
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json)
Hash identifier: dOmrDtPCbapgMj/RaKFBVnkWrG/ud2jr9fYCD0Fvm6s=
Subject key identifier: BA:59:DD:5B:EA:98:D3:21:EB:BE:70:B9:54:58:E1:BA:78:0D:03:AD
Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Certificate serial: 080E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
Manifest number: 0801
Signing time: Sun 31 May 2026 21:50:31 +0000
Manifest this update: Sun 31 May 2026 21:50:31 +0000
Manifest next update: Sun 07 Jun 2026 21:50:31 +0000
Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: A5p3osK0UpNfw9Nckc4aaDFmTCDhV3N0ewyToHQhifo=)
2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: +Ytbh6uS9SueVTTFSqsYD08Z5VmVPcYhz5ek3giGdE0=)
3: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: /ee3Z/RejGv34651CFjDfo357/BI2yYheaPQiVddGg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 21:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Validity
Not Before: May 31 21:50:31 2026 GMT
Not After : Jun 7 21:50:31 2026 GMT
Subject: CN=6a1cad27-ba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:3a:23:50:a5:ba:79:f3:a5:b3:e0:e3:68:
4a:38:64:5f:53:3a:a7:d4:18:36:d1:9c:ca:57:1a:
ac:8b:1d:c7:a3:e9:9f:ab:6a:85:fd:66:84:0f:b9:
7d:5d:ad:63:ef:f4:8c:48:ad:c1:d1:2f:45:00:6c:
c9:fa:f7:13:8f:d8:b0:8b:3a:85:aa:71:f5:e9:9c:
4c:ef:3e:61:b0:51:de:82:29:03:83:ca:d8:e4:c1:
16:38:db:95:e4:10:32:54:1e:55:2d:e7:41:07:d2:
63:fd:50:5b:37:1f:a1:bf:2b:51:72:d1:12:87:7d:
0c:8e:ae:d0:2f:34:a4:4d:ce:3a:ad:4b:f8:20:90:
9a:8d:45:2c:9f:96:db:a7:b9:93:6e:c5:14:16:78:
9b:be:71:3b:9e:10:57:4d:aa:4c:9b:d3:4a:95:a9:
db:18:b6:8b:45:a5:0e:bb:ba:89:62:cf:40:64:91:
34:8a:be:41:e7:c4:ce:d0:7a:56:5a:ac:5b:29:c7:
66:f3:d4:85:5c:12:2d:56:0c:11:ce:5f:99:b7:fd:
e2:77:3c:c7:d2:f9:f3:5d:47:ea:d9:bc:33:43:9c:
28:ac:dc:28:79:2c:9d:1b:e8:8f:a2:30:6c:1c:6c:
60:90:8d:f3:5b:a0:5d:f7:53:54:5a:4d:4a:7a:8c:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:59:DD:5B:EA:98:D3:21:EB:BE:70:B9:54:58:E1:BA:78:0D:03:AD
X509v3 Authority Key Identifier:
keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:59:44:ba:c5:4d:98:47:0b:35:8d:69:9e:98:43:f0:53:
09:91:cc:df:01:eb:e7:87:67:2a:76:96:a7:4b:76:35:fd:73:
8f:a3:da:80:e6:d5:c2:38:4f:8f:34:3e:c6:33:da:62:52:d1:
54:6d:1d:11:df:e4:02:2b:b0:3d:da:c3:ce:8c:bf:8f:f7:b6:
26:96:10:1d:ea:ea:76:73:1c:11:f5:3e:88:74:1a:13:f3:6f:
45:e1:a4:22:e0:77:0a:63:b0:1c:92:cd:db:90:e2:51:28:01:
11:52:47:0e:8d:59:03:d9:4b:4e:9f:24:8a:c8:a0:42:3a:ce:
fa:86:93:40:16:57:1d:10:0f:9b:d4:f1:29:01:de:e5:ac:4f:
b2:41:6b:35:c7:78:1b:c1:60:09:c7:33:b3:43:b1:85:27:98:
54:b1:37:3a:c6:49:aa:a3:a2:93:af:9d:83:a5:9f:c0:d7:88:
cf:25:8a:3b:d9:28:a2:8b:f4:6b:3f:6a:7f:79:0f:e0:0d:c8:
f5:82:9d:8f:e3:91:51:8d:cd:f4:77:97:b3:02:30:3b:14:b3:
b4:40:b9:b3:79:11:2e:1d:2e:b6:18:1f:b9:91:03:1f:20:15:
8a:c4:37:2c:51:5b:9d:2b:87:4c:96:44:bf:e0:92:ea:2c:4d:
c5:9c:7c:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz
Q0U5MzQyMDYwHhcNMjYwNTMxMjE1MDMxWhcNMjYwNjA3MjE1MDMxWjAYMRYwFAYD
VQQDEw02YTFjYWQyNy1iYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhg6I1ClunnzpbPg42hKOGRfUzqn1Bg20ZzKVxqsix3Ho+mfq2qF/WaED7l9
Xa1j7/SMSK3B0S9FAGzJ+vcTj9iwizqFqnH16ZxM7z5hsFHegikDg8rY5MEWONuV
5BAyVB5VLedBB9Jj/VBbNx+hvytRctESh30Mjq7QLzSkTc46rUv4IJCajUUsn5bb
p7mTbsUUFnibvnE7nhBXTapMm9NKlanbGLaLRaUOu7qJYs9AZJE0ir5B58TO0HpW
WqxbKcdm89SFXBItVgwRzl+Zt/3idzzH0vnzXUfq2bwzQ5worNwoeSydG+iPojBs
HGxgkI3zW6Bd91NUWk1KeoxNBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpZ3Vvq
mNMh675wuVRY4bp4DQOtMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF
QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz
YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYk9ZRLrFTZhHCzWNaZ6YQ/BTCZHM3wHr54dnKnaWp0t2Nf1zj6PagObVwjhP
jzQ+xjPaYlLRVG0dEd/kAiuwPdrDzoy/j/e2JpYQHerqdnMcEfU+iHQaE/NvReGk
IuB3CmOwHJLN25DiUSgBEVJHDo1ZA9lLTp8kisigQjrO+oaTQBZXHRAPm9TxKQHe
5axPskFrNcd4G8FgCcczs0OxhSeYVLE3OsZJqqOik6+dg6WfwNeIzyWKO9kooov0
az9qf3kP4A3I9YKdj+ORUY3N9HeXswIwOxSztEC5s3kRLh0uthgfuZEDHyAVisQ3
LFFbnSuHTJZEv+CS6ixNxZx8zg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:18 2026 by rpki-client