
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json)
Hash identifier: nNMFRmCBOAAuEOdbM+vBVh0AYtn4STWJ3PzyvZBuggY=
Subject key identifier: A1:39:14:90:0D:A1:F6:3F:13:52:03:C9:EC:FC:BB:F4:3B:C3:6F:BE
Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Certificate serial: 0C68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
Manifest number: 0C5F
Signing time: Sat 10 Oct 2026 18:45:14 +0000
Manifest this update: Sat 10 Oct 2026 18:45:13 +0000
Manifest next update: Sat 17 Oct 2026 18:45:13 +0000
Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: nfR/9iZC5SO3s19pJnEzrvGa/Jmy+lCKfB3DODS2124=)
2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: NnChO+AKLPYxrSb85TL7NkWuNcOh9X5s3cfGb3mVcMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Validity
Not Before: Oct 10 18:45:13 2026 GMT
Not After : Oct 17 18:45:13 2026 GMT
Subject: CN=6aca87ba-791c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:38:e8:57:7f:8c:b4:32:09:fe:b8:8d:b7:
16:ac:8b:84:68:8d:9d:11:c4:87:de:2d:79:46:44:
33:6d:ba:d0:be:3b:c9:67:0f:a7:ca:bb:26:d2:d6:
3d:64:de:29:cd:0f:66:81:ac:34:b4:06:db:f7:94:
46:2f:13:20:ef:ab:ed:c8:61:2a:d6:8f:a5:b0:ee:
95:f6:9f:4a:46:e7:99:20:bc:79:54:1c:35:f4:a0:
c6:0e:29:d4:6b:5c:92:c6:c6:ba:14:ea:e1:82:ff:
bd:fc:40:70:c8:20:72:93:81:db:d0:68:0c:e3:8c:
a7:4a:8a:d1:82:72:35:ed:e2:24:bc:c3:ff:69:9a:
b2:7a:61:b9:3c:17:81:3f:99:90:56:4e:e7:9a:f8:
b2:4c:f8:a7:41:73:23:35:11:a8:41:86:e3:e1:46:
56:90:65:d7:b3:81:90:d0:66:b3:d5:44:82:86:8a:
b8:38:8d:c3:d0:2d:21:ba:1c:43:99:26:b5:04:b4:
22:4a:8a:7a:81:89:54:8c:c8:19:26:d8:6e:dd:b6:
61:ab:3a:4e:36:7a:67:07:09:74:0a:d1:11:81:0a:
dd:4a:ff:f4:fb:41:f6:9d:66:06:31:a1:ac:71:49:
67:71:17:3b:48:d2:ba:43:c7:9f:66:49:c9:5d:6f:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:39:14:90:0D:A1:F6:3F:13:52:03:C9:EC:FC:BB:F4:3B:C3:6F:BE
X509v3 Authority Key Identifier:
keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:cd:5d:37:fa:56:1a:7d:83:4c:82:74:0c:ed:72:51:f1:f4:
23:cf:9c:2f:49:f3:41:00:fd:a1:50:ca:8e:b0:88:cf:48:cb:
78:3b:d8:8b:d9:bd:ae:ff:d3:7c:cb:03:de:d6:44:30:84:83:
9a:d0:0c:a1:e2:f6:7f:66:bc:57:8c:a4:a3:9f:b5:db:aa:b9:
dc:51:83:2b:ef:7d:09:3c:8d:ea:d2:c9:c6:4b:96:38:66:39:
6a:01:3b:67:be:69:d2:cc:0a:ca:fe:92:22:75:bd:da:54:c0:
e8:ef:f3:9b:0f:72:c3:32:44:78:e0:18:d4:d0:b4:ba:9e:66:
0e:61:7a:2c:9f:4e:1b:02:49:63:18:11:81:97:53:f6:52:d5:
b9:f1:dc:6a:24:4a:bd:fc:ef:0e:c8:21:ba:59:a2:5a:5f:07:
4a:c3:b6:1d:17:c6:52:dc:d5:08:19:e5:2f:22:04:3e:26:2c:
55:60:cf:f4:ff:13:9f:04:fe:11:8d:67:a6:c5:7a:4b:ae:ac:
cd:f5:35:58:0a:cf:9e:32:0f:b9:e9:a0:15:20:e8:0a:4b:45:
7d:33:eb:a7:2d:67:6b:0c:91:0f:c0:51:5f:a6:20:e2:c1:df:
0a:6d:2f:0a:e8:e7:00:d2:27:33:60:0d:0f:87:19:b0:e1:62:
d5:fc:43:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:51:52 2026 by rpki-client