
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier: iT0kqSicj4hxJCj8wCfL153VCND4yTLNSP84e+LsM8k=
Subject key identifier: 18:C1:FC:47:77:9D:8E:4E:51:31:CF:87:98:6A:BF:F3:21:DE:CB:61
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 0593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number: 057B
Signing time: Mon 02 Mar 2026 00:48:34 +0000
Manifest this update: Mon 02 Mar 2026 00:48:32 +0000
Manifest next update: Mon 09 Mar 2026 00:48:32 +0000
Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: pqpqUoXveSFxIxnlKrffvJdDVb8JefqRaymAIMdsuDk=)
2: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: +8mKKhKwNeo4zwPMAFg/5SLf79RdLj680RKRxDpLhEw=)
3: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: H0aUNR061KcXE440A4+pRmyWn8a0yHjH8V/usvq+Pj0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1427 (0x593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Mar 2 00:48:32 2026 GMT
Not After : Mar 9 00:48:32 2026 GMT
Subject: CN=69a4de62-2e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:f5:fa:41:5f:b8:47:04:b6:ca:5c:4f:ca:
45:b9:37:a2:21:b5:c3:16:6f:b9:54:96:6e:bf:7f:
3c:af:a4:2a:d5:f5:fa:d4:56:16:a8:f3:27:67:1a:
e1:e1:0e:68:46:08:07:3a:05:71:13:7e:d3:13:49:
f0:d4:be:3b:84:d3:df:8d:5a:0a:de:d2:70:96:96:
f0:ce:ff:8c:58:28:29:4e:f3:ec:be:7a:ae:b1:3b:
c2:67:65:94:e0:dd:8b:62:6a:ff:14:8f:f9:db:1f:
25:b8:a4:f4:27:47:0b:da:a8:d9:00:69:bf:0b:c0:
4f:6d:a2:5a:42:9a:7c:ef:bc:df:43:7d:14:9f:7d:
9e:59:7b:02:e7:10:8d:0f:f4:68:cd:8c:b1:76:46:
74:26:4b:92:f3:6d:7f:00:f2:57:a4:56:af:0b:9e:
3e:6d:14:94:20:79:18:41:f6:c9:3d:58:8d:40:e2:
6a:f3:dc:06:7b:78:bd:07:8b:54:44:ff:1c:4d:b1:
23:b7:67:53:7d:71:b8:8f:db:16:af:94:9b:74:eb:
00:10:9c:81:5b:03:a8:1d:9f:e3:d5:e1:11:6d:4d:
64:69:8e:6e:c3:e6:ec:6e:a0:55:1b:0b:bb:52:87:
ec:f2:1e:19:98:4b:87:51:11:d8:82:44:c1:05:a0:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C1:FC:47:77:9D:8E:4E:51:31:CF:87:98:6A:BF:F3:21:DE:CB:61
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7d:48:af:80:c8:1b:20:ca:b7:9b:79:d3:a0:45:b4:97:44:
15:ce:a5:3f:c2:08:60:7b:9b:e1:1f:ce:90:46:f2:f8:cb:1f:
de:a8:93:ae:9a:8b:d2:10:4d:d2:ff:e4:dd:77:e4:6c:a0:f9:
be:87:fa:4f:ba:34:36:25:3c:15:64:73:f0:07:ff:19:e8:1f:
cf:39:ba:1f:d0:e9:cf:c9:f5:3b:04:77:cd:6b:ed:1b:a8:df:
96:5f:72:29:6c:0e:4b:ee:9f:44:81:95:b6:4e:82:7a:20:a5:
86:ff:ac:51:8e:12:c9:17:57:25:54:c4:67:2b:c8:7c:e1:65:
a5:96:e0:3b:f7:c5:2d:a6:2d:10:3c:52:9a:b0:d4:7f:2c:18:
78:ce:f5:b8:66:ad:c7:0c:0e:cd:74:44:84:80:63:04:2c:a2:
25:87:fd:0b:aa:c5:1a:3b:5b:ba:7f:5c:32:9f:13:a4:9b:82:
b2:4f:2e:81:d3:5d:91:38:33:02:65:36:d1:0b:0f:81:08:d5:
b3:ab:1c:c0:ae:c3:38:66:55:d6:4a:b0:7e:4a:d3:fa:67:5a:
b2:fc:77:eb:54:9a:7f:ed:59:8f:09:4d:7d:84:a7:f5:40:a9:
36:84:da:05:9e:59:3e:db:b5:d0:9f:d5:5a:3b:d4:f1:24:f6:
5b:ae:22:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3
OTI5Mzc2N0EwHhcNMjYwMzAyMDA0ODMyWhcNMjYwMzA5MDA0ODMyWjAYMRYwFAYD
VQQDEw02OWE0ZGU2Mi0yZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Pj1+kFfuEcEtspcT8pFuTeiIbXDFm+5VJZuv388r6Qq1fX61FYWqPMnZxrh
4Q5oRggHOgVxE37TE0nw1L47hNPfjVoK3tJwlpbwzv+MWCgpTvPsvnqusTvCZ2WU
4N2LYmr/FI/52x8luKT0J0cL2qjZAGm/C8BPbaJaQpp877zfQ30Un32eWXsC5xCN
D/RozYyxdkZ0JkuS821/APJXpFavC54+bRSUIHkYQfbJPViNQOJq89wGe3i9B4tU
RP8cTbEjt2dTfXG4j9sWr5SbdOsAEJyBWwOoHZ/j1eERbU1kaY5uw+bsbqBVGwu7
Uofs8h4ZmEuHURHYgkTBBaCWwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjB/Ed3
nY5OUTHPh5hqv/Mh3sthMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx
MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp
SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjH1Ir4DIGyDKt5t506BFtJdEFc6lP8IIYHub4R/OkEby+Msf3qiTrpqL0hBN
0v/k3XfkbKD5vof6T7o0NiU8FWRz8Af/Gegfzzm6H9Dpz8n1OwR3zWvtG6jfll9y
KWwOS+6fRIGVtk6CeiClhv+sUY4SyRdXJVTEZyvIfOFlpZbgO/fFLaYtEDxSmrDU
fywYeM71uGatxwwOzXREhIBjBCyiJYf9C6rFGjtbun9cMp8TpJuCsk8ugdNdkTgz
AmU20QsPgQjVs6scwK7DOGZV1kqwfkrT+mdasvx361Saf+1ZjwlNfYSn9UCpNoTa
BZ5ZPtu10J/VWjvU8ST2W64iEg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:50 2026 by rpki-client