
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier: la01cVyN6Q6Eahvv98Un4lzu9okbihg+S9AuQTTDGUU=
Subject key identifier: 0A:10:53:94:98:0C:46:40:65:28:35:8D:1F:27:C6:0F:6B:A1:8F:21
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 05C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number: 0590
Signing time: Sat 04 Apr 2026 23:06:08 +0000
Manifest this update: Sat 04 Apr 2026 23:06:07 +0000
Manifest next update: Sat 11 Apr 2026 23:06:07 +0000
Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: uXsmAmpkJ34XN96LYNulWQ7STk69YALZxHvJUM/vDcM=)
2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Apr 4 23:06:07 2026 GMT
Not After : Apr 11 23:06:07 2026 GMT
Subject: CN=69d19960-200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:fe:32:68:b0:33:f1:e8:1c:96:76:5e:68:
9a:47:ec:08:24:57:1e:b2:85:b9:dd:1a:43:34:64:
93:3c:8d:f1:a3:a1:f8:29:4f:c2:f6:f7:9e:83:49:
c3:cb:89:e9:18:ee:2b:f5:14:db:18:de:4c:29:71:
54:15:e9:21:ba:75:e5:e5:71:35:01:c3:ad:6e:6c:
25:6d:52:5f:12:8c:02:83:4b:31:dc:b5:f0:f0:1b:
c5:ed:b4:0e:72:58:72:62:db:c2:20:49:d3:99:41:
58:21:c6:85:80:86:e3:e5:79:30:d1:0c:da:68:fa:
bc:9e:5e:9e:b7:44:51:0f:41:26:dd:56:87:94:b5:
a2:8c:af:d4:c6:01:ef:5a:4b:2c:70:aa:06:1e:2c:
ed:b0:11:4c:19:e7:37:43:ea:72:d6:24:ee:5f:98:
01:4c:ac:f8:26:fb:6c:04:04:99:d3:96:fc:35:3f:
ad:ac:07:33:2b:1c:42:fe:a6:51:0a:08:8d:cf:25:
2a:18:66:c0:c7:b2:26:7b:e9:43:11:45:16:23:14:
d9:00:96:2a:27:24:e1:4c:1a:18:c9:9a:be:8e:6f:
c0:f1:64:77:06:7c:5f:de:8a:fb:fe:e1:61:02:57:
55:db:fb:ca:50:f9:4c:ca:3c:38:d9:a0:77:a3:da:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:53:94:98:0C:46:40:65:28:35:8D:1F:27:C6:0F:6B:A1:8F:21
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:93:39:82:45:ae:2f:f3:a4:6b:50:a6:19:42:19:18:21:c6:
e8:a6:9c:f3:3b:47:a0:b9:c1:cc:ec:7d:ec:e4:06:06:73:fa:
c0:bc:49:3f:01:51:f5:ca:53:50:cc:22:74:0d:2d:3d:6d:72:
65:29:06:c6:91:de:d5:70:a3:69:d7:6c:54:1e:48:72:38:b1:
71:82:04:0e:c0:7a:33:b8:cd:9a:8b:3d:0f:59:c8:76:12:f1:
f8:3b:9b:85:0c:44:64:7b:1c:10:d9:9d:4b:29:d5:7b:ea:de:
59:55:8a:f9:63:db:08:71:05:a8:19:19:1a:5f:06:28:6e:59:
eb:9a:ef:8a:f8:93:47:d0:1f:1e:fe:17:31:1c:17:49:19:93:
70:77:8f:48:99:ec:3d:c2:42:90:1c:e2:d7:33:19:f6:6b:f1:
1d:0d:b4:d5:c9:a6:74:a2:c7:3b:1c:a5:f8:20:b5:8d:44:d6:
70:72:44:8c:7c:6e:f0:de:06:9c:bb:e2:3c:0e:6a:9e:d5:bb:
0d:20:fc:bb:b3:db:7e:39:55:ae:4c:5b:47:3d:7f:84:c3:38:
f5:ed:97:e5:f4:74:6f:eb:b3:d6:64:2b:80:84:6d:6d:0c:b3:
96:77:01:80:51:72:2a:3b:9c:4c:b3:3a:70:a2:5d:63:b0:89:
4a:b4:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:29 2026 by rpki-client