
$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json)
Hash identifier: 5mUTn3nW2a/GLKRd6fZsxnM3VLDfIHC9/Tx7qYJFfyM=
Subject key identifier: 69:80:EA:5D:AD:4C:DC:35:83:90:DB:CE:06:E2:68:0F:DC:6E:AF:D4
Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
Manifest number: C2
Signing time: Sun 01 Mar 2026 08:08:46 +0000
Manifest this update: Sun 01 Mar 2026 08:08:45 +0000
Manifest next update: Sun 08 Mar 2026 08:08:45 +0000
Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: +sBA7t//Cfqo+SXE+aSH7oz7far1h/jaFGbDwVZO7ts=)
2: CF5EEDA6894411F0BE628977C4F9AE02.roa (hash: ShsUMsywl9E1H2PFgHzZA8lMp301kfVtL6IIVaO52qw=)
3: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (hash: JiKXROdjk0AOpr8pxMtTospRbspyoLRj1RJOfyjY5w8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134
Validity
Not Before: Mar 1 08:08:45 2026 GMT
Not After : Mar 8 08:08:45 2026 GMT
Subject: CN=69a3f40e-0aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:44:ec:b2:66:cd:47:63:21:39:0a:8a:61:
56:6a:6a:34:e7:3f:f6:2d:08:b4:58:1a:99:cc:7e:
de:99:59:25:1c:1b:46:d8:90:72:6f:63:b0:6d:ae:
9a:cf:cf:1e:8a:82:8e:7a:e2:0c:e6:cf:ad:85:6e:
3d:b6:83:5a:0c:42:37:cf:3d:65:25:5d:8e:9e:6a:
32:be:f1:08:1e:13:49:1e:c4:76:34:67:3b:77:c5:
1e:72:89:7e:67:04:8f:28:18:d2:ea:c8:be:23:48:
5f:e1:f3:bb:20:f3:ff:09:87:6a:1c:81:18:a9:a4:
a0:b2:31:25:44:4e:8d:be:70:47:8e:1b:45:b9:d7:
2c:20:e5:8e:a8:12:94:37:28:dd:1a:89:1b:cd:87:
59:ca:78:df:d7:6c:6f:25:17:d5:4a:2c:fa:e7:b4:
1b:9b:39:8f:09:b3:57:a9:0d:bb:e2:57:df:59:38:
6b:ed:1c:b4:d9:c9:ee:86:b0:da:29:3c:6b:12:06:
13:1f:8b:9a:b1:06:03:13:19:57:35:99:68:a6:4e:
a4:bc:74:75:b6:43:b9:a2:13:d2:75:4a:f9:d9:27:
94:b4:6b:ea:76:6f:a7:10:4e:a6:e2:ea:6f:cf:a9:
b8:7b:a3:27:3d:ea:77:50:5a:6f:45:a6:f1:be:e7:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:80:EA:5D:AD:4C:DC:35:83:90:DB:CE:06:E2:68:0F:DC:6E:AF:D4
X509v3 Authority Key Identifier:
keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:92:b2:70:11:2b:45:b7:ee:96:98:59:5d:42:3a:05:9a:b5:
3b:db:8e:2d:33:a2:54:b4:b7:1b:20:4b:fa:0e:cd:e4:41:cc:
0f:ed:e0:a0:e9:8e:04:20:18:88:ed:2e:e0:4b:6c:b1:9b:b8:
46:f7:f3:1a:53:92:2a:0a:79:ee:4f:53:44:86:27:a7:81:5e:
24:69:f0:16:36:4d:5b:3d:25:11:50:87:c9:60:01:ee:f4:93:
cc:a2:b4:06:68:09:63:72:37:68:f1:54:2f:ba:b3:5e:70:6f:
16:53:6b:8d:75:00:93:38:2c:b2:0c:fe:4b:08:94:6f:43:62:
78:76:0a:75:f3:7f:f6:84:86:20:8b:d9:62:ef:24:bd:7f:eb:
b1:5b:3d:87:ed:9b:c0:22:f0:88:00:7e:9d:64:83:c7:55:e9:
36:26:94:9e:00:42:60:40:4f:87:09:77:c3:75:a0:01:bf:e4:
13:37:79:18:37:73:5c:98:5c:8b:44:66:eb:5f:2a:38:2f:6a:
bb:2c:5d:fb:3c:98:1f:2c:97:d0:c1:7f:55:99:ac:ae:7e:3e:
d7:8f:b2:9f:2e:99:fc:7b:84:04:b1:85:12:6c:e4:5a:e1:c1:
8a:f3:d0:86:43:7b:b5:4d:fb:43:9a:95:68:b5:2c:09:be:71:
a3:7f:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:44:04 2026 by rpki-client