
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier: gL2ARCO4qDwn6+JqZ6zlcWHuhBfyvRhZklWuMd2uLUE=
Subject key identifier: FF:18:55:FD:FE:97:B9:B7:C9:A6:B7:14:ED:3F:DA:FD:0A:E1:B6:DF
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial: 0A9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number: 0A94
Signing time: Tue 28 Jul 2026 19:50:35 +0000
Manifest this update: Tue 28 Jul 2026 19:50:35 +0000
Manifest next update: Tue 04 Aug 2026 19:50:35 +0000
Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: DMbF72RD4mCsIDomLSDyMaVc67RqlJDvD+Hz4enRFPs=)
2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Validity
Not Before: Jul 28 19:50:35 2026 GMT
Not After : Aug 4 19:50:35 2026 GMT
Subject: CN=6a69080b-234c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:62:17:c9:87:22:18:fa:51:6c:e7:ec:c3:
23:2c:14:64:42:49:eb:a6:7b:64:e4:6f:da:ba:e5:
2a:c8:cd:2e:1e:b6:fc:40:bb:9b:70:50:67:c8:7a:
ea:56:c4:bd:1b:02:4f:f8:da:02:7c:e3:6c:f7:3f:
28:29:29:3a:44:47:3f:ec:ba:9a:48:07:d1:51:73:
94:61:8c:8b:4d:e5:bf:3e:4f:7a:72:c7:20:c0:21:
e1:5f:d4:25:eb:2c:a8:46:2d:27:40:58:c1:bd:10:
3c:9e:3f:d2:87:64:2c:1e:b2:79:06:94:9a:4c:7d:
fb:0c:3f:1f:94:de:58:ac:92:4f:a4:15:aa:53:13:
e0:c4:ea:42:9d:1b:f1:4a:c3:20:0f:37:6b:eb:0f:
89:9d:13:f4:eb:2a:4e:8b:63:06:9c:0f:96:05:77:
10:da:ea:21:35:9b:04:ae:8e:08:52:03:5d:bf:e1:
f2:00:3d:13:22:05:a1:69:2f:48:fa:78:dd:b4:81:
ff:7b:f8:34:30:51:ef:3c:bd:bf:b2:54:a6:99:0c:
4d:1b:9c:4d:85:c2:28:a3:de:73:fa:62:ca:72:ac:
2b:ce:78:18:ef:b4:28:1a:59:40:df:a9:5d:c5:2e:
e5:61:08:41:9a:43:b5:ec:86:c7:49:c4:f2:7d:e4:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:18:55:FD:FE:97:B9:B7:C9:A6:B7:14:ED:3F:DA:FD:0A:E1:B6:DF
X509v3 Authority Key Identifier:
keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:17:94:60:2d:7c:41:5a:80:6b:40:a2:2f:e6:89:e4:61:
c6:cf:e6:55:d8:63:bc:af:eb:5a:40:5d:b8:b4:14:70:53:17:
9b:c7:cc:77:25:c1:a8:ea:9d:07:f8:49:d4:ce:07:97:a9:94:
7a:94:15:fd:77:ae:41:f4:eb:13:76:4b:d9:f5:80:a8:05:9f:
34:73:ae:57:12:70:26:55:be:da:b6:be:f8:78:f4:29:c2:d0:
05:93:63:89:28:a8:38:f8:c8:84:2f:da:39:7f:45:86:96:01:
3a:e7:bb:39:4a:3e:9b:69:38:80:a1:09:a1:1e:76:20:5e:4b:
2a:e3:eb:d4:57:78:75:f7:71:13:e2:4d:a6:96:32:35:64:8a:
ff:21:f6:91:aa:95:3e:7e:72:e3:23:a9:1a:5d:65:73:80:02:
59:58:b4:b4:ee:ee:3a:3c:87:f3:cc:f7:1b:da:b8:58:b5:a2:
0f:d6:1b:05:17:7c:0a:71:d3:45:d7:c4:3d:0e:ae:01:97:1e:
93:0c:23:19:8d:36:8f:9a:9c:be:b9:8c:37:c0:4f:78:80:4b:
f6:ae:08:2e:54:97:55:f3:b5:4a:6f:51:c3:f6:51:1a:4c:dc:
9a:66:eb:7b:1a:44:a0:12:37:71:f6:37:56:52:1f:be:f6:27:
4d:6d:80:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:13 2026 by rpki-client