
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json)
Hash identifier: I21pTHjl5KGt7Zjycu1ubcCxKIgwdkH0vqAfuH0QBKo=
Subject key identifier: FA:65:4A:28:88:8E:4B:DB:C4:04:7F:FC:80:E4:88:39:F8:4E:69:28
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 382C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
Manifest number: 3675
Signing time: Tue 12 May 2026 14:17:58 +0000
Manifest this update: Tue 12 May 2026 14:17:58 +0000
Manifest next update: Tue 19 May 2026 14:17:58 +0000
Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: mRoek+c1rPnGgqb9F3UEd4tVdcYdK1rYA40Fea0POYE=)
2: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: uE/rnhwB3ME5JOA1z9OMjoAfdFiu/bbfu+6j3t7mLB8=)
3: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: UUODOJY5+5q5pcm8Nr35HeyzWAGOprJTcgD1liIBbik=)
4: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: SOQcp2o/vipjBiaInCM2WE18Os9teruHe/tKBdXo2pM=)
5: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: Rfvf6Vj64V/DcT+xX9bZ8JiVA8egzGFFRJ+JQllzS44=)
6: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: DDHyAiyJR9qzEXBGbIoi4qHLBw3ZayKontdEM6TL8tc=)
7: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: D9hmvA6dDXSOuTlZ3qbzZ4eSbUShWWWPmR9njY7G+Ic=)
8: 88978730772311EBB972032EC4F9AE02.roa (hash: H9kR7aKKfkWFeCcbwIuFh1k6Ox63w9qdIWH7tbADEBs=)
9: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: 0v/XMQ2d8xTna5t6oAMoofbfgmP+DjOOYOL6BBl6lZc=)
10: 89A73D46772311EBB972032EC4F9AE02.roa (hash: OmCcAoJqaG+VM4I0xGI0MWEjDCQ4puKtwGSlsV9t2PI=)
11: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: +nqzlPuV0MHTJ+4S2S0Nu+k/HevxF1u4cYkYwAyCCHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14380 (0x382c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: May 12 14:17:58 2026 GMT
Not After : May 19 14:17:58 2026 GMT
Subject: CN=6a033696-bf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:5e:f5:7b:02:89:92:37:17:52:38:b0:4d:
02:37:a8:38:ba:db:d5:9f:02:bb:d5:83:37:fc:5e:
6f:37:ab:4b:b2:a3:b2:95:87:d8:d1:ab:62:30:f1:
4b:a1:2b:4f:f3:e9:06:82:db:20:9c:4d:91:72:ba:
aa:3b:43:f0:02:aa:58:e8:5e:5d:6d:c3:fc:f7:a7:
3a:5b:5d:af:98:4f:39:91:a2:12:ea:7c:1f:77:dc:
b2:cb:ff:0b:ad:e0:42:b7:07:0c:54:07:d2:b5:69:
0d:d3:69:2b:07:bf:d2:78:74:86:ec:52:66:70:8a:
89:30:fc:a2:0d:07:af:64:d9:3b:8a:c9:99:70:0b:
b3:6b:1b:89:a0:9b:48:bc:94:40:7e:9f:d6:fc:e1:
0c:37:e9:1e:8c:fa:90:4d:03:bc:80:3c:6e:80:d0:
03:28:91:90:64:ba:cb:f7:44:45:f9:c6:56:73:b1:
51:b6:63:3f:52:a9:ab:e7:b2:3e:26:e7:87:2c:6b:
cb:24:b0:18:9e:13:66:b7:66:ad:52:ca:2b:97:80:
cf:30:f3:e4:26:52:a8:48:6a:07:45:16:7d:db:fb:
c7:7d:ae:80:f2:49:21:59:fc:88:0c:5e:73:10:4d:
63:74:4f:e5:a6:02:c2:a2:a8:0d:d8:c1:18:63:ad:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:4A:28:88:8E:4B:DB:C4:04:7F:FC:80:E4:88:39:F8:4E:69:28
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:07:5a:af:b2:1b:dc:9c:bd:0a:a9:97:b7:f7:b9:5f:2c:82:
d5:c0:74:ab:c9:72:ba:2f:92:fd:2e:97:40:6e:0a:dc:ed:dd:
5b:3e:20:e4:0d:66:ab:3c:76:91:bb:d6:c6:e2:f7:25:e0:e3:
6c:91:df:19:d7:cc:ce:dd:c4:14:c6:54:91:26:69:dc:8a:3f:
d2:bf:eb:98:8b:e2:b8:c2:5a:87:e7:2f:92:d2:96:e8:16:37:
ba:2f:9e:10:17:5c:d1:ec:3b:4e:e2:de:2a:1d:5f:40:66:0f:
24:98:72:4a:ca:f9:ae:9b:ff:29:d8:47:53:40:1f:19:9f:a4:
54:03:59:14:dc:be:30:5e:54:97:80:1d:55:8a:64:22:5d:1f:
13:b9:5c:ca:15:80:69:fe:9f:ad:14:ea:b3:93:c6:fe:57:a6:
8f:4b:72:3f:74:95:18:ce:94:97:a9:67:0b:6e:1e:2e:f6:12:
1e:b8:74:76:1e:1c:f1:d7:26:5e:9c:27:41:1d:33:0e:7c:2e:
a1:91:d7:9a:15:3f:e1:22:a9:bd:20:fe:64:0c:10:b3:b2:c8:
55:7e:81:69:6a:97:a1:8e:43:9a:27:77:e4:48:db:5c:48:54:
78:c5:e6:2e:79:5a:11:5f:71:01:ba:cb:ff:23:d7:01:94:b6:
96:60:22:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:52 2026 by rpki-client