
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json)
Hash identifier: 15oyPsCJ7mqJvX0rixYUXWUg2S3cukgXsqfWmlgxaqc=
Subject key identifier: 85:9E:DF:77:65:0C:C6:7B:C7:36:74:F5:2B:73:F5:25:9E:BA:F6:C7
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
Manifest number: 01A2
Signing time: Wed 13 May 2026 04:22:33 +0000
Manifest this update: Wed 13 May 2026 04:22:33 +0000
Manifest next update: Wed 20 May 2026 04:22:33 +0000
Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: jD5qZKyEoePmegIYgSkwYRdNSjYTzTWZpj0yOps1liM=)
2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: vLsMmIQqzzdlaaa570wX/X3XiayyrvshQLayuejSKIM=)
3: 1484B210B52A11F0ADCFA344C4F9AE02.roa (hash: EIqiZeCFMo/5y7SgmnTdlRVO6WjP2m2LXAFpf+jzHGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Validity
Not Before: May 13 04:22:33 2026 GMT
Not After : May 20 04:22:33 2026 GMT
Subject: CN=6a03fc89-9883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:19:f4:30:c2:e4:28:ee:a3:e6:cb:d1:52:
a3:73:03:c3:e1:5b:55:a4:8e:ac:8d:72:3e:6f:13:
ff:5c:9a:ee:30:57:6c:31:ad:15:b7:65:01:89:91:
81:bf:66:ee:8d:66:5c:d2:90:cd:68:9b:64:47:28:
0d:c4:ba:e3:d4:a2:9b:ad:4e:f0:00:12:8e:cc:cb:
51:9d:b4:81:88:fb:11:8b:1d:71:01:73:72:0a:67:
fe:be:08:a8:ee:11:e5:9d:13:0b:0f:06:e1:d9:f5:
12:d0:22:29:36:0a:8d:f5:c1:6a:b2:aa:ec:54:9d:
85:f3:9f:96:d7:42:09:71:eb:b8:45:33:63:17:0a:
d9:83:ee:d8:61:ff:0a:13:10:01:19:67:36:bb:76:
7e:15:3f:46:f5:06:3f:01:1c:2e:ee:e2:3a:31:46:
ca:7c:cb:af:9c:5f:1e:2c:f3:8e:c2:4a:bc:79:c4:
5d:eb:40:77:16:0a:ec:2d:bc:a2:3f:67:52:28:a3:
3a:31:01:d7:39:a8:05:5e:8e:a0:14:d4:0f:fe:89:
aa:ce:66:bc:34:24:49:a5:29:c2:55:32:e6:a3:3f:
4a:47:f3:d1:ee:24:41:05:6e:f2:68:9e:78:df:e5:
a9:b0:5d:41:27:34:29:e8:76:4b:39:5b:35:ae:e6:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:DF:77:65:0C:C6:7B:C7:36:74:F5:2B:73:F5:25:9E:BA:F6:C7
X509v3 Authority Key Identifier:
keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:17:ce:26:03:2d:44:e8:6e:04:8b:3f:03:e7:53:8a:07:
3a:43:a5:05:91:e4:5b:7e:7b:c3:3d:b4:d2:24:81:3f:d3:42:
69:bc:0a:97:b0:4c:7c:37:c7:a0:22:bc:36:5b:a1:40:d3:15:
2b:b5:6c:ff:53:ca:50:f2:2e:03:23:91:f2:e5:0b:5b:51:e1:
51:a8:7d:7a:a0:cf:08:12:e2:08:a0:90:d9:51:ae:7c:f9:bd:
bf:22:19:cb:9d:4f:3a:36:1b:c3:4b:ac:77:20:36:8a:6e:5b:
de:57:73:5e:49:a0:c5:c3:20:12:1c:8b:94:c0:53:4a:b7:98:
63:06:10:78:74:38:f0:51:7d:da:8b:47:49:dc:02:b9:ce:67:
3c:84:40:d4:e0:02:b0:e1:b2:60:fb:51:bf:93:09:90:bc:57:
d7:fd:0e:91:d0:ac:43:57:94:27:ef:06:24:fe:c8:fd:a5:6f:
b2:c3:c0:e2:4c:1e:22:93:a6:92:99:d5:b6:ed:73:8a:a4:61:
9e:e8:3c:d2:c0:d5:5a:3e:fa:8f:a9:9a:32:b4:4b:f9:3f:8b:
f8:23:ab:bf:46:fc:5c:4e:0a:48:ca:49:c2:35:7c:91:be:7d:
24:e3:56:a0:5f:82:9c:8f:56:8c:04:6f:fa:d1:ec:c0:59:0a:
87:b7:d8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:48:47 2026 by rpki-client