
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
File: bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft (raw, json)
Hash identifier: oRrgRYarlf3Q+uJ5iZ2IjRB9Xpgbtziwm8zQd5gIm+4=
Subject key identifier: C3:8F:91:32:FF:B1:E4:09:28:B3:3F:3D:11:0B:B9:24:D6:7B:70:B4
Authority key identifier: 6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E
Certificate issuer: /CN=A91D4FA2/serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
Manifest number: 11
Signing time: Wed 13 May 2026 09:13:11 +0000
Manifest this update: Wed 13 May 2026 09:13:10 +0000
Manifest next update: Wed 20 May 2026 09:13:10 +0000
Files and hashes: 1: bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl (hash: MdJxrd/TZwFA+NQI3MjvTVnUQ7QhPMqiV2WMdhoqkjA=)
2: 747DC16E3EF211F19456D02EC1833773.roa (hash: DzgxAcs3xQLb7+MwxDBKIN04csW3+rM4yVXnENoQ1uk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl
rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4FA2, serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E
Validity
Not Before: May 13 09:13:10 2026 GMT
Not After : May 20 09:13:10 2026 GMT
Subject: CN=6a0440a7-685c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:87:18:6f:f8:d9:7a:b9:4d:10:8d:c9:a2:
56:da:9c:16:d4:ea:71:97:07:c9:d5:4a:9e:60:c2:
d3:a2:b9:1b:19:1f:84:7c:48:59:5b:cb:74:95:6c:
9c:63:b6:c2:9b:2f:99:65:58:c0:3a:f9:a8:1a:33:
b4:1f:7b:29:d3:4d:58:69:fc:cf:f5:22:ab:66:fe:
b2:d0:f2:a9:d5:56:a7:b6:d4:60:17:39:f7:5b:08:
c1:7d:7a:32:dc:c6:a1:f0:87:b2:f0:e1:42:40:64:
1a:bf:58:3d:ff:12:ca:c7:71:66:6f:e6:74:64:8b:
85:91:c3:72:44:b6:2c:24:29:66:65:75:f6:58:56:
88:c4:65:78:c2:7e:ff:43:02:37:9f:ee:b6:12:bb:
e9:aa:82:cc:e1:f0:fe:f7:f1:29:2d:98:52:18:4b:
cf:dd:28:fa:47:23:81:d3:2b:8b:28:f3:f3:6b:c3:
b1:e0:31:a7:b4:4f:23:3a:84:93:5b:aa:fd:61:9a:
ac:8b:45:38:5e:7a:87:55:f2:62:25:c5:a5:7d:91:
74:14:b7:90:22:65:a9:45:3b:57:96:94:82:97:f6:
e6:00:33:fc:64:f4:f1:4a:47:91:87:5c:02:a6:3e:
17:76:ab:12:2f:56:c7:4a:a9:3b:30:d7:ff:35:ca:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:91:32:FF:B1:E4:09:28:B3:3F:3D:11:0B:B9:24:D6:7B:70:B4
X509v3 Authority Key Identifier:
keyid:6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:d8:49:42:1a:7c:e3:9c:49:67:84:ea:83:9b:1d:02:aa:
8e:a6:4c:82:b1:04:fe:a7:0c:86:69:d9:5e:40:29:2b:f0:d1:
9d:7b:7a:33:c7:94:20:da:60:34:ce:1a:b4:2b:e4:7e:39:48:
a1:11:78:ea:ae:c3:30:04:02:a6:9a:aa:25:51:4d:fb:8c:fa:
3f:39:99:87:4e:5b:b6:e5:42:aa:d9:89:e6:4a:15:44:a4:2b:
bb:9f:06:37:87:ab:2d:ed:15:de:f9:8d:d1:c7:bb:50:97:c9:
c2:78:76:33:18:2c:a1:51:7f:35:99:b5:e1:4e:6a:ab:28:5d:
a5:95:7d:52:8f:0c:a9:f1:0c:9f:8e:9e:88:5b:84:1c:5f:10:
07:c9:96:68:78:12:d3:2d:b4:97:4c:6b:fd:33:b5:0e:01:29:
fe:d7:31:af:8e:e5:80:64:c0:0a:dd:0e:68:66:af:3a:3b:46:
e8:af:25:1a:9f:c4:24:71:a4:c3:4a:2d:e1:e7:3b:e1:f4:32:
c7:8c:62:7b:07:d0:cd:26:ef:7d:93:ed:b5:b7:a4:44:47:2b:
98:37:d6:60:25:43:3e:ef:3a:3b:12:2f:1f:29:3f:7a:fd:04:
1d:75:e5:4c:cd:dc:2d:a8:b1:bb:6f:9c:1f:69:87:78:49:cb:
28:e1:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:30 2026 by rpki-client