
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json)
Hash identifier: PvGjdecVuJZqQOdokcuk85xyZMqFtBrVfOBBTOV9HQw=
Subject key identifier: 60:CC:2A:79:CC:10:2A:20:82:C4:B6:F7:96:06:97:03:34:3E:DA:73
Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Certificate serial: 0804
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
Manifest number: 07F7
Signing time: Tue 12 May 2026 21:21:15 +0000
Manifest this update: Tue 12 May 2026 21:21:15 +0000
Manifest next update: Tue 19 May 2026 21:21:15 +0000
Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: Zt/LiJz6dQFNvz12ii/Z1nNPWXDuEaGlKnELvQaZzbs=)
2: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: /ee3Z/RejGv34651CFjDfo357/BI2yYheaPQiVddGg4=)
3: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: +Ytbh6uS9SueVTTFSqsYD08Z5VmVPcYhz5ek3giGdE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Validity
Not Before: May 12 21:21:15 2026 GMT
Not After : May 19 21:21:15 2026 GMT
Subject: CN=6a0399cb-f947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:f0:14:32:fa:86:af:39:43:9d:b8:bd:83:
c1:5d:2d:86:58:37:7c:3d:4b:e2:a3:ad:3f:46:ff:
1d:a6:45:47:d0:a1:f6:a1:15:fc:d5:ac:45:9e:94:
e8:a3:9f:35:b5:75:a5:56:50:38:2b:5f:6d:cf:de:
f5:bf:07:ab:77:11:77:3d:e8:a1:ec:f5:d1:c9:37:
84:0f:11:94:75:ab:6b:e3:d8:f8:c9:ab:c8:b9:61:
f9:30:e2:c5:72:0a:04:54:92:68:e3:e5:2d:93:c3:
c9:fe:2f:b7:df:94:7d:91:d9:48:41:5a:85:fc:39:
6b:e4:b7:c4:aa:28:5a:b3:59:b3:b2:33:81:6e:da:
ee:5b:83:a7:38:17:76:60:e3:b2:5b:cd:c6:b3:99:
db:ec:9c:8c:6d:17:8b:d4:16:5a:4e:78:11:37:a7:
49:22:5f:ea:be:57:79:50:c6:cb:84:c9:3b:b0:95:
8f:ad:5f:df:34:99:d1:14:f3:5f:a4:d2:2b:00:53:
00:f9:bc:00:7d:42:3b:a5:6f:4b:84:7e:5d:1c:59:
7a:c7:e3:00:85:31:9a:44:b7:84:e1:30:e3:de:6c:
0e:91:85:2e:fe:b8:bd:aa:d9:19:03:0f:0b:9b:5b:
03:e0:42:76:c0:40:6c:55:72:ae:cd:7d:48:72:08:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CC:2A:79:CC:10:2A:20:82:C4:B6:F7:96:06:97:03:34:3E:DA:73
X509v3 Authority Key Identifier:
keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:bc:91:95:c9:93:68:9b:b3:78:a2:d8:2f:9b:61:f0:5e:57:
89:2a:38:6b:42:2b:23:0f:8a:0c:58:d5:5e:13:d7:c5:dd:41:
cb:4d:b0:de:1f:db:75:48:92:8e:5f:b8:14:7b:f5:9c:88:b1:
21:2c:b8:32:e0:bf:40:e9:a6:ec:97:d0:f3:ac:93:be:4d:5b:
72:3b:01:08:48:cc:ca:62:58:c3:ab:da:2c:e8:ef:25:c3:86:
2e:ec:8d:21:ae:81:6e:06:9c:40:4b:1d:5c:ed:56:5c:df:5e:
90:bb:1e:83:00:fb:a1:b5:e5:f7:30:8d:14:ae:ce:a5:cc:5d:
15:1d:88:04:29:86:58:76:ce:81:05:ec:64:f8:8d:3f:03:74:
67:76:f0:35:7c:f9:b2:61:a3:6c:b1:63:d5:3e:05:b2:59:71:
8c:38:49:1c:87:80:17:36:2a:0a:d8:8f:5f:12:a8:d0:58:42:
29:fe:4d:bc:af:d9:6d:92:1d:45:73:0d:ca:54:45:d9:b1:39:
de:83:da:42:14:64:3d:e6:40:d0:be:03:2a:15:b3:be:43:6a:
d6:d8:86:c4:5f:45:f2:ce:f3:77:14:25:fb:64:98:92:e6:d4:
8f:48:8c:40:ae:7b:5f:99:97:b0:16:52:2f:f5:cb:60:15:fb:
d5:e8:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:28 2026 by rpki-client