
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier: QREr14OSsUhzKLR0VqVDZ1qD2Vqcfxm34DYXYUBOFcg=
Subject key identifier: 71:42:E4:34:32:09:50:9C:0A:F9:26:8A:7F:DC:F3:4D:F7:60:06:EA
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial: 0A53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number: 0A49
Signing time: Mon 02 Mar 2026 19:33:29 +0000
Manifest this update: Mon 02 Mar 2026 19:33:28 +0000
Manifest next update: Mon 09 Mar 2026 19:33:28 +0000
Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: 0dlHRaIxlR0kOlC55GQLEyLpbZhdWVa2Ph+Fxj5sI1Q=)
2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2643 (0xa53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Validity
Not Before: Mar 2 19:33:28 2026 GMT
Not After : Mar 9 19:33:28 2026 GMT
Subject: CN=69a5e608-a0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:0a:a6:92:a9:5f:5d:e5:a5:08:33:c5:c3:
51:a9:57:fb:41:12:5f:60:96:dd:d0:06:31:04:8e:
15:e9:70:59:9d:d1:64:7f:53:68:d2:0b:35:95:4e:
0d:38:70:59:15:94:1f:e2:eb:70:3d:32:e0:86:c9:
fd:c6:c0:6c:7c:8e:33:36:16:21:9b:ff:f1:1e:1c:
65:e1:79:77:73:07:4a:4e:8e:99:22:a1:05:19:1c:
c7:43:a4:53:d0:b3:63:03:bf:d0:c8:a5:89:b3:61:
00:e1:1f:40:4c:3d:4d:19:21:ab:4e:e2:99:10:76:
5e:94:4d:fc:94:62:15:9a:f6:2d:ed:96:20:a0:c4:
d9:e6:8c:0f:3a:b0:61:2b:83:ff:9b:c6:d2:37:03:
c3:1b:85:a3:58:9b:a1:c4:5d:b2:aa:b1:1a:22:33:
41:88:09:15:15:ae:62:d5:bf:aa:b2:ae:e6:f6:b3:
dd:23:53:b6:16:a1:b5:4f:b0:5a:70:1b:8e:cb:7a:
11:36:6a:bc:cc:42:13:63:81:05:35:1e:61:0f:44:
b9:ed:ca:2e:a8:0f:f6:f8:bd:f0:8e:8c:93:93:06:
42:42:c7:97:55:ac:d0:18:58:57:37:cb:ff:83:34:
fe:7c:0d:90:58:a6:fd:bf:6e:f0:0e:84:e5:79:9d:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:E4:34:32:09:50:9C:0A:F9:26:8A:7F:DC:F3:4D:F7:60:06:EA
X509v3 Authority Key Identifier:
keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:03:fb:ac:39:ab:1c:ca:74:a5:ee:85:43:0b:b3:d8:0c:e7:
2b:eb:12:2e:aa:01:63:02:ee:c3:6f:5b:64:6b:26:ff:48:29:
fb:c0:ab:7c:2b:7e:09:11:d5:aa:22:da:d6:21:c5:06:c6:34:
8e:e1:7f:10:bf:f5:7f:e6:fa:81:0f:a0:e9:7f:a0:a4:84:89:
ca:b3:47:52:95:fd:31:00:ed:47:b0:a5:09:ce:70:a6:d3:5a:
12:48:c0:e9:0a:1b:a1:a0:1c:6f:b2:e5:ec:ed:10:bd:20:cc:
1e:65:60:11:52:a7:89:7d:80:9e:28:5c:ef:b7:20:e3:e0:6f:
7e:6f:a0:f3:08:0f:cf:06:41:ca:75:23:aa:24:a7:49:77:18:
5a:c4:c8:f0:9b:fe:15:9b:1e:86:e0:e3:67:18:cf:27:ed:fd:
92:29:94:3d:b5:8e:67:f1:2c:56:89:c3:52:c9:1d:9d:16:85:
f6:70:5a:69:ae:1e:6d:e2:3f:25:f2:4c:e5:44:5a:0b:2a:33:
bc:38:73:24:c4:7c:8f:c6:99:51:bd:19:9e:d6:8e:fb:37:df:
81:bf:28:dd:fa:b9:f4:da:f6:1b:61:2d:eb:40:aa:fe:21:b2:
ad:c1:08:fa:03:47:64:28:32:8c:f2:d0:eb:b6:1d:fb:eb:d7:
5e:2e:08:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZFN0QxMTAvBgNVBAUTKDA2REY1MkQyOTE1MDNEMEUyQjExNzJEMzg1QzJCMTg3
Nzk0Qzc5QzcwHhcNMjYwMzAyMTkzMzI4WhcNMjYwMzA5MTkzMzI4WjAYMRYwFAYD
VQQDEw02OWE1ZTYwOC1hMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyv8KppKpX13lpQgzxcNRqVf7QRJfYJbd0AYxBI4V6XBZndFkf1No0gs1lU4N
OHBZFZQf4utwPTLghsn9xsBsfI4zNhYhm//xHhxl4Xl3cwdKTo6ZIqEFGRzHQ6RT
0LNjA7/QyKWJs2EA4R9ATD1NGSGrTuKZEHZelE38lGIVmvYt7ZYgoMTZ5owPOrBh
K4P/m8bSNwPDG4WjWJuhxF2yqrEaIjNBiAkVFa5i1b+qsq7m9rPdI1O2FqG1T7Ba
cBuOy3oRNmq8zEITY4EFNR5hD0S57couqA/2+L3wjoyTkwZCQseXVazQGFhXN8v/
gzT+fA2QWKb9v27wDoTleZ3XdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFC5DQy
CVCcCvkmin/c8033YAbqMB8GA1UdIwQYMBaAFAbfUtKRUD0OKxFy04XCsYd5THnH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xNzU5RTRDODgz
ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBRNHJFWExUaGNLeGgzbE1l
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0J0OVMwcEZRUFE0ckVYTFRoY0t4aDNsTWVjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkU3RC8xNzU5RTRDODgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBR
NHJFWExUaGNLeGgzbE1lY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADgP7rDmrHMp0pe6FQwuz2AznK+sSLqoBYwLuw29bZGsm/0gp+8CrfCt+CRHV
qiLa1iHFBsY0juF/EL/1f+b6gQ+g6X+gpISJyrNHUpX9MQDtR7ClCc5wptNaEkjA
6QoboaAcb7Ll7O0QvSDMHmVgEVKniX2Anihc77cg4+Bvfm+g8wgPzwZBynUjqiSn
SXcYWsTI8Jv+FZsehuDjZxjPJ+39kimUPbWOZ/EsVonDUskdnRaF9nBaaa4ebeI/
JfJM5URaCyozvDhzJMR8j8aZUb0ZntaO+zffgb8o3fq59Nr2G2Et60Cq/iGyrcEI
+gNHZCgyjPLQ67Yd++vXXi4Iig==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:45 2026 by rpki-client