
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier: q0712BBGU8hPmjOgQc/d7SjO9QHk8r7otud+xlaiEqw=
Subject key identifier: CC:D9:8E:80:13:5E:96:46:42:89:FB:FD:09:1C:F2:0C:F1:CF:D9:B0
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 05F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number: 05C7
Signing time: Wed 22 Jul 2026 23:54:59 +0000
Manifest this update: Wed 22 Jul 2026 23:54:58 +0000
Manifest next update: Wed 29 Jul 2026 23:54:58 +0000
Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: MhDwYIqJ/9G88MTiRa/4Uo4v4nmeKzhOtInSXM5LTlU=)
2: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
3: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Jul 22 23:54:58 2026 GMT
Not After : Jul 29 23:54:58 2026 GMT
Subject: CN=6a615853-e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:9f:ce:67:8a:e3:1c:0e:f1:bb:c5:49:2f:
ca:b5:9f:4c:34:b7:09:c6:ee:dd:24:39:e9:ac:61:
5d:a7:73:79:b9:c4:ce:56:f3:b7:01:cf:5b:ed:8a:
1e:10:b4:cf:51:23:8d:3d:a3:bf:d6:22:10:69:c3:
d3:d4:25:fc:19:a3:65:7d:4c:2e:86:14:b5:7c:a2:
4a:0c:00:44:a0:91:d4:14:f2:7c:71:ba:02:a7:6b:
13:49:42:18:ff:09:25:76:d5:88:7d:a2:57:22:93:
1e:eb:09:82:a1:fa:e4:38:3e:8d:33:8c:73:ca:e8:
15:a7:83:fa:8e:97:72:28:97:2d:fb:ca:25:72:b7:
a2:ac:fb:e2:54:73:61:73:fb:5a:39:b0:b2:5f:33:
d7:b1:56:bd:e4:17:5d:6c:84:bc:0d:58:bd:11:d2:
b6:37:97:3a:ad:7a:5f:3e:63:90:a4:e3:fc:e1:33:
28:e7:c0:47:5b:58:b2:f9:63:a8:b8:32:30:33:dd:
a9:bb:b1:64:e6:d4:b1:28:a9:92:f8:43:91:d3:56:
51:37:ef:03:d1:66:76:fb:c7:ff:1b:94:d4:f6:24:
be:cd:7b:24:19:71:e5:cf:b8:41:a4:bb:70:3a:1c:
0c:04:15:22:a1:2e:34:33:3a:16:96:ff:f5:6d:3c:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:8E:80:13:5E:96:46:42:89:FB:FD:09:1C:F2:0C:F1:CF:D9:B0
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:bd:1b:20:b8:cc:0b:97:49:7e:ad:f2:66:70:e7:10:f6:
f2:0f:9a:65:91:2e:04:0c:35:5d:2f:fa:28:9b:a1:99:1c:52:
8b:ec:7c:48:25:e6:55:94:fc:7b:6d:ce:29:9f:45:90:a3:54:
81:3d:83:cf:27:e9:3d:4f:ac:5f:59:fb:b0:76:c9:ad:b3:c9:
f0:ee:7a:d4:b7:83:ea:18:c4:36:c9:96:20:f9:ed:b8:1f:23:
cd:ff:2d:08:ea:45:c9:e5:ea:25:09:7b:f3:6d:7f:a1:5c:96:
e2:33:f7:e2:e2:64:af:46:0b:27:4b:92:c1:52:ec:3b:22:c0:
d8:0f:06:75:fb:52:13:af:4d:0d:b8:89:0a:f6:f6:f6:2e:3e:
ce:df:f5:cd:d2:0a:62:c6:88:6e:46:5d:61:c9:45:a8:26:60:
d2:30:2c:2f:20:94:22:f3:72:ed:e4:95:f7:4b:1e:b6:fc:4c:
41:81:99:3e:24:76:4f:07:8b:b6:80:af:e5:56:fe:55:46:86:
bd:83:91:c0:b7:a0:71:5f:b9:91:bb:d1:7d:55:02:13:39:39:
38:87:0c:81:9f:a7:fe:ee:6a:fb:ed:22:c6:89:72:79:ca:68:
e4:43:2c:57:ec:3a:07:8a:5a:06:dc:8e:21:a6:9b:e5:e3:fb:
c7:62:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:28 2026 by rpki-client