
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier: kGX7QcSM68eVsB68Rn5DO/T/hQK9A4tjpNuOmgjPyy0=
Subject key identifier: 72:7B:41:53:46:B7:B3:91:28:9A:DE:6E:E3:05:C1:F2:9A:77:F7:B8
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial: 0582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number: 1B12
Signing time: Tue 22 Sep 2026 16:41:37 +0000
Manifest this update: Tue 22 Sep 2026 16:41:36 +0000
Manifest next update: Tue 29 Sep 2026 16:41:36 +0000
Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: djPYBEk0wSgtK+CmV3n1quDGq72gfIrnrqJLTU7puBM=)
2: 5A46B5469BE811F1A1CB396A6211F970.roa (hash: htCWMQwYnAdNrZ7ue5iAAfX45+MA9QIuh6+oV7sF4po=)
3: BB90B3249BE811F188B60C046311F970.roa (hash: adapqyoaMpriFk8shJ47WPubnDhRH3fPAQYXpJULaPE=)
4: D3BEF96E9DFB11F186DD6C154711F970.roa (hash: wF75SDUjVmi1kxBJeur6uM4CoOGCTkO9pOXi+iOZ0uQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Validity
Not Before: Sep 22 16:41:36 2026 GMT
Not After : Sep 29 16:41:36 2026 GMT
Subject: CN=6ab2afc1-4552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:29:4d:ab:cf:6c:a2:ce:ed:42:1f:f2:b8:
54:2e:9e:7c:ff:5e:b3:83:0e:43:13:a1:59:11:7f:
ee:6d:2d:77:05:56:0e:d8:a7:6f:e7:3f:0d:7c:3c:
2c:a6:51:b9:d2:2f:74:54:fc:5e:ef:21:9a:fa:9b:
13:90:3d:04:fc:af:95:2a:63:50:93:f7:0e:97:c2:
34:f5:c3:c5:4a:48:90:69:26:eb:77:52:c3:ce:a0:
3d:fe:81:8f:1f:41:a3:76:e0:ce:34:2f:db:32:4a:
58:2d:b3:c3:af:14:2c:68:21:31:10:01:d3:e5:fd:
54:a4:17:31:16:c4:d6:85:f3:1e:31:59:09:f2:8c:
96:9b:e5:80:2f:81:5b:f2:f8:ca:e6:b4:6b:c2:9f:
02:55:33:60:6e:cf:58:d6:21:f0:dd:5e:52:05:82:
86:55:58:b5:ea:eb:2e:a4:dd:80:05:05:ae:92:21:
e5:5a:f4:be:50:40:8f:f0:e5:57:1d:52:03:5e:c6:
58:39:59:d5:a7:f1:1c:13:13:86:11:a6:d1:09:9c:
67:12:e6:38:12:d3:56:49:df:cd:10:75:a1:df:ac:
80:90:8f:f2:bb:ab:f0:ee:fc:85:3b:00:1d:40:66:
39:1b:36:f6:ff:a8:3f:ee:44:23:da:32:68:f8:65:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7B:41:53:46:B7:B3:91:28:9A:DE:6E:E3:05:C1:F2:9A:77:F7:B8
X509v3 Authority Key Identifier:
keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:6d:4a:62:27:27:b5:55:22:4d:c5:40:6f:0c:57:85:b6:5b:
09:4c:a7:1d:c4:79:8e:6b:30:88:5d:86:36:25:7d:3d:b6:36:
4c:7f:9e:8f:85:80:cc:57:af:94:7e:67:f8:6f:b1:6f:72:90:
62:29:f9:7e:0c:0d:19:aa:18:06:68:79:11:6e:58:ab:d0:c5:
38:45:c3:c5:f0:e4:2e:44:b1:97:f7:46:16:62:82:0a:de:12:
b4:6d:88:4b:66:60:28:c2:80:e0:89:21:d0:67:09:a5:1d:d2:
a6:fd:19:c1:d7:7d:78:50:d4:cd:5b:8f:7c:57:76:4f:5d:78:
08:86:a3:08:29:9d:a4:a0:75:3f:84:42:84:eb:53:3e:4e:de:
bb:bf:b7:8a:7d:04:b2:2b:68:09:da:17:87:43:c9:4f:e2:03:
ee:70:8a:d6:8a:2a:cc:ba:e7:b0:b1:7f:39:1d:f9:3e:00:e8:
05:13:52:4b:34:a6:01:97:68:a0:97:08:6a:cc:7e:2c:19:42:
27:b9:d6:2a:af:68:1f:4f:e8:f1:b9:ab:56:29:8a:fe:ea:cd:
b5:5c:ec:9e:eb:77:84:c1:56:50:68:f2:93:7a:c2:cd:a7:f4:
00:85:e2:fc:46:8a:be:5f:eb:17:24:49:ee:f6:ff:45:42:81:
80:13:4f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:33:55 2026 by rpki-client