
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier: bC4NcmsZNiYzva90A/mjSkvdh4EANGenuK+XgywAiss=
Subject key identifier: F7:29:01:1A:97:9A:C6:FD:6C:44:D3:2F:30:F0:72:3E:43:68:5F:6E
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 05F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number: 05C4
Signing time: Thu 16 Jul 2026 23:40:39 +0000
Manifest this update: Thu 16 Jul 2026 23:40:39 +0000
Manifest next update: Thu 23 Jul 2026 23:40:39 +0000
Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: 5tYPcsS/uI5kThduniqM3s3KfrlnJIAuPkxtka+Z7lE=)
2: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
3: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1524 (0x5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Jul 16 23:40:39 2026 GMT
Not After : Jul 23 23:40:39 2026 GMT
Subject: CN=6a596bf7-da6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:e0:83:5c:ff:7d:59:f5:cd:c3:ca:26:76:
e1:46:08:3b:45:4d:af:6b:19:73:49:fb:bc:05:93:
1b:44:8d:b6:20:b8:59:38:23:af:a1:44:1c:48:e0:
23:7b:59:ae:21:63:e9:e0:10:14:30:ac:64:a8:a7:
ce:f6:30:22:5b:ba:d7:8e:f1:32:45:3c:42:ee:df:
5e:44:d2:d8:18:fd:90:41:e0:8b:20:93:9a:84:f1:
c2:89:10:85:c4:9b:70:55:8c:fd:6d:05:58:8b:ab:
92:31:62:28:32:d9:fc:a9:28:81:08:1e:3d:96:cf:
dc:fe:b1:f3:7e:ce:af:8d:77:84:7f:ab:2e:6a:ba:
ef:03:ba:bc:5b:f0:2b:d7:fa:6d:48:19:f5:46:ef:
78:3e:68:94:84:93:d5:9c:52:81:d0:93:4b:76:67:
36:fd:bf:05:1d:28:f2:c0:75:fd:77:61:92:9a:59:
0d:c1:f6:9e:7d:80:b0:8d:6b:37:4e:6d:af:2e:8c:
d1:2b:1d:70:d6:37:79:7d:2a:eb:d9:b2:09:1b:75:
2a:d4:7f:31:3d:75:36:01:43:12:28:2f:6c:e1:1d:
37:5c:62:86:9c:10:db:f4:d9:8b:e3:d1:96:8c:cf:
4d:f9:fc:bf:e5:b6:26:dd:81:6c:b2:c3:4a:21:2b:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:29:01:1A:97:9A:C6:FD:6C:44:D3:2F:30:F0:72:3E:43:68:5F:6E
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:16:a5:19:86:2c:45:e5:4b:fd:19:8f:f0:61:bd:37:90:f8:
e7:c2:47:17:98:2a:df:59:81:7e:7f:02:8c:23:2d:3a:f9:5d:
50:8c:bf:4e:09:16:9c:58:77:95:31:76:13:dd:ac:62:26:e2:
71:36:d2:85:e5:b3:d9:ca:c1:95:70:78:f7:13:b1:7c:49:61:
19:69:8c:2f:b9:52:e5:93:2e:b5:3b:99:3a:7d:d5:95:ac:59:
21:39:fe:b3:3a:b3:4d:3f:32:ad:c0:66:52:7a:50:f4:42:08:
35:49:5e:0b:56:15:32:cf:33:1c:e6:98:6f:f8:51:18:3e:51:
9a:05:bd:85:01:45:29:00:cc:c6:f0:84:55:6c:0e:75:38:1d:
58:93:3f:d8:d8:08:ed:e7:17:b6:36:d2:93:a7:ec:cf:d3:ed:
8b:55:04:4f:9e:b0:44:fb:2a:30:35:0b:d1:38:67:f4:64:da:
95:27:36:a3:f4:94:f2:01:73:a0:15:86:c6:d9:e4:d8:14:8b:
f6:4f:60:dd:4c:d3:75:ab:64:8e:ff:37:4b:9c:aa:09:05:5b:
38:ba:9f:f7:b6:46:bf:51:12:5b:3c:b6:82:00:e6:cf:9a:fb:
5c:49:e3:52:be:12:9a:22:7f:90:a7:a7:a3:46:56:9b:b5:51:
16:81:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:48 2026 by rpki-client