
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier: RglopWlPZpZu2EDualyE+hFcvHfRnhBF/RPfmyl2+GM=
Subject key identifier: 80:BC:3A:7B:AF:DA:FB:0A:A3:DE:C8:0F:80:4C:AC:CB:C8:94:F4:95
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number: 01FD
Signing time: Fri 25 Sep 2026 03:17:15 +0000
Manifest this update: Fri 25 Sep 2026 03:17:14 +0000
Manifest next update: Fri 02 Oct 2026 03:17:14 +0000
Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: 9XMXidMMnEgxGnPhNiJvGBfudga6AXoBOPLR3KzA6/E=)
2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: MuFeUXJQMqi0fVou2JntsqZgqjdBB8a9imttA6TArYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Validity
Not Before: Sep 25 03:17:14 2026 GMT
Not After : Oct 2 03:17:14 2026 GMT
Subject: CN=6ab5e7bb-1874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:72:54:f3:fd:00:53:73:7d:9a:01:55:ae:
30:79:97:c9:05:5c:86:bd:15:a3:22:c4:d9:00:f6:
6e:b2:34:5d:32:17:19:0d:0b:00:15:83:01:5d:4c:
c5:e4:35:5e:54:e0:02:3e:fb:f9:b6:f8:69:01:e2:
97:2d:ca:68:ff:fd:68:05:46:a2:aa:8b:02:77:16:
1f:92:24:6d:78:ff:cd:2d:70:ed:1a:f1:ae:63:71:
cf:7d:82:7a:b7:24:79:c1:b7:80:a4:0e:af:e5:d3:
a1:7a:ee:96:57:82:ac:e5:3f:dc:4e:e6:a7:39:c7:
00:d1:ed:0d:d0:71:82:b3:1f:4a:f8:0a:56:39:a5:
d5:a5:f2:23:ea:98:70:30:58:3f:3a:48:4e:b0:13:
7a:80:54:70:60:e2:28:f1:3e:b6:8b:11:9d:92:02:
6c:88:b2:47:a4:71:55:ab:85:22:26:21:6e:42:f4:
16:17:3b:94:72:b2:e4:15:0e:ca:83:39:90:19:a3:
92:df:0d:19:a8:1d:fe:22:96:22:88:72:35:e6:20:
41:9f:55:76:4f:32:75:c2:5a:f7:04:62:a2:08:ee:
80:b0:2c:2d:dc:15:53:6f:fd:d7:b6:6e:c0:a2:14:
7f:f8:1b:2e:ea:0f:16:f7:34:14:d1:07:3b:36:63:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:3A:7B:AF:DA:FB:0A:A3:DE:C8:0F:80:4C:AC:CB:C8:94:F4:95
X509v3 Authority Key Identifier:
keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:51:52:89:9a:c1:75:33:68:ee:26:04:36:3f:ef:9a:34:36:
02:6d:7e:a9:c3:18:4c:cd:11:6b:87:48:9c:4b:c5:f1:ef:3a:
4d:8e:8c:b5:69:da:18:4b:f7:93:ad:8e:24:bb:de:09:c5:8d:
22:d6:70:08:e3:15:f0:61:20:f7:76:ae:c3:b1:36:55:f4:9e:
7d:ea:83:9a:5d:74:cc:de:40:b3:5d:66:19:5b:f2:6b:12:4f:
7d:0b:dc:02:66:2d:96:d6:59:c9:a8:bb:fd:30:35:96:4d:a3:
e6:9c:f6:e8:d0:31:6b:3c:43:3d:28:ba:5d:e7:e9:b5:49:71:
e3:b9:ce:80:9f:c1:6e:36:32:37:67:80:da:ec:64:1a:4d:4c:
bb:a8:0d:65:7e:cc:51:a6:a0:2c:97:3d:22:85:e5:39:eb:c6:
1d:71:fb:18:76:4e:d9:d3:0e:f1:37:ad:9c:54:fa:d8:db:00:
c8:97:b5:dd:38:ef:93:3f:1f:b4:6a:dd:90:c4:f6:72:ea:84:
5d:02:41:e0:7d:f5:de:d6:42:60:19:e5:00:50:e3:a1:38:5f:
e5:ed:7b:16:d4:7e:b2:9e:dc:53:48:20:e9:a3:53:e5:1d:9b:
45:87:5c:89:e1:db:16:9f:0f:86:01:fa:6a:59:9a:b5:8f:98:
b6:21:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:54:59 2026 by rpki-client