
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json)
Hash identifier: N3LxYj5rIz0LTVz7BQn6q7w99+sDBpdsRQHOd2m0Z5Y=
Subject key identifier: 27:4B:3B:57:59:89:2E:61:64:24:E5:9A:22:C1:BB:3F:03:EE:DB:97
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
Manifest number: 0187
Signing time: Wed 25 Mar 2026 03:52:10 +0000
Manifest this update: Wed 25 Mar 2026 03:52:10 +0000
Manifest next update: Wed 01 Apr 2026 03:52:10 +0000
Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: Ow4Yk8QQwVC+EXF8AqVQNIUYx6DApnmkfhPuX3u2zfc=)
2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: egVmZ2H94hu8vcvSceGyMVkrFhLT7V50En5me3B7hr0=)
3: 1484B210B52A11F0ADCFA344C4F9AE02.roa (hash: MKjBFfIwwsUZhOrEicgK8GPN5QBvwjACpzMNiRXDLMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Validity
Not Before: Mar 25 03:52:10 2026 GMT
Not After : Apr 1 03:52:10 2026 GMT
Subject: CN=69c35bea-41f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:ff:57:7b:ea:1b:e9:8d:50:4e:ba:ad:6e:
e7:26:4c:cc:1b:6e:93:c8:e8:e6:d3:07:c4:c4:52:
1d:6f:f6:b8:32:ce:bc:13:66:c0:d3:af:83:00:ce:
c7:03:61:a3:4a:a8:a8:fd:c1:20:48:55:fa:54:82:
e3:81:03:6f:a6:b6:c1:27:d5:86:5b:2a:b8:89:f6:
c1:34:70:cf:c2:98:87:7c:79:f0:46:d9:b7:0c:74:
0b:ac:08:ae:0d:d5:42:6e:11:bd:56:c8:1c:ea:d0:
81:1e:32:fe:ce:97:33:1e:f7:45:10:33:21:83:c7:
15:39:35:6c:cf:70:60:3a:fb:99:81:4f:1e:85:66:
5d:d5:ed:e4:71:10:ca:22:67:18:76:a4:6f:eb:ec:
d0:df:77:9a:fe:a4:2a:11:3d:f7:37:76:48:e8:93:
be:a4:f1:26:2c:5c:32:db:2b:92:04:a2:e2:23:14:
0c:e8:3f:de:3e:9b:e5:95:af:b1:65:24:94:c1:5e:
f9:8c:0c:d9:05:93:c1:59:71:ba:d6:9e:b4:02:df:
ec:1d:a9:40:24:33:ef:b8:70:a6:67:6a:1b:88:13:
ee:9b:1a:8a:f3:45:8c:a0:14:52:93:26:83:9c:48:
02:0d:4c:0d:72:a7:98:b0:e9:a5:bc:d5:dd:f7:66:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4B:3B:57:59:89:2E:61:64:24:E5:9A:22:C1:BB:3F:03:EE:DB:97
X509v3 Authority Key Identifier:
keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:64:58:00:f4:b3:f7:30:08:5c:ad:95:ba:2a:52:bf:93:3d:
f2:79:b8:2d:6c:e9:be:4d:87:e4:57:45:13:0e:71:47:36:6e:
0f:64:9f:4b:30:9e:73:dc:e6:3a:73:d2:ab:2e:ee:f4:7c:8b:
17:1d:32:74:49:78:ff:56:14:9f:ae:1e:a5:df:af:3d:9a:48:
c4:39:3c:5d:b0:97:65:ca:5a:52:7e:07:fe:d1:cd:07:6c:d4:
68:da:ee:bb:ad:a1:07:a6:dc:f1:6d:62:78:85:b7:db:ae:31:
11:72:a5:9c:10:9c:4c:42:6b:f2:13:2b:53:02:d5:e9:f3:f2:
67:fd:5a:54:94:78:9f:bb:3f:93:86:42:09:8c:ea:e3:36:cb:
26:c9:b0:03:ba:ff:0d:68:cd:3c:7e:15:03:60:4d:d3:58:c0:
b0:15:00:bf:3c:34:df:a9:b8:c1:e7:c6:cb:e2:95:7b:3f:26:
2d:c1:f9:52:23:60:eb:4b:91:5d:45:8a:24:a7:e4:cd:bd:a7:
d8:47:b6:91:58:e5:6d:da:85:cc:b4:5f:64:e0:ca:7f:56:3e:
7e:6d:3c:5c:4e:c7:b4:9f:49:d6:8f:58:e1:11:63:d7:54:6f:
bc:4b:6b:36:d8:67:df:96:e5:db:53:0d:44:41:7b:e0:db:08:
12:c5:e7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:30 2026 by rpki-client