
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier: d1msgrcz++0QlJXdWEivlw4OD9mcEc/cdyxJwr3ORSE=
Subject key identifier: A1:B4:37:3B:BA:EB:CF:96:49:AD:ED:03:80:E8:73:38:07:A0:E6:F8
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial: 0A77
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number: 0A6D
Signing time: Tue 12 May 2026 19:39:46 +0000
Manifest this update: Tue 12 May 2026 19:39:46 +0000
Manifest next update: Tue 19 May 2026 19:39:46 +0000
Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: 1YlteACYdCO/dGCphNTRQuifq5wVbGGDlrR/LNuCANA=)
2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2679 (0xa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Validity
Not Before: May 12 19:39:46 2026 GMT
Not After : May 19 19:39:46 2026 GMT
Subject: CN=6a038202-282c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:6b:11:5d:c2:25:ee:97:28:47:c5:dc:62:
e0:d9:66:b2:0e:e2:d3:74:36:e7:b6:4a:9d:35:79:
96:56:c8:91:bf:95:c6:8c:b4:2f:b9:c1:fa:b3:ca:
ca:2b:71:49:e9:b4:10:cf:fc:20:d0:a8:39:23:56:
8f:10:f0:27:a4:90:35:27:d4:15:2e:9b:c1:5f:dd:
2f:4f:23:78:14:f3:c5:b8:6e:a8:9a:de:c6:6d:6d:
fb:12:57:c8:f2:0d:1c:4e:b5:e1:2d:ae:cd:12:de:
81:a5:0b:87:cc:b3:7b:cc:72:04:60:ff:f7:fe:3a:
8f:31:cc:2a:af:79:6d:bd:3b:46:84:6f:6f:76:04:
28:49:81:c5:90:e5:ec:e1:ac:f2:11:6e:a0:d2:ca:
ee:6e:b5:4f:6c:b0:32:4f:9b:82:55:ee:c1:89:54:
fb:88:19:05:1b:3a:27:55:5a:96:6b:9b:49:3f:da:
e0:2a:fc:eb:4c:7b:dd:e5:bd:69:dc:96:33:33:86:
47:7c:2f:01:50:de:1b:e3:a9:37:d4:1d:59:49:df:
b1:a2:e0:9a:e5:d1:0b:88:53:dd:20:39:02:20:9e:
1c:77:9e:7c:c6:8b:4d:92:41:3f:4b:67:9c:a6:dd:
ee:0e:53:f1:77:25:b7:1d:17:22:82:f2:5a:0e:1f:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B4:37:3B:BA:EB:CF:96:49:AD:ED:03:80:E8:73:38:07:A0:E6:F8
X509v3 Authority Key Identifier:
keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:02:ca:e1:b6:5b:f1:e6:2a:29:65:38:a8:8e:d3:1b:8e:c7:
7a:5e:e4:c0:77:45:ba:a5:38:80:af:8c:41:f8:69:f9:1c:43:
78:5e:45:f3:c4:e0:44:7e:e8:7e:5f:38:51:fc:0f:a5:10:a8:
e8:ee:03:24:70:59:fe:1d:ec:c3:b7:dc:45:44:3a:99:5f:e7:
54:97:b7:38:e5:d4:a4:19:37:15:f0:65:11:77:af:d3:2e:79:
cf:67:69:39:c7:02:13:d6:b4:e5:cd:89:7e:d4:a9:3e:d4:5a:
02:c7:17:f4:dd:78:49:9d:61:44:79:fa:36:47:9f:0c:15:17:
46:6f:30:2c:ca:81:65:6b:68:e0:6a:18:06:cd:0f:63:09:b4:
30:f8:8d:97:7f:62:ce:f0:d6:a1:16:15:b5:c1:c8:f5:7e:ea:
ae:91:96:e0:e8:c7:f4:73:7a:85:6a:cd:43:82:a3:cb:0b:9b:
de:8c:03:6f:11:06:b4:61:f9:0d:c4:7a:3b:e7:14:2c:b0:a2:
20:32:36:82:61:e8:f3:9f:17:95:31:7a:22:36:db:1f:ac:82:
b8:84:96:40:2a:35:6a:6e:f9:df:b2:0b:93:7b:22:1d:3f:c0:
1b:30:d0:b0:ce:30:f0:c0:3b:88:6b:26:0b:50:d8:44:57:de:
d1:40:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:41 2026 by rpki-client