
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
File: bZSAzzKE0AK1kfXiHbESCX_OcLE.mft (raw, json)
Hash identifier: pB7pK5J1UAJc9+gVxEIX6ZYtldoqD3t9bSFRU8q/hFY=
Subject key identifier: 1C:78:53:43:64:F4:32:21:CC:E1:B3:54:8F:E1:CA:C3:A7:C1:49:72
Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
Certificate issuer: /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
Manifest number: 0A
Signing time: Thu 23 Jul 2026 11:15:40 +0000
Manifest this update: Thu 23 Jul 2026 11:15:40 +0000
Manifest next update: Thu 30 Jul 2026 11:15:40 +0000
Files and hashes: 1: bZSAzzKE0AK1kfXiHbESCX_OcLE.crl (hash: 2F2SV9hvetUJBBsvh9A5S4wv3D2ivAFVPD3IXDLR0vU=)
2: 9035F5F07A4A11F1B8163F0086A30FBC.roa (hash: VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=)
3: kk8aRD5asQ84XiRhDQ4hreQ8Hkc.asa (hash: 7xNDhFxLgQU7zKgX3ZN4lOKOG19lMfG1qRvfW2vvAxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Validity
Not Before: Jul 23 11:15:40 2026 GMT
Not After : Jul 30 11:15:40 2026 GMT
Subject: CN=6a61f7dc-cf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:22:d9:5b:89:a6:ff:e7:af:0f:fd:27:3f:
34:28:d0:de:64:03:de:ff:22:22:24:2f:0a:81:4e:
1f:8e:12:5f:82:9c:46:cd:23:98:ac:e1:3d:e6:86:
6e:0e:13:35:ae:28:ed:bd:03:c3:fd:a2:7a:ad:3d:
38:39:49:43:d7:00:17:b0:b7:41:a1:7a:de:c3:ab:
a8:aa:11:aa:28:4a:ed:5d:e9:c6:54:e2:bf:cf:dc:
f2:5e:7f:64:59:8f:f1:ad:74:72:d4:69:ca:3d:3f:
c9:4c:9a:af:e2:f9:06:af:4b:16:32:3b:e0:02:10:
d2:f5:59:33:3d:7e:33:47:ed:a7:aa:92:51:d8:59:
07:cd:26:19:07:31:33:6e:be:7b:81:3d:da:54:36:
3e:f1:2d:31:33:83:5a:11:d3:ce:ba:9c:68:f0:02:
3c:f5:89:ce:4b:94:68:bc:57:57:67:0f:7a:f5:5c:
19:ce:44:ff:b9:07:9b:cb:1b:87:53:d1:56:d7:2f:
1b:eb:2c:67:be:9f:9b:26:ba:3b:01:7b:f2:c8:6f:
cf:11:65:b6:64:e3:5e:9c:13:cd:ec:74:d9:d2:a0:
45:f6:15:e0:cc:47:88:87:b7:8c:52:94:bf:52:0f:
7b:24:91:df:73:a7:a1:ee:6f:95:44:b2:b7:8f:f8:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:78:53:43:64:F4:32:21:CC:E1:B3:54:8F:E1:CA:C3:A7:C1:49:72
X509v3 Authority Key Identifier:
keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a8:e6:5d:6e:e9:da:c7:0f:39:5c:d8:16:c7:b0:9e:42:49:
3f:87:e8:9c:cd:8d:f1:9f:77:10:4a:4a:f1:b8:4e:3b:9c:36:
a9:dc:05:cd:2b:4b:38:37:d7:ec:53:a4:dc:5f:29:39:5f:68:
79:0c:31:4e:25:1a:03:85:29:d0:e1:d7:d7:e8:b4:a7:4e:ef:
1c:bb:00:9f:7c:33:1f:04:20:b3:b6:ce:c0:62:de:c1:5b:9c:
f4:39:d6:fa:82:23:2f:52:de:ff:1e:c5:d2:38:c7:8d:9f:0a:
57:a9:c4:3f:5c:8e:86:c3:21:e0:9f:b9:80:0b:40:54:e0:a1:
7a:a2:fe:e9:60:fc:9b:7d:f9:06:49:f5:b3:87:9e:5b:fa:9b:
71:8e:51:dd:2d:4b:da:55:95:55:19:08:b2:a7:0f:fd:96:ee:
cb:9d:31:39:07:09:e6:3f:49:ed:c1:c8:f4:1d:f5:ab:3c:4c:
40:98:6c:1a:75:ca:b3:f9:bb:5d:3a:16:70:6a:f5:6f:63:6f:
e4:dd:e2:0c:82:6f:e7:f1:0a:f4:4a:95:e4:41:fe:6a:c2:2f:
90:75:e9:16:69:03:42:81:b8:0a:9f:0e:3e:50:f6:00:87:90:
51:7c:04:02:ed:cf:be:05:ce:cf:fc:a0:80:34:9b:dc:0e:4a:
96:95:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:42 2026 by rpki-client