
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json)
Hash identifier: bIM/JX2XDwAJN/IyC7hUbyO5otIN5rAIegO//kwK/J0=
Subject key identifier: 45:35:BA:67:30:CA:0C:51:4B:70:C9:B8:8E:DC:83:28:40:6D:00:A0
Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Certificate serial: 084C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
Manifest number: 083D
Signing time: Tue 22 Sep 2026 20:52:51 +0000
Manifest this update: Tue 22 Sep 2026 20:52:50 +0000
Manifest next update: Tue 29 Sep 2026 20:52:50 +0000
Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: /osHHURa+vr2hOJttXv2SvAGYHhqPUhwUP+uSOIuMko=)
2: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: VwwT7RQ/qXGeiFBkCB3JtIL1WCq5yNf8aGSsCVk++yQ=)
3: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: cVjs8CCmJom1l0o4wFC6QkXwpn/JOlzgY1YvrYV5KoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Validity
Not Before: Sep 22 20:52:50 2026 GMT
Not After : Sep 29 20:52:50 2026 GMT
Subject: CN=6ab2eaa2-e496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:e9:06:ab:1b:6a:ca:2f:f4:0c:67:04:6c:
d8:34:af:43:5b:60:ea:17:b6:cd:a6:48:aa:4a:c9:
63:92:d5:de:67:17:95:da:18:8a:74:9c:84:48:ed:
3a:07:98:e8:6f:36:a2:14:33:8c:5d:c1:72:f0:b1:
80:2b:4c:19:9e:ec:bd:83:ee:ff:9e:51:2b:1c:5c:
4f:4d:f7:2e:46:b1:d6:5a:58:c3:e8:60:4c:50:04:
4c:a0:06:bb:0f:5a:05:c0:3b:85:7b:9b:85:c9:ff:
aa:59:91:10:c9:f0:f9:9e:5f:b8:34:d9:0c:d3:6a:
59:b0:ca:79:41:92:cd:03:e7:b9:1d:a0:8d:18:0c:
0b:c1:89:a6:a3:8d:d0:1f:22:bc:47:fe:b4:a0:c9:
e7:23:28:84:8a:ae:fe:46:33:cf:72:3a:f8:37:4d:
74:8c:94:27:73:11:79:09:ee:ae:7e:b1:05:58:bf:
ab:9a:09:ce:9f:29:73:26:d1:f9:47:aa:84:6a:cb:
1f:58:3e:28:d2:bc:9b:79:0e:1d:5a:ec:ef:61:cb:
ee:7e:86:1f:12:4d:e2:af:88:71:35:a3:86:10:d9:
8e:7d:a4:72:c8:f7:73:2d:ed:f0:de:01:05:22:cf:
73:86:63:d5:e4:24:43:e9:d1:98:d1:d7:8d:da:b0:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:BA:67:30:CA:0C:51:4B:70:C9:B8:8E:DC:83:28:40:6D:00:A0
X509v3 Authority Key Identifier:
keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:fa:76:8e:29:71:bc:14:c0:2a:71:df:f3:2c:3f:22:0c:55:
7c:08:08:88:10:f3:d1:e5:da:f4:a0:99:7d:b2:04:11:4d:49:
a8:9a:a5:a7:97:34:fd:1c:ec:31:8e:fa:e2:86:38:f9:54:31:
62:ac:4d:84:35:64:c4:91:7d:43:aa:b0:54:85:17:be:dc:ce:
90:a5:50:69:8a:87:5b:ae:6a:6f:10:e7:e0:e2:ad:e1:44:9a:
9d:e6:5e:74:d3:bd:78:2b:79:70:0b:e3:33:fa:46:ac:43:80:
59:2f:b2:b1:0f:1d:6d:33:09:36:d8:26:93:5f:62:f7:e8:c2:
49:cf:93:d4:8c:87:fc:ad:d8:32:3d:df:c4:fc:6c:02:ee:c2:
c6:ec:7d:91:c7:d4:9f:77:59:dd:59:80:d6:4b:a8:5c:1f:73:
d8:80:5e:e5:20:f5:58:37:c1:b4:c6:f5:5a:bd:dd:53:1b:f0:
de:f2:ed:44:13:8b:06:e9:09:bd:e9:8c:6c:ac:1a:10:b2:53:
c6:c3:18:a5:0c:39:e6:7f:3d:69:46:7e:d5:7a:4d:f8:c4:78:
65:8b:cc:fc:52:f3:99:e4:30:22:b0:a5:dd:ff:b7:50:91:27:
96:b1:4e:7b:a6:d7:a5:4a:9c:58:d8:b3:b5:7f:df:3b:bc:e1:
ad:4b:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:00:10 2026 by rpki-client