
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier: 2fvhgfYRwqY9Gvm9bzPavgN9ARd+rmZgCVChKTw/7cQ=
Subject key identifier: 98:A4:29:22:C2:97:CD:13:27:54:A0:EB:6E:C1:77:76:F1:64:BB:CA
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number: 012B
Signing time: Mon 11 May 2026 05:43:30 +0000
Manifest this update: Mon 11 May 2026 05:43:30 +0000
Manifest next update: Mon 18 May 2026 05:43:30 +0000
Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: 3n3NrLbSWheTpTSvdr4lqZ0XuU0oSV2KlJ4BSHQExxI=)
2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: N8OST72L0V0eTFnYcjzgV/oZzJ5hZOrN4k5ZtWUp5Q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Validity
Not Before: May 11 05:43:30 2026 GMT
Not After : May 18 05:43:30 2026 GMT
Subject: CN=6a016c82-9154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:35:f8:e7:b7:cc:77:03:75:51:14:79:e3:
c1:05:a4:e3:6e:0e:4f:4b:ca:f1:30:be:85:a3:f5:
48:99:30:41:80:a6:07:09:bf:19:f4:cc:e0:96:62:
2a:c3:55:6a:40:57:ff:14:3e:ef:57:81:e2:28:7f:
18:89:63:4a:90:fb:c5:4e:21:d4:c1:1c:69:25:56:
49:85:7c:9e:e6:29:85:75:31:ef:d6:93:ab:0a:8c:
19:87:f6:a4:2a:a6:07:e7:96:04:d2:af:4b:5b:d7:
e6:93:37:83:3a:b0:3b:ba:90:e3:81:df:3c:64:d8:
5d:cb:d9:75:f1:f0:a5:e7:d5:c5:ca:c0:9d:89:30:
66:91:64:18:32:ce:ad:69:92:39:2c:86:ae:8c:5f:
a6:d8:90:7f:2c:b0:63:ec:1e:27:30:18:dd:ce:3d:
6a:25:6e:b7:b3:f7:32:e9:2f:55:a3:7e:7d:5b:fc:
a1:52:8f:f8:0d:5c:a5:64:70:6b:28:d9:6f:3f:14:
a3:ee:92:6e:48:44:62:0d:fd:80:a3:75:42:31:b5:
f0:99:a7:3e:a1:ea:a2:0a:d9:c4:f9:b2:0b:20:38:
c1:3e:9a:81:12:f6:2c:af:4d:4f:94:b3:1a:72:4e:
0d:39:63:db:4d:a8:15:c3:c0:a4:a4:ad:93:b9:da:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:29:22:C2:97:CD:13:27:54:A0:EB:6E:C1:77:76:F1:64:BB:CA
X509v3 Authority Key Identifier:
keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3c:1b:cc:4d:99:d2:2a:e5:ea:d9:dc:f6:3a:3d:49:a5:f9:
01:9d:a4:73:36:99:23:98:36:fa:52:39:1e:37:4f:32:da:30:
c7:16:2d:76:10:1f:8e:8f:79:14:55:d9:72:ad:8c:97:c4:65:
60:93:6b:b7:7c:54:1a:bb:ba:03:97:de:17:d8:74:23:ca:7c:
70:f1:c9:fa:3a:ee:8b:8f:ee:b4:b7:e9:8b:1f:78:52:5f:b2:
02:f1:32:f7:29:e1:e6:b3:56:9a:fc:19:06:66:7b:6a:ed:c9:
52:7f:ca:76:ed:12:ff:ff:20:df:55:87:74:7d:a8:0a:ad:3d:
26:98:4f:5f:1d:1b:b1:6b:1b:50:86:40:e6:af:33:de:26:55:
6b:f4:38:14:4d:b8:92:83:ce:b3:19:c1:e2:55:61:4b:86:37:
4e:f7:00:87:0b:6f:18:4d:92:2e:05:79:e6:0a:4b:88:01:b4:
12:4b:c0:7d:15:90:90:a8:e6:10:3c:d1:ae:e7:2f:c3:5c:38:
ac:0b:8c:73:ca:57:03:d9:72:10:10:09:88:66:58:10:73:4a:
1d:bd:b6:8b:ac:5f:b4:35:90:62:ff:e9:f1:0e:30:7d:7f:42:
05:a5:80:72:64:98:66:69:8d:6b:87:a5:ec:03:49:62:93:d1:
bf:d6:f8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:45:16 2026 by rpki-client