
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json)
Hash identifier: 9OQKFzX879iBTDA1MlE9yiJ0MTvUaD8SbYH63ijqq7Q=
Subject key identifier: 1A:01:FA:5B:3C:D7:B2:2E:74:7C:81:EA:6F:CB:88:BF:D9:8B:A0:CB
Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Certificate serial: 0C4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
Manifest number: 0C44
Signing time: Tue 18 Aug 2026 19:00:15 +0000
Manifest this update: Tue 18 Aug 2026 19:00:14 +0000
Manifest next update: Tue 25 Aug 2026 19:00:14 +0000
Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: DhGE02qafWH6Der2qFVtxGy1eSe7AKB182xck0ReV4Q=)
2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: NnChO+AKLPYxrSb85TL7NkWuNcOh9X5s3cfGb3mVcMM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3149 (0xc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8
Validity
Not Before: Aug 18 19:00:14 2026 GMT
Not After : Aug 25 19:00:14 2026 GMT
Subject: CN=6a84abbf-b86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:ff:f4:82:b6:77:3e:5c:94:2e:8e:78:d5:
d7:46:4b:ee:e7:61:fd:1b:d6:3f:82:08:fc:12:74:
52:f7:1d:5e:e3:45:1d:25:3e:f6:1d:26:7f:6a:d0:
17:d1:fd:f9:0f:66:c8:c5:3a:46:3e:7c:e6:2b:d0:
47:b8:31:bb:ec:d2:d9:3f:67:be:97:af:66:d5:1f:
42:f6:44:e0:78:4d:2f:af:cf:21:89:a4:22:dd:2b:
ca:e7:66:f3:82:83:6c:a4:c6:f9:16:49:c1:9f:26:
e8:61:b9:86:e2:75:8c:7f:08:db:6d:c6:56:17:69:
ae:25:b9:50:22:26:d5:83:db:b1:80:43:21:88:f2:
4d:96:33:d2:1b:c6:8c:88:16:85:ff:4b:df:7d:1a:
a1:4b:42:c9:92:31:b1:dd:17:67:1e:6f:53:56:50:
e1:c0:ab:69:d9:0b:ac:9c:43:51:b1:e9:5a:e1:ab:
b2:16:0e:31:ae:9e:98:ab:b2:48:b2:25:b2:b0:69:
dd:c0:f0:a6:80:e8:b1:54:35:d2:c0:7c:cf:75:d0:
8d:18:dd:33:b8:00:04:25:c2:36:da:5e:1d:25:65:
75:81:af:42:61:72:fe:83:7c:43:d5:08:45:75:25:
7b:20:38:b2:c5:e6:e3:7d:6f:45:36:cd:57:aa:89:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:FA:5B:3C:D7:B2:2E:74:7C:81:EA:6F:CB:88:BF:D9:8B:A0:CB
X509v3 Authority Key Identifier:
keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:7a:29:cd:d4:b1:e4:43:b1:54:31:a0:09:6a:93:2e:a3:d6:
32:62:f3:67:94:f1:27:17:6e:9a:63:c9:01:88:ae:00:37:3c:
c1:51:29:b4:5b:da:b1:bd:fa:f2:6d:40:bc:40:3d:24:c9:ce:
ab:c8:ef:40:8d:85:a1:ae:36:2d:52:18:f1:93:94:40:9f:f8:
62:3c:a6:cc:d9:87:f6:98:d5:67:c1:83:be:36:6e:b9:16:32:
16:8b:b1:f2:b8:ad:c6:fc:db:a9:a4:78:05:b9:9e:21:14:24:
a0:29:1b:88:db:75:e3:73:a8:06:33:03:2a:f4:f4:c5:f4:d5:
9c:eb:7e:9b:27:80:17:97:f3:e1:3d:fe:7f:47:e3:bf:23:60:
b3:35:70:35:38:85:ed:33:61:63:86:f7:00:1a:68:26:05:fc:
e5:1d:38:9e:f1:ec:94:81:44:77:1b:b2:c1:ba:41:94:58:43:
67:83:bf:b3:d6:13:f2:ef:a4:5d:25:12:06:61:00:7f:8d:22:
6a:13:59:f8:da:b1:69:a7:2a:d2:25:3a:eb:a4:d5:61:21:24:
f1:ce:1a:2a:36:72:8c:15:8b:0d:3a:9a:25:01:0e:2b:ad:a5:
e6:fc:75:45:77:e5:19:11:22:99:b7:3a:3d:ef:be:d5:c5:09:
16:b2:ab:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:37 2026 by rpki-client