
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier: jrw/H5wcEat7vvOpgUcxHA3A33M78WSqvMDD/H79nHg=
Subject key identifier: F3:4C:19:58:45:C9:B7:1A:A4:E4:47:FC:32:A0:71:1B:1F:E8:87:83
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial: 0A6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number: 0A60
Signing time: Thu 16 Apr 2026 19:32:46 +0000
Manifest this update: Thu 16 Apr 2026 19:32:45 +0000
Manifest next update: Thu 23 Apr 2026 19:32:45 +0000
Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: H0eYIdYHggSj4IQXrdSnTy40fuq9HoljzQjYh62oAxI=)
2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Validity
Not Before: Apr 16 19:32:45 2026 GMT
Not After : Apr 23 19:32:45 2026 GMT
Subject: CN=69e1395d-5401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:f4:ba:7e:d7:78:7a:bd:5c:c8:c2:ec:48:
81:ea:bd:e7:1a:6a:b5:4f:f8:ae:e7:ce:86:b6:19:
ec:53:66:7a:df:d1:f5:03:f2:8e:37:4c:a6:fd:72:
c0:01:8f:b8:63:af:05:3b:d1:de:cb:e2:a2:a8:47:
8c:ff:6b:87:c8:30:e9:43:52:44:52:70:a5:f3:f5:
30:ab:80:6e:f3:64:c8:fc:f0:2d:42:e9:75:99:1c:
9f:3d:b1:59:5f:97:fb:16:68:06:36:55:ee:75:16:
75:9e:7b:65:8c:87:72:e9:d5:a2:a8:7e:ed:d1:7f:
35:97:04:2c:97:4a:59:5d:7f:31:82:01:c3:01:77:
96:4e:6c:c7:a3:8f:91:1c:66:da:1c:70:0f:1c:8c:
c4:9b:78:8c:16:3a:1b:d9:90:ac:ac:d7:ad:fd:fc:
d8:7c:1b:fd:ff:dd:71:8e:36:35:f0:be:8f:33:9c:
3b:3b:95:f8:08:d3:1a:57:11:d0:e9:00:d3:80:02:
ca:22:47:02:6f:79:bf:31:a4:4f:e4:53:95:66:99:
dd:55:15:8c:fd:35:7f:43:62:fa:71:bc:cd:14:e0:
2a:79:38:6e:91:af:c5:a9:4f:32:22:ab:80:74:3f:
a0:3a:da:ae:80:58:ca:40:05:85:b5:94:f1:00:7e:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4C:19:58:45:C9:B7:1A:A4:E4:47:FC:32:A0:71:1B:1F:E8:87:83
X509v3 Authority Key Identifier:
keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:98:03:05:80:6b:4b:36:6c:50:50:c7:a1:8c:6c:92:df:cc:
e4:a5:39:e3:ef:af:d2:a6:c7:9d:f8:fe:af:a2:10:d8:3d:22:
54:76:37:e6:5a:57:b2:27:a1:f7:ec:08:e1:b5:37:57:5b:d3:
ee:6b:2e:0b:2a:da:39:25:1c:c2:9e:81:4d:0a:9e:3a:7c:de:
11:90:6c:1d:a3:1c:e7:43:9b:40:8b:22:22:06:70:96:ab:2c:
8a:16:36:f9:f2:3b:82:51:24:f6:c9:bf:e4:cd:4c:95:81:94:
4b:0c:de:f5:07:45:aa:d1:ff:ba:40:22:78:c9:bf:3f:3a:85:
92:3e:39:54:1f:d7:1f:f1:cc:b9:b4:80:73:83:29:2e:88:5f:
11:59:74:d8:ac:1d:73:00:66:40:f0:0a:ff:60:05:bd:f3:a5:
5c:a8:76:08:1a:42:44:74:19:95:34:cb:2c:76:25:19:4d:4d:
d6:2e:bb:d3:74:ab:39:70:66:5d:81:94:c7:f0:d8:5c:d8:c8:
08:8a:7d:1e:30:a4:ce:60:f0:27:e4:ea:8d:a5:97:40:e3:52:
69:f4:a6:25:20:7d:2c:77:f2:eb:6d:20:d1:5f:ce:ce:85:a7:
95:cc:e6:3d:e4:db:61:a7:02:b7:26:41:dd:1c:30:98:23:c1:
8b:69:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:40 2026 by rpki-client