
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json)
Hash identifier: BTgJFQ+naZs7tFREaSMWtdyR6ugBGdLArj0ZlHMzM8E=
Subject key identifier: E9:2D:91:0D:D9:A0:65:FA:D0:22:01:29:DE:B2:45:FE:F2:A3:0A:9C
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
Manifest number: 018F
Signing time: Sun 05 Apr 2026 03:59:04 +0000
Manifest this update: Sun 05 Apr 2026 03:59:04 +0000
Manifest next update: Sun 12 Apr 2026 03:59:04 +0000
Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: mMg6dHZbvEDsdo8zm73/NB6CaVOZ4GN3Qw8Up8X1pqE=)
2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: vLsMmIQqzzdlaaa570wX/X3XiayyrvshQLayuejSKIM=)
3: 1484B210B52A11F0ADCFA344C4F9AE02.roa (hash: EIqiZeCFMo/5y7SgmnTdlRVO6WjP2m2LXAFpf+jzHGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Validity
Not Before: Apr 5 03:59:04 2026 GMT
Not After : Apr 12 03:59:04 2026 GMT
Subject: CN=69d1de08-caa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:e6:d6:4c:07:0c:cd:58:0d:80:f9:58:e9:
32:b4:e6:52:85:74:cc:3c:af:6f:e6:d9:46:7d:c1:
fa:a3:8d:49:1b:ca:e5:9e:70:d3:3a:b6:18:2a:1d:
fd:93:fc:15:ed:94:96:95:53:49:1a:e8:17:fc:f0:
0f:01:5b:7b:94:b0:4f:bf:39:b0:64:c8:9d:80:ed:
dd:27:41:3c:20:0b:2d:48:dc:50:71:0b:f3:4f:28:
39:67:e6:50:b5:ac:2d:92:3a:71:9f:3a:dc:6f:83:
cc:76:f2:32:9a:52:90:22:40:83:2c:10:2b:6d:d4:
35:83:97:37:42:67:6b:13:31:cd:95:a4:8d:a8:59:
90:2c:ee:32:f1:10:31:d3:ef:10:6b:65:95:e6:15:
cf:25:89:be:04:48:47:cd:0c:f9:49:12:59:0d:da:
d1:75:39:a1:9d:11:4a:59:c8:93:4f:55:08:a9:ad:
1e:0c:94:97:a2:92:10:50:76:91:8c:d6:4f:19:7d:
25:6a:63:ba:ad:27:bf:b5:a8:2e:68:5b:d0:8a:4d:
c4:57:70:26:eb:6c:8c:1f:c5:7a:5e:2b:40:ed:6f:
8d:b3:42:c7:57:85:70:10:4f:21:62:c7:21:89:e1:
6c:53:71:fc:a4:ac:de:84:bc:58:2b:35:70:b3:83:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:91:0D:D9:A0:65:FA:D0:22:01:29:DE:B2:45:FE:F2:A3:0A:9C
X509v3 Authority Key Identifier:
keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4f:7b:ad:9f:1e:87:3c:7d:09:30:f3:56:a2:1f:4f:68:54:
10:2b:81:ed:9c:b8:6a:16:c0:4a:be:ec:b0:61:6e:ef:9c:10:
80:b7:d2:53:74:ec:84:84:05:d2:04:13:69:81:56:4a:ea:0b:
a8:5a:b5:6b:7c:2a:d1:36:dc:83:bf:d7:c3:2b:80:8f:42:ec:
b9:5e:a7:52:4e:07:49:0e:66:c9:f9:28:9a:59:9c:b9:d7:e5:
66:44:46:8f:81:3f:16:83:69:7b:67:1e:64:c3:6d:73:8a:4b:
da:36:ca:d2:fd:20:58:f1:49:23:af:8c:0f:89:c3:e9:55:da:
f0:7d:4e:0f:4b:2b:a7:9e:14:fa:5b:0d:7e:13:bd:b3:7a:89:
02:44:4a:6f:90:a8:79:d2:8f:29:dc:29:fc:0d:6a:c8:ba:b3:
2c:6e:f8:de:32:02:91:41:7f:9f:62:a3:9c:5c:8e:0e:9a:26:
c5:ee:a7:37:9a:e8:d1:2c:1b:ce:37:74:b8:27:1b:e3:12:7e:
e1:9c:83:76:61:bf:b8:55:c6:f3:41:24:d4:c7:e9:ff:e1:e4:
b4:d9:45:85:17:f2:85:54:60:27:74:53:0f:21:04:0f:8b:b5:
f9:e9:b9:95:3c:8e:32:db:14:e3:40:b3:51:6e:22:07:00:ca:
c5:f2:4b:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhERDExMTAvBgNVBAUTKDA2RDYyQzdBODQwNzZFMUM2NDk0MDQwNjI1ODkxOUQ2
N0QxNUFCRTEwHhcNMjYwNDA1MDM1OTA0WhcNMjYwNDEyMDM1OTA0WjAYMRYwFAYD
VQQDEw02OWQxZGUwOC1jYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzILm1kwHDM1YDYD5WOkytOZShXTMPK9v5tlGfcH6o41JG8rlnnDTOrYYKh39
k/wV7ZSWlVNJGugX/PAPAVt7lLBPvzmwZMidgO3dJ0E8IAstSNxQcQvzTyg5Z+ZQ
tawtkjpxnzrcb4PMdvIymlKQIkCDLBArbdQ1g5c3QmdrEzHNlaSNqFmQLO4y8RAx
0+8Qa2WV5hXPJYm+BEhHzQz5SRJZDdrRdTmhnRFKWciTT1UIqa0eDJSXopIQUHaR
jNZPGX0lamO6rSe/taguaFvQik3EV3Am62yMH8V6XitA7W+Ns0LHV4VwEE8hYsch
ieFsU3H8pKzehLxYKzVws4P/NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOktkQ3Z
oGX60CIBKd6yRf7yowqcMB8GA1UdIwQYMBaAFAbWLHqEB24cZJQEBiWJGdZ9Favh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEREMS8yNURENTlGOEUx
QzkxMUVFQkUxRjUwNjhDNEY5QUUwMi9CdFlzZW9RSGJoeGtsQVFHSllrWjFuMFZx
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0WXNlb1FIYmh4a2xBUUdKWWtaMW4wVnEtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OEREMS8yNURENTlGOEUxQzkxMUVFQkUxRjUwNjhDNEY5QUUwMi9CdFlzZW9RSGJo
eGtsQVFHSllrWjFuMFZxLUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsU97rZ8ehzx9CTDzVqIfT2hUECuB7Zy4ahbASr7ssGFu75wQgLfSU3TshIQF
0gQTaYFWSuoLqFq1a3wq0Tbcg7/XwyuAj0LsuV6nUk4HSQ5myfkomlmcudflZkRG
j4E/FoNpe2ceZMNtc4pL2jbK0v0gWPFJI6+MD4nD6VXa8H1OD0srp54U+lsNfhO9
s3qJAkRKb5CoedKPKdwp/A1qyLqzLG743jICkUF/n2KjnFyODpomxe6nN5ro0Swb
zjd0uCcb4xJ+4ZyDdmG/uFXG80Ek1Mfp/+HktNlFhRfyhVRgJ3RTDyEED4u1+em5
lTyOMtsU40CzUW4iBwDKxfJLkA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:24 2026 by rpki-client