
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier: PTyCnr3O5XvARfqVED9/CK8BmJQgZ5TN8Ttqyzs3vOw=
Subject key identifier: B6:74:14:79:4F:E0:47:02:A5:92:F7:D6:A2:5B:DC:05:59:49:7E:3C
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial: 0ABA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number: 0AB0
Signing time: Sun 20 Sep 2026 19:25:21 +0000
Manifest this update: Sun 20 Sep 2026 19:25:20 +0000
Manifest next update: Sun 27 Sep 2026 19:25:20 +0000
Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: fUOLKd4L6pfv3iL4mQrIrHIgjeYH+o84akco+KcllUg=)
2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2746 (0xaba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Validity
Not Before: Sep 20 19:25:20 2026 GMT
Not After : Sep 27 19:25:20 2026 GMT
Subject: CN=6ab03321-c834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:b9:62:fa:7b:29:fc:7f:71:ed:d9:37:55:
70:70:de:80:04:b0:ee:d5:85:11:86:ed:8b:aa:a5:
49:88:99:ff:f4:7a:99:56:83:d7:ab:a4:63:88:3b:
e6:be:9b:8a:dc:ad:67:fa:fc:96:e9:f2:d7:cf:74:
8d:a6:15:ec:8c:a2:37:07:66:fa:c6:6f:39:db:e8:
2a:a0:d1:e0:7d:c6:47:2f:37:5f:b1:b6:4c:9d:44:
cb:9d:6c:dd:7e:6a:e9:83:64:f3:8e:80:83:41:a3:
d0:0b:70:2f:fc:c1:ab:9b:11:91:e1:99:41:c4:a6:
5a:ae:a5:2e:66:79:53:ed:0a:dc:04:42:4e:f6:75:
18:9d:24:28:13:4d:f2:2f:7c:7c:c6:19:4e:92:70:
4c:d5:18:86:28:48:db:2b:74:d2:8b:d3:e8:1f:30:
8c:b4:e2:ff:d1:d9:87:95:b2:85:25:19:cf:aa:94:
09:10:d3:17:5b:af:f3:82:96:33:7b:44:94:ae:ae:
96:f5:5f:78:56:2f:70:3f:f7:95:37:4f:bf:bc:31:
53:9a:aa:9e:df:ca:60:a1:66:87:de:ff:6d:59:10:
9a:84:b8:35:36:d5:99:7c:8b:c7:4b:48:dc:8e:fe:
77:56:30:e9:f4:a5:bb:48:c9:1a:b5:49:4c:2e:53:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:74:14:79:4F:E0:47:02:A5:92:F7:D6:A2:5B:DC:05:59:49:7E:3C
X509v3 Authority Key Identifier:
keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0d:a7:35:b2:19:6f:96:2a:e5:32:e4:b0:3e:0b:90:b7:97:
ea:77:8c:3e:61:68:ff:a6:82:38:a4:f8:56:b9:5d:61:d4:76:
df:cb:ae:e9:11:ed:bb:85:12:5f:c9:5d:30:36:18:5b:16:9e:
ab:7b:f4:f0:16:7e:8f:5c:d6:0e:d5:41:1c:68:d6:9a:54:1b:
fc:a8:a0:c2:08:81:c8:f7:06:f4:bd:d2:c5:53:09:fc:65:45:
fd:16:c0:c8:58:c9:66:40:02:61:ea:af:38:3a:56:fe:3b:d7:
a5:7d:74:26:bf:b9:23:f2:6a:56:87:84:7f:d7:a4:b5:01:a9:
40:f1:75:9d:3a:ac:d8:44:01:f9:93:87:bb:c6:93:70:92:71:
51:ea:46:6b:dc:5c:b7:9d:54:81:58:a0:83:2c:3d:53:af:03:
7b:6c:aa:ad:2d:b7:ba:7e:b8:1b:f5:64:5b:09:f8:77:9d:9a:
d6:d1:7d:83:30:cf:47:5b:4e:a9:68:d9:68:08:95:76:df:af:
9c:a4:7c:4c:33:47:b1:9b:48:a6:97:d0:39:f1:82:02:63:8c:
72:a8:01:93:33:3c:0c:68:06:ef:3e:e6:12:29:35:78:d6:72:
d9:ce:e6:31:16:f1:11:11:21:e5:2c:c8:9f:4c:72:d2:a3:c7:
99:1c:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:57:57 2026 by rpki-client