
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier: GKywTlH/jExPfLCxrjc4ppZfnIh0ObFZpdUWRjlGP4o=
Subject key identifier: 2D:58:8F:88:51:AE:A6:B0:94:48:44:1E:FF:0C:43:55:5A:54:20:25
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial: 0A9B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number: 0A91
Signing time: Wed 22 Jul 2026 19:55:44 +0000
Manifest this update: Wed 22 Jul 2026 19:55:44 +0000
Manifest next update: Wed 29 Jul 2026 19:55:44 +0000
Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: fSePkh0GgEo8LPXYFZVtLDX3wS4RCem20vCPpTu7r8c=)
2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2715 (0xa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Validity
Not Before: Jul 22 19:55:44 2026 GMT
Not After : Jul 29 19:55:44 2026 GMT
Subject: CN=6a612040-7a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:f7:69:3a:9c:b1:7d:3e:06:81:08:96:e2:
c9:7b:81:3a:2d:6b:23:c9:9f:9a:a8:ed:b8:38:bd:
38:67:e2:f3:06:ce:fe:eb:0b:79:f2:e0:0f:7c:9b:
11:b0:f7:34:4e:f2:c2:ec:dc:06:da:03:83:cf:16:
21:55:33:d4:47:66:e5:36:ba:ca:68:52:17:61:ce:
f3:cd:8d:c3:6d:b0:0a:6a:3d:d3:81:7d:6b:8f:18:
82:29:d7:c9:1b:e2:ec:a8:b4:ba:9d:dd:21:e1:8d:
03:fa:e4:e2:d8:26:47:67:08:50:42:5e:e2:b0:53:
8c:9f:e9:60:b5:5f:f1:18:f3:75:dc:02:20:43:8e:
3c:cb:04:dc:2a:24:d7:8b:b4:23:05:f6:76:88:9c:
c2:29:76:59:ab:cb:1c:19:dd:64:53:f0:42:78:b8:
68:0a:5b:fc:a1:d5:b9:32:53:06:21:aa:56:0b:f8:
7a:c6:29:bb:32:24:54:e3:7c:07:a3:5f:0b:0c:df:
4c:f3:78:0c:02:8d:53:dd:86:c0:cf:6c:7a:af:65:
87:c5:6b:fd:05:4b:3d:bb:88:aa:a2:a9:67:1f:44:
f6:56:22:a0:31:1a:ca:08:11:b6:a7:b2:f7:e9:9d:
59:fe:b5:7e:59:9a:a1:dd:22:b4:2a:0b:86:a4:2d:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:8F:88:51:AE:A6:B0:94:48:44:1E:FF:0C:43:55:5A:54:20:25
X509v3 Authority Key Identifier:
keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:53:5f:2d:10:3a:c4:95:e7:78:89:f7:0e:4e:8c:18:72:bc:
08:5a:f7:f3:16:29:0f:ff:2c:34:03:62:3c:98:4f:0e:2b:e0:
9e:17:30:40:b4:33:fc:87:ef:74:bb:50:b7:58:b4:61:51:f1:
64:67:1c:2a:b8:75:4e:61:99:28:4f:97:a5:05:b6:2a:13:1a:
29:da:45:5c:a2:6e:39:0c:22:ec:f5:5e:e5:3e:53:06:eb:b8:
b3:0d:11:30:33:db:8d:3d:dc:c3:5b:01:0a:7c:3e:29:a1:e4:
2d:a3:a7:6f:5b:15:47:75:18:1f:0d:59:0b:53:f5:c0:a4:31:
47:ec:82:46:3a:b5:21:61:cd:3a:5f:93:5e:64:57:cb:af:86:
24:cf:df:e4:b1:1d:34:5e:10:dc:58:4c:ec:e6:79:7f:e6:5c:
1f:58:b8:71:e9:00:10:c8:14:3e:e4:df:9a:20:c3:80:76:f2:
74:99:e1:5d:41:2f:dd:19:e0:4a:37:37:7e:74:40:11:28:66:
c7:90:ad:76:8c:3e:f6:08:27:76:a5:9d:a4:78:e2:56:bc:90:
e9:c7:77:82:5a:fc:bd:17:53:80:19:c3:b7:e1:3c:b5:d9:a7:
79:6a:11:c3:c0:80:55:68:73:9d:7c:ce:73:14:dd:a8:a1:0c:
ad:28:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:28 2026 by rpki-client