
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
File: btoKR86sX5SQFUbuiaP14i4Zp2I.mft (raw, json)
Hash identifier: oxyM2bIiNBtuhl+w8u2U7IFjwklM0kK9DJrC2jGqkYo=
Subject key identifier: E9:24:FB:E1:31:EE:1A:8C:40:5D:B6:B1:EA:D4:4F:FD:BB:5C:33:60
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Certificate issuer: /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
Manifest number: FA
Signing time: Wed 25 Mar 2026 05:29:18 +0000
Manifest this update: Wed 25 Mar 2026 05:29:18 +0000
Manifest next update: Wed 01 Apr 2026 05:29:18 +0000
Files and hashes: 1: btoKR86sX5SQFUbuiaP14i4Zp2I.crl (hash: LwYDexvnvI1wkbgV/nz3r7qVO8enUKlOvqRqC21gGXA=)
2: C18E24EEB1F911EF80160911C4F9AE02.roa (hash: CbU8kv0LCnvXsi0KlzOhOJ0Cbx7Rko5vYiK3SNy5Qvc=)
3: A90B2F28B1F611EF86337B54C4F9AE02.roa (hash: FpKYebTOMUd8YipYtl4iDbEzYiMKyHWRqn8sMgieEyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Validity
Not Before: Mar 25 05:29:18 2026 GMT
Not After : Apr 1 05:29:18 2026 GMT
Subject: CN=69c372ae-d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:b9:de:2c:38:97:d4:45:ed:85:f8:3d:21:
49:34:a1:5d:a4:06:a0:dc:7b:ab:c2:9d:45:ed:74:
24:a8:75:a9:9f:bc:06:82:3f:38:f8:a2:21:a7:f3:
23:70:dc:c4:ae:c2:74:a8:9c:1f:77:ca:af:2e:5b:
3e:28:a3:9d:46:c0:4c:e9:eb:db:a3:33:bd:71:bd:
59:f0:59:4d:14:a8:4d:fd:a4:52:dd:96:14:c2:aa:
81:5a:0a:da:b4:44:87:d5:3e:3b:f2:42:27:e6:8b:
3a:0f:3f:c7:64:3b:f1:b1:1a:33:00:f5:9c:59:e4:
fd:d7:47:89:8a:61:b6:42:98:b1:80:56:d9:0b:58:
50:fa:21:75:7a:a2:a4:a4:81:e3:fb:c1:18:40:38:
67:d6:8a:44:f9:4e:12:03:cb:1c:db:29:1c:f8:23:
66:45:3d:f3:70:0c:dc:43:73:86:64:8b:9e:a4:bb:
e1:37:34:f2:1c:8d:83:1c:f2:39:dc:44:a5:84:a2:
12:dc:1e:5a:17:74:77:c8:c9:8c:48:ce:ae:f5:5d:
0b:a4:00:10:ab:c7:cd:e6:58:31:2c:6f:2f:62:dd:
ca:61:ba:df:44:7a:5b:8d:b5:9c:5e:87:b8:50:b7:
51:d2:15:36:c8:79:8b:fe:9f:bc:a7:06:c4:7b:6f:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:FB:E1:31:EE:1A:8C:40:5D:B6:B1:EA:D4:4F:FD:BB:5C:33:60
X509v3 Authority Key Identifier:
keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:33:90:5a:83:58:0d:cf:bd:5d:13:58:72:27:4a:96:5b:3a:
93:6d:73:58:1f:fe:75:a9:54:c6:3d:44:39:d9:54:c2:ff:53:
c7:3e:76:90:0c:7f:90:96:12:a6:b1:93:74:6b:8e:c4:e3:85:
9e:df:a3:f5:39:a1:70:a9:22:9a:af:43:80:6d:42:93:5b:02:
04:22:24:07:0b:61:2d:f0:ca:ad:e4:9c:7a:ff:d7:8d:e3:c6:
45:31:6e:cb:33:5d:33:65:01:19:42:a1:5b:6b:6d:1f:c9:fd:
e0:6d:69:47:ca:01:41:71:b1:b7:9b:2b:e1:6e:1d:b9:17:da:
23:51:6c:7b:93:f9:9a:37:28:65:4e:81:fa:8c:9f:f7:3b:a4:
0e:0e:4f:d7:f4:1e:0e:fd:e3:23:a2:5e:f1:16:20:54:07:83:
8b:60:bc:54:7b:66:8f:9c:aa:7d:2e:f2:d6:9a:b0:c7:d5:28:
5b:d3:a8:2b:52:15:bb:41:5a:7c:1f:e0:c4:81:94:7b:89:0a:
d9:5d:74:63:a3:d4:5d:4b:01:55:eb:3b:0f:bd:76:46:d5:49:
20:88:f2:4b:6f:b2:cb:9f:1c:80:2d:b5:a4:3f:09:b5:66:8c:
de:7d:e7:0c:ff:8f:40:43:03:73:d9:53:42:c9:5a:48:3e:7b:
e2:4d:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:11:03 2026 by rpki-client