
$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
File: bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json)
Hash identifier: RZDK5tFxK9gIOQi7f2pR+VE7FnXVJKhBk93YA/VMVtI=
Subject key identifier: 39:55:6E:29:96:D3:16:39:64:E5:62:CC:33:CD:5E:66:08:F7:BF:AC
Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05
Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
Certificate serial: 18CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
Manifest number: 18C1
Signing time: Tue 12 May 2026 16:28:32 +0000
Manifest this update: Tue 12 May 2026 16:28:32 +0000
Manifest next update: Tue 19 May 2026 16:28:32 +0000
Files and hashes: 1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: ODCJdNilHT2CRq0yzcnr5Qu1gUf/w0YzRFWnW6Or8kg=)
2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: Cy9jIf+CyOis8YIH5a0sOi5OoR3Vm1n2YEe3NcN+W00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl
rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6348 (0x18cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505
Validity
Not Before: May 12 16:28:32 2026 GMT
Not After : May 19 16:28:32 2026 GMT
Subject: CN=6a035530-9123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:08:b1:ef:86:be:31:3c:cd:c2:66:bb:4d:5f:
1d:af:9a:12:e7:db:f8:a1:bb:58:79:c0:5e:00:da:
68:26:65:e1:f8:49:ba:c7:b2:42:6e:d3:bc:e6:ff:
45:33:8a:91:27:d7:25:5e:70:c0:da:48:1f:74:b5:
e5:6f:85:96:df:01:93:5a:ba:db:74:62:f8:e2:e3:
53:96:f0:d7:9d:af:82:1a:e7:54:df:79:5b:02:73:
7e:ed:92:57:5b:45:5d:c8:27:c2:d5:61:9f:8e:ba:
73:c9:72:aa:ef:85:8f:0e:ca:0a:98:ef:8a:e2:4e:
89:d9:79:0c:92:ff:24:77:d5:f8:cc:e6:10:8e:06:
f8:cd:c4:5e:4e:02:b6:34:9f:6f:88:2c:5b:83:a8:
f3:e2:ec:5a:39:6f:27:77:bb:c0:95:2e:af:7f:a0:
c7:f4:51:97:83:73:f9:8d:31:4e:86:72:05:28:67:
b3:42:db:15:e6:40:c2:df:ee:a4:b6:5b:f0:76:f1:
6e:0f:39:b6:81:2b:3f:fa:96:85:67:3c:e6:45:28:
42:f1:f6:9e:38:02:41:5a:e1:17:9f:5d:f9:60:c3:
33:97:0b:20:69:ed:a1:1b:70:b9:bd:dd:17:81:f7:
1e:4c:92:c8:d7:ba:2f:8e:df:d1:d6:40:fe:a4:0e:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:55:6E:29:96:D3:16:39:64:E5:62:CC:33:CD:5E:66:08:F7:BF:AC
X509v3 Authority Key Identifier:
keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:c5:5d:59:57:39:71:49:4e:55:84:32:60:38:0f:1f:0f:42:
88:76:fb:a6:66:56:5d:f0:d6:bb:27:63:62:90:79:21:e9:ff:
e1:3f:94:c2:29:84:4f:dc:98:8c:86:84:5e:2a:5b:8d:58:9d:
1c:f7:d9:16:0e:bb:d2:95:6a:b8:65:4b:e2:d4:eb:4b:fb:a8:
3c:ca:b0:b4:55:cb:9a:f7:e8:0e:f7:cb:99:de:cd:65:c1:92:
c8:4c:f5:cd:c5:1f:19:35:9d:7b:42:a1:85:29:d9:12:53:29:
64:f9:c6:61:ea:56:9d:34:3e:62:8e:d8:bf:0e:6a:9a:05:44:
9c:61:37:32:ea:e8:b4:57:64:f7:0c:d7:71:21:b6:42:31:ca:
21:0e:ec:83:9e:14:97:0c:9e:09:db:69:0f:61:6e:d2:a7:30:
32:e9:71:81:64:2c:ad:3b:8d:6d:16:ef:c6:c3:85:e6:e5:b0:
d9:68:6f:b4:13:62:b6:71:61:ef:84:21:51:ae:38:6d:85:31:
c4:84:90:7c:94:65:b4:94:01:80:9e:6b:7d:8c:05:c0:ff:a5:
6d:d7:c1:b4:76:d6:70:7e:e8:45:18:17:50:8e:27:45:bb:8e:
1c:a5:e6:d3:20:7a:89:5d:b1:fa:af:fb:ad:4b:aa:f0:cb:26:
b3:23:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:47:47 2026 by rpki-client