloaCb11S1qTaE1BTRpwaVj61tHJVrKpSDpMSBpmTF5KTL4/pcUCFi
yoN2ISworb9j3cMumoRg9qguK4S3iNOgxwZDEJQG4XCmDnPLb4mDrV3eTGCdpAgl
XJm+JM27CGCV2QWimuWrrLW2jmFVptsUR7ejcyg/9x7fs4SJvZxQlwGLsh5u6p0O
Wrhlo7T3krbLPoVz39jKqpSRNG6zCjxKiz/87OFMWZhLR8Rl1BE8sIUeWcZODVkD
YOd82KL6yB7PP3vxtYdEdhAo9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:29 2026 by rpki-client