
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier: 6RdqZotVJV7SvmCpL1sSaXhLtevDyoKPCkq0JacZvec=
Subject key identifier: 38:34:E2:ED:9A:59:38:AC:59:D3:4E:55:67:F5:3A:71:EB:12:5E:6F
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial: 08FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number: 08C9
Signing time: Sat 10 Oct 2026 20:44:37 +0000
Manifest this update: Sat 10 Oct 2026 20:44:36 +0000
Manifest next update: Sat 17 Oct 2026 20:44:36 +0000
Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: N207cIOWi1K7fkl9xVIye7yKPUMX5tSS/Er8PSWIUss=)
2: 9D0A5048B0B711F1A935775B6511F970.roa (hash: TqqLO6ohhVV1eoFj1YiCKqeJJ+gDVg7wIfsfChMSkuo=)
3: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: GhfbbBIsZM+E4EuVHL/xJ2Fu2eRbGFvM+U1LBFCjiS0=)
4: A576C5087C3311F1890EBC415EA30FBC.roa (hash: OOm/rpCNOVEzbs5MbTS+KE9MkYUOeHrbZ+HUs/7R0Ao=)
5: 6228B5D67C3311F1A4365A405EA30FBC.roa (hash: lm6a6sSlcGo7UiIokAJc0to+ipQDBzDwod6EvR7ZUXs=)
6: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: MCGnucdcznK4z6pNnNE6+XPxuPG/TfxwroCFCdKryF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Validity
Not Before: Oct 10 20:44:36 2026 GMT
Not After : Oct 17 20:44:36 2026 GMT
Subject: CN=6acaa3b5-f728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:19:c4:19:ca:5f:f6:4b:ec:9f:bd:ac:89:
41:72:35:e8:f7:ae:ae:7c:9a:9b:01:ea:54:a6:4a:
ea:ad:69:8c:f3:0f:ca:d5:35:7b:da:c9:e6:51:46:
4e:fc:9a:4b:93:20:3b:c4:b8:2c:f1:7c:81:3f:0e:
69:c7:b6:ab:e8:ca:68:a3:a1:d2:e2:e4:1d:d2:94:
2c:5d:66:4a:56:ee:9f:00:bc:c0:33:ff:18:00:d5:
5a:23:c6:5e:94:71:6a:c2:94:89:d5:5e:3b:80:fd:
22:e7:0b:57:41:bb:7e:b5:a9:68:30:e7:a3:bb:5c:
a0:80:40:18:d2:c0:38:e0:e3:3e:95:b6:0c:51:9f:
80:e8:af:fe:88:01:c2:c3:5d:96:1c:6c:6c:d0:e3:
0c:d7:2c:2f:99:f6:8d:0d:28:18:74:38:14:08:10:
d5:06:3f:2d:c6:ab:d0:91:24:a8:96:9d:bc:7f:8e:
22:1b:cc:e5:6c:64:6f:85:fb:c0:c6:3e:f1:e8:1d:
6a:ab:05:98:bb:34:ba:4d:17:78:32:4a:36:ae:fa:
0b:fb:f7:e5:24:53:01:71:35:e5:db:68:60:71:29:
5e:2a:7b:59:48:d7:75:25:f5:81:5c:46:c4:1b:6a:
14:03:dd:dd:90:97:04:44:0f:4b:54:e8:fb:78:16:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:E2:ED:9A:59:38:AC:59:D3:4E:55:67:F5:3A:71:EB:12:5E:6F
X509v3 Authority Key Identifier:
keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:98:a5:6b:59:95:03:59:61:62:54:41:ab:dc:74:1d:69:98:
d9:f7:b7:47:29:e6:65:fe:ba:69:90:12:f1:15:05:19:2e:79:
45:45:2e:48:bc:83:25:4b:49:20:b0:87:4d:9f:96:b9:02:70:
81:9c:11:b6:e0:f4:91:bb:09:be:e3:fe:f5:83:8a:09:7e:0f:
dd:9e:9f:5f:db:c7:72:fb:7e:1d:c0:fb:88:19:c1:b5:05:77:
ff:4c:42:a0:1d:8a:55:db:84:28:1a:23:02:12:c8:d8:2f:2c:
df:ee:fe:54:9f:dc:53:81:0b:3b:a4:74:f7:25:9e:68:83:18:
e0:2d:a4:db:36:1d:6c:c9:dd:1e:b5:87:38:e4:08:69:eb:e8:
46:8d:69:35:c4:95:28:df:c6:65:b5:b7:b5:83:4c:31:12:66:
67:9d:5f:2d:1f:a4:ae:61:f7:ea:78:ca:64:ef:74:10:54:ec:
ec:92:a6:1c:b5:31:72:60:db:4a:f1:8b:39:32:ad:41:cb:5f:
b4:9f:1c:22:73:74:84:f1:2c:1b:c3:75:b6:64:a4:16:f3:d9:
b8:65:c0:a1:19:dc:35:02:24:48:dc:73:d2:09:e9:e5:d1:0e:
a5:53:43:18:df:ac:44:63:08:f2:4b:cd:1a:48:5d:1b:b3:0e:
a4:a4:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:16:42 2026 by rpki-client