
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier: 8p5r/xfcul5L+wBt9DV8PtMY1uMIemkwtO5zZT3sbGk=
Subject key identifier: 6C:04:49:6F:7E:E1:6E:20:6A:19:06:EC:4E:D0:51:25:16:DE:C4:CC
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number: 018C
Signing time: Sun 15 Nov 2026 04:47:31 +0000
Manifest this update: Sun 15 Nov 2026 04:47:31 +0000
Manifest next update: Sun 22 Nov 2026 04:47:31 +0000
Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: zABVPMY1JYndZqoO36JXwaKt38YUNgY05OT71fenKD8=)
2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: 3rA9rC2BwMHWuNUIiNtAf19jNqgulh5ILEr/uD2iCxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 04:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Validity
Not Before: Nov 15 04:47:31 2026 GMT
Not After : Nov 22 04:47:31 2026 GMT
Subject: CN=6af93963-bdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:ba:17:9c:86:e9:2e:93:67:53:85:6f:29:
91:93:84:8e:b8:4a:c0:47:cd:a3:b7:b5:c5:10:15:
21:46:f7:9a:f4:73:53:63:4e:95:a6:f0:00:16:f1:
ba:c9:d0:ec:ee:fa:d5:76:fa:8a:c6:7e:72:94:5c:
19:22:52:97:30:b2:6c:e0:c7:93:a2:d5:fc:63:04:
82:3f:4a:bc:4e:86:eb:8c:ea:81:c7:e3:04:2c:a5:
ba:1b:b2:9c:94:a2:78:fe:18:84:17:8c:5f:a8:e4:
3e:5e:c7:33:dd:e7:b3:44:84:3d:75:a9:be:da:a6:
0f:fd:2e:bd:18:95:43:25:34:f7:cb:be:88:5d:04:
b9:05:02:4c:79:d9:a7:92:01:2d:62:c7:5a:f5:b2:
75:25:31:80:1e:d9:79:f3:0e:53:0b:7a:4e:bb:79:
37:2d:0b:11:49:4d:6a:e7:5a:3b:c6:ef:be:ae:84:
af:70:63:cb:c5:ff:67:b5:96:66:98:9b:86:e7:af:
c5:f7:58:ba:38:51:13:60:91:99:97:e6:45:4a:90:
65:29:c2:84:bb:7f:b7:1a:38:fe:2f:8b:6c:22:0d:
ae:a4:29:59:00:98:c6:20:03:c4:21:5c:77:4d:ae:
2a:87:15:6c:e5:24:a0:ea:92:9a:93:c1:49:75:ae:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:49:6F:7E:E1:6E:20:6A:19:06:EC:4E:D0:51:25:16:DE:C4:CC
X509v3 Authority Key Identifier:
keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:67:20:b7:72:44:e7:d4:3b:53:b3:af:83:0e:c5:f4:1b:20:
c7:c4:a1:56:9f:62:4c:da:b4:c1:92:d1:70:fe:ff:05:d4:2c:
4e:41:f7:8e:49:1f:7a:0f:31:50:a9:64:81:5e:53:48:0f:f5:
54:a5:1f:63:ad:06:79:16:c5:a0:77:03:ce:3f:d1:35:a4:18:
ab:67:44:f3:e8:47:2f:6b:c6:50:07:de:0a:0e:f6:c6:4a:37:
af:59:54:b4:40:20:e1:5d:55:b9:4b:47:d2:85:b3:2a:08:06:
58:48:25:eb:dc:f8:c7:7e:51:bc:37:af:1f:be:22:cc:dc:21:
d0:9f:68:4a:b7:9e:cb:3e:9b:f5:6f:47:c8:3f:f9:37:3b:ad:
bd:3e:e0:74:16:45:05:e7:dd:d7:bd:c0:96:c6:4c:9f:68:ad:
f5:64:ec:bd:aa:b3:c1:11:b1:f4:6a:0f:b8:ba:3b:d2:84:60:
f8:40:26:0d:96:71:ab:3c:86:0d:68:b8:8a:2b:54:d6:78:7a:
53:9b:b6:a0:5e:16:6a:7b:64:6c:23:06:2e:1f:6f:5d:00:7d:
49:27:ae:41:47:47:b6:18:59:32:1c:67:35:d0:1f:2c:9c:63:
0d:e1:4e:55:30:33:67:ee:b6:ca:96:d4:8e:f3:b7:5c:c0:45:
fc:00:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:59:19 2026 by rpki-client