
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File: bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier: b2wQY4P1kC+Pu9VCg4V2vhMz7tbQ7yajQMcyl4gkEdk=
Subject key identifier: E2:A4:2A:81:0A:33:11:F1:3D:E6:20:AC:D0:4D:FC:E7:26:55:E4:92
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer: /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number: 67
Signing time: Thu 23 Jul 2026 09:58:17 +0000
Manifest this update: Thu 23 Jul 2026 09:58:16 +0000
Manifest next update: Thu 30 Jul 2026 09:58:16 +0000
Files and hashes: 1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: wql0aiNM9HU94GjHfD7mYOSbOFnYysy0CfaJ5R0zZks=)
2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Validity
Not Before: Jul 23 09:58:16 2026 GMT
Not After : Jul 30 09:58:16 2026 GMT
Subject: CN=6a61e5b9-d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:ba:b3:08:01:33:b2:25:fe:5c:d9:be:df:
7a:12:7a:55:f8:70:2c:3d:7c:27:c3:a9:68:fd:4e:
3a:97:8a:f8:a5:29:d7:be:44:43:db:40:10:68:84:
8d:7a:9b:14:24:4c:a7:c2:79:ef:ec:f9:0d:8e:c3:
39:a4:55:e9:28:5d:a5:34:d5:bf:94:bb:87:b9:c2:
a5:1d:fd:b4:ab:ce:77:ae:31:e1:b3:57:ad:6f:d3:
d9:9f:12:b2:33:ce:b3:30:71:04:24:5d:49:48:51:
e1:9e:ba:72:9b:92:8b:a9:af:02:11:cf:5b:45:e4:
a6:db:bd:a7:ae:d9:8b:42:6e:2c:e2:74:e7:ea:d6:
2c:f0:7c:f1:c9:e0:9c:d1:23:ad:e3:60:31:10:9e:
88:c6:a9:5f:b9:9b:b3:9b:cd:74:8b:ba:55:92:c7:
30:e2:ac:2a:81:de:0c:97:41:29:16:a6:8d:9e:b4:
c7:a8:69:22:a9:79:42:b4:71:95:15:88:d5:c1:b4:
a2:9b:8a:15:b8:a7:d3:64:0b:11:48:64:db:e9:f6:
24:9b:eb:69:c2:e6:8c:4a:b4:82:31:7b:2d:d1:80:
1a:4b:06:b2:f8:3a:14:7a:3d:2f:fd:56:92:a2:15:
c3:9a:c6:1c:95:ef:77:d6:8f:20:c8:30:4e:3e:33:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:2A:81:0A:33:11:F1:3D:E6:20:AC:D0:4D:FC:E7:26:55:E4:92
X509v3 Authority Key Identifier:
keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9e:53:09:e5:2b:d3:c7:4b:d4:80:24:77:63:29:32:40:3f:
8a:be:5f:c3:07:45:26:2f:06:21:e9:b8:d0:39:48:89:7f:2c:
ee:8d:4f:b5:bf:ce:a0:60:27:26:ca:7e:b0:e0:02:85:00:41:
55:46:ff:b5:20:4d:fe:0b:a2:cc:3a:90:d7:8d:ef:1e:be:a0:
b3:7e:d4:91:8f:3d:78:24:7b:fb:97:e7:ad:49:e6:79:ba:38:
75:f9:00:bd:22:8d:0d:51:0c:8c:3e:46:66:51:64:58:46:5a:
2f:72:45:48:20:40:86:0e:06:08:d4:99:84:b7:00:22:ad:54:
11:1c:7b:24:f4:20:a1:20:08:e0:19:76:fe:04:8f:e4:3a:01:
b6:74:85:ed:4b:b7:b0:81:d0:08:1c:ca:aa:5b:df:71:a1:78:
9f:58:84:e3:55:f9:fc:ff:10:45:d9:00:9a:00:ef:35:a1:d4:
f5:ba:ae:c3:32:06:ad:b9:f4:42:20:31:e5:f5:e4:46:38:a2:
b1:8e:ad:c7:0a:75:b3:7d:cf:83:3e:7a:f6:7c:18:d6:71:e8:
8f:19:52:75:b9:4e:41:f0:a2:b6:99:db:c5:0d:50:56:fc:62:
6b:cd:63:57:ac:7f:e9:0f:4d:a9:70:ae:e0:b3:29:d1:0f:44:
05:9f:76:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:56:13 2026 by rpki-client