
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier: 0QqaCfNnynEy7xBvTAadHpaJF8VTihSHMx2SfVHKYX0=
Subject key identifier: 09:40:AC:23:CA:27:EE:4A:4C:07:15:E6:50:7F:66:FF:D8:B0:10:C2
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 05F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number: 05C9
Signing time: Mon 27 Jul 2026 00:02:55 +0000
Manifest this update: Mon 27 Jul 2026 00:02:55 +0000
Manifest next update: Mon 03 Aug 2026 00:02:55 +0000
Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: RwDixroLKc/lrMIDOBOUrKQ4nuQANlAQvgzcen8U2S8=)
2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Jul 27 00:02:55 2026 GMT
Not After : Aug 3 00:02:55 2026 GMT
Subject: CN=6a66a02f-35c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:24:24:34:87:3c:ad:9b:ab:05:ef:43:99:
05:1f:9e:81:3a:ff:2c:f2:15:f9:4a:97:4f:be:03:
c8:55:d7:91:35:bf:ef:e4:d2:87:fe:db:20:15:de:
6c:5e:94:2d:d7:4e:39:23:ee:81:09:67:9f:17:4a:
11:3c:03:a5:0a:37:16:14:22:64:52:1e:6b:d3:69:
19:11:50:26:67:41:9f:f8:65:f6:49:7a:3d:17:e6:
4a:bd:26:bc:53:5b:fa:25:2d:84:1d:fa:c5:d0:94:
d8:4f:86:86:1d:df:99:4b:5d:86:26:fd:fa:34:9e:
7e:5c:09:bf:78:38:40:d8:0a:25:97:40:be:40:eb:
99:a7:c9:89:d7:1b:67:29:e2:ed:18:98:90:55:1a:
0a:b5:ad:cd:0d:66:85:23:74:a7:92:13:d0:68:48:
e5:84:80:cd:d4:f5:a7:de:3e:37:02:7c:71:b1:02:
d9:57:f6:22:17:4d:0b:65:a4:fb:32:40:a6:4f:9a:
bf:a0:d1:41:60:2b:37:fb:82:a6:a5:59:13:61:18:
6e:96:aa:34:70:af:32:b6:7e:d2:58:37:63:b3:9f:
7d:17:2f:72:3e:ae:f9:1a:77:64:7c:82:a1:b9:cd:
db:d4:0c:69:f2:10:c9:a5:14:18:3f:92:87:63:30:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:AC:23:CA:27:EE:4A:4C:07:15:E6:50:7F:66:FF:D8:B0:10:C2
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:b8:4c:ce:4d:31:52:f6:59:b1:e7:92:41:88:e4:8c:65:b4:
09:95:6e:a5:90:1e:48:1e:54:0d:16:20:b1:e3:59:11:a8:ff:
17:8b:51:d1:12:40:f5:b3:3a:0b:56:77:94:fb:ed:4d:37:5f:
e5:15:d6:b7:26:9f:11:0c:92:9c:12:d3:46:c3:f4:dc:4f:fd:
3b:9e:6a:12:33:78:e7:b1:c2:08:e5:0d:d6:fe:7b:72:d6:54:
db:3a:63:5d:56:27:4b:09:22:2c:4c:53:96:82:ca:d0:e1:35:
5c:b4:1a:9a:af:34:a6:cc:53:5e:7d:c1:c0:a9:78:e2:57:3c:
5b:f2:8f:4d:fa:63:bb:4c:ee:b1:3c:69:c8:2e:fa:47:f4:6f:
fb:77:72:f8:6b:f2:63:53:2b:c2:5c:b1:24:e2:7d:e5:b8:9e:
0b:f2:ad:be:66:07:d2:a7:da:e4:4a:6d:9d:50:5d:5e:4c:f1:
b1:22:ab:b9:1a:e6:96:50:e7:9c:9f:22:39:ba:37:a4:93:4b:
ea:18:55:bb:79:e4:a5:ff:a0:fa:2c:02:54:bb:cb:28:ae:e6:
bf:ce:9e:b6:1c:70:e7:ce:77:b7:1b:1e:73:b2:7b:40:da:b3:
66:ca:5a:70:4c:b0:43:de:9b:3c:b3:b8:4a:a2:93:00:6c:08:
82:58:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:54 2026 by rpki-client