
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json)
Hash identifier: U79f6KBxHl2EyjhT8BKAUVrmdqw5Pw2WG/uKyAbQD2I=
Subject key identifier: 9B:71:CD:F7:1A:29:C8:53:34:80:14:42:D7:0E:47:35:F3:FC:37:2B
Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Certificate serial: 16CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
Manifest number: 16CE
Signing time: Wed 22 Jul 2026 16:45:39 +0000
Manifest this update: Wed 22 Jul 2026 16:45:39 +0000
Manifest next update: Wed 29 Jul 2026 16:45:39 +0000
Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: 6/dzu02eXHTer3AOLjV0S1zfoycb5wCCnrdwXeSatGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5838 (0x16ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Validity
Not Before: Jul 22 16:45:39 2026 GMT
Not After : Jul 29 16:45:39 2026 GMT
Subject: CN=6a60f3b3-cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:c0:fe:a4:ac:92:d1:eb:21:ef:72:91:cd:
85:2b:ae:7c:5d:ce:67:9c:a9:ac:38:da:ad:59:81:
1d:bb:69:07:79:a5:4d:e2:b3:7b:a4:50:ba:61:f1:
80:b9:50:a1:f4:ae:27:ec:7e:2f:14:83:8c:56:94:
49:29:6c:0a:8a:b8:19:02:35:aa:0a:c2:ae:d5:51:
4d:b7:b7:7d:8b:43:21:56:2d:be:01:47:51:90:35:
26:9a:9a:bf:a8:8f:d8:2d:fd:89:77:4a:c3:cd:da:
3d:f6:0d:dc:b7:99:51:94:45:77:d3:02:d9:52:27:
11:bc:41:02:74:97:da:72:24:7f:7f:eb:59:67:b3:
9b:e5:74:d6:a6:5b:12:1f:60:da:4e:47:57:a2:5b:
7b:a2:58:7e:1c:0e:b3:3e:a6:1f:af:4c:cb:95:d0:
93:46:33:61:fa:6b:4e:f6:87:e9:26:d4:da:07:6a:
86:dd:22:df:aa:c8:a5:d9:2b:28:16:82:b0:b2:59:
08:89:06:3b:ea:68:c6:39:ee:00:40:ca:69:a5:e7:
32:46:10:7b:cc:72:40:45:96:98:66:8f:10:65:25:
cf:1b:99:a1:31:d7:ac:bf:cf:c2:5a:18:63:6a:63:
f3:fa:e3:31:aa:b9:0e:42:a0:cd:1a:13:9d:9c:dd:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:CD:F7:1A:29:C8:53:34:80:14:42:D7:0E:47:35:F3:FC:37:2B
X509v3 Authority Key Identifier:
keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9b:34:42:ee:27:14:18:45:2f:5b:82:af:60:06:3e:18:bc:
a6:af:a9:72:16:24:c6:80:a4:19:28:3b:dc:e7:be:37:31:e3:
7d:62:bb:0e:b8:56:b6:96:e7:b9:bd:e5:47:49:72:ac:d5:71:
e7:25:24:8a:d5:d1:b9:55:d0:9d:68:51:21:99:d9:5a:e4:39:
1d:28:37:57:e7:0e:8e:18:42:b6:55:29:39:e7:f9:40:42:de:
f3:da:a2:5b:03:cb:b9:31:3c:ce:5c:c8:85:d0:30:95:20:af:
ac:39:b2:10:e2:42:9e:c3:49:a3:7b:f1:5e:cb:a2:7f:c3:1d:
23:92:e9:16:56:f2:94:1e:41:69:58:84:4a:01:37:52:23:12:
1b:bd:c7:5b:5d:72:41:c6:d7:3a:2d:84:24:42:c9:29:1f:26:
a4:0a:43:22:ab:35:fc:0f:d9:d2:6e:71:99:4f:b0:48:a6:f0:
1d:8d:a3:64:60:39:8d:88:a7:90:38:6c:34:06:07:49:1b:f6:
92:ba:14:4e:79:5e:9f:74:f2:0e:fb:a5:c8:dd:eb:0d:f1:84:
6b:e3:cb:09:ae:05:68:9f:d5:d9:a4:57:ba:91:ee:20:99:0f:
70:42:7b:2f:33:0c:65:c0:4f:66:2b:eb:fc:57:16:7e:dd:28:
2e:52:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:32:47 2026 by rpki-client