
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
File: bLMNwI7ylzDp3wScVPOVgquFvpQ.mft (raw, json)
Hash identifier: R8jrGXDWsbA08nelGGKhya2rtP5KOzHfbmz3BungdBE=
Subject key identifier: EB:F3:6E:49:26:C6:9A:B8:C5:A1:EF:5F:D6:7A:7C:44:6D:B2:45:24
Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94
Certificate issuer: /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
Certificate serial: 1375
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
Manifest number: 1367
Signing time: Tue 12 May 2026 17:00:13 +0000
Manifest this update: Tue 12 May 2026 17:00:12 +0000
Manifest next update: Tue 19 May 2026 17:00:12 +0000
Files and hashes: 1: bLMNwI7ylzDp3wScVPOVgquFvpQ.crl (hash: ztffahzYtXTGtPCrF8vypxiYxGbhpLuao4n3Tdzrdjg=)
2: 18272628C30B11E8A6851824C4F9AE02.roa (hash: kMK6cFoyDF+YC63uz7mLOHILoZmbrgDgimkdvFEz5OA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl
rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4981 (0x1375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C40D1, serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
Validity
Not Before: May 12 17:00:12 2026 GMT
Not After : May 19 17:00:12 2026 GMT
Subject: CN=6a035c9c-9fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:09:ea:d5:78:24:87:92:cb:3e:1d:4a:70:
8b:c1:7e:7b:64:13:97:11:3a:ba:86:8f:94:81:6b:
b1:db:e9:90:88:22:d2:f6:68:6a:dc:c7:8f:86:58:
64:56:09:6e:65:5f:6a:e4:7f:25:ec:2d:b4:8e:fb:
db:e0:01:f5:8c:a3:1c:40:30:05:c3:ab:a9:52:34:
31:85:55:0b:d2:9c:bc:6c:6d:cd:2b:08:81:27:f2:
a8:e9:00:fa:e7:65:45:e1:40:61:83:ce:7e:a6:d4:
35:21:db:c0:40:66:2e:81:aa:d3:90:6b:e3:b6:ba:
82:fa:91:d2:6f:75:78:ae:4b:40:85:7e:e8:93:d9:
94:51:ce:4f:d3:44:0c:ae:99:d7:98:7a:2b:b9:79:
57:f2:2a:2c:78:3a:f2:90:09:1a:aa:4b:af:2f:3a:
cb:27:63:cd:e0:4f:c4:94:c9:00:3d:ed:0f:b4:cc:
85:48:0f:1d:dc:da:bd:fc:ec:e8:89:51:3b:cc:ce:
fc:8b:28:aa:7a:41:8d:b4:87:a2:51:e0:01:2c:6a:
90:b0:d6:6c:c4:d4:08:ee:2f:f9:90:77:e4:9d:9a:
e8:5d:c1:06:5d:aa:5d:c3:d7:6a:3d:be:65:22:8d:
9b:e1:b2:f7:d2:2d:f4:07:86:55:57:de:55:7f:dc:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:6E:49:26:C6:9A:B8:C5:A1:EF:5F:D6:7A:7C:44:6D:B2:45:24
X509v3 Authority Key Identifier:
keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d8:0c:76:20:5a:9c:b8:20:f7:78:cf:ce:31:6b:c2:1b:bb:
d5:f9:68:6e:0b:90:a4:c1:38:bc:f3:2b:f8:a6:9b:80:44:bf:
3b:36:d6:55:0c:0b:8c:bc:0d:f4:8a:2b:c3:94:7c:00:21:b1:
6c:9b:aa:43:a1:1b:9a:3a:e8:d2:85:14:9f:dc:fa:63:09:13:
69:4b:ad:b0:34:57:cd:c0:60:41:94:e7:6a:66:64:fa:66:ed:
cd:22:10:89:b3:f4:05:97:eb:cf:12:48:96:5a:ec:02:a9:2b:
4c:9d:bd:d1:a1:e4:6d:ee:7f:ca:b2:09:a3:74:17:e7:1e:b9:
d1:c0:69:2d:14:5b:97:ec:30:81:f1:0c:16:29:48:63:b7:01:
68:09:21:6c:fa:d1:1f:a4:f8:83:09:49:dc:0c:5b:5d:dc:33:
65:ad:e6:9b:33:55:fa:66:6a:92:0b:31:b6:f4:9d:5f:fc:ac:
8b:f8:3b:1e:9a:a1:7b:ed:04:9f:10:81:d5:56:ff:2e:70:d3:
1b:56:1c:03:98:13:ce:36:e0:33:3b:c8:d1:45:f7:b3:fa:f9:
c3:54:59:12:c4:35:bb:8a:66:84:5f:4a:bd:b4:88:69:6e:ea:
58:cb:8f:d1:52:e6:43:bb:bc:06:a1:e6:b1:5b:4e:07:ee:c1:
94:6a:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:21 2026 by rpki-client