
$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier: 09J4cVcSao4elMBqgQe+QVZEha5bRJVAuZ1Jskbfuew=
Subject key identifier: 23:D3:5B:74:49:D7:39:5F:E9:C8:1F:BF:DF:AF:70:57:D0:44:17:FB
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial: 089A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number: 0871
Signing time: Sat 16 May 2026 20:50:12 +0000
Manifest this update: Sat 16 May 2026 20:50:12 +0000
Manifest next update: Sat 23 May 2026 20:50:12 +0000
Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: Qz7UaxhaOm74VtFXVVZAgF791tQn3obt3HwceblwxS4=)
2: 1F5EE982235011F1ABBAE38DAE833773.roa (hash: 4vii0PEyxfAMDDStR+CEGDgcVMprRDhlhb9Z9n20u5A=)
3: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: v7v6WaMiJJgHGJFslronZNjFXcWnrbiRDd5BXO1kv5Q=)
4: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: sMAmYlXlaGfYX483zQnKNNyggh6fdl5j3X0veZpEvVk=)
5: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: Jad+xXpbo9F1Si83r3/4thdMZxhxo4YYl8MwD9607wo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 20:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Validity
Not Before: May 16 20:50:12 2026 GMT
Not After : May 23 20:50:12 2026 GMT
Subject: CN=6a08d884-e876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:1a:3a:93:ad:6c:6b:05:71:49:6b:1d:2b:
3a:b5:43:cb:01:16:25:3b:dd:79:bb:09:83:0e:b4:
8c:da:72:81:ff:54:2b:28:b7:c6:03:47:36:b6:68:
a9:2d:94:65:99:d3:90:50:49:dd:95:88:e4:a4:57:
b2:df:86:c5:66:71:eb:15:04:04:e5:f8:dc:50:0d:
0b:4e:7f:ac:6f:d6:de:30:e8:fc:84:2c:f3:7e:1d:
0f:68:72:ed:52:41:a1:a7:75:da:45:f5:f8:7e:56:
fc:fb:3f:97:25:aa:26:d1:60:c6:1e:20:cf:86:00:
f3:a7:49:55:5f:1a:35:0c:c6:13:32:14:34:62:fc:
d7:e7:a4:fd:10:59:08:97:93:45:b4:83:e9:fb:ec:
0e:34:5e:71:b5:0b:0e:a7:e1:58:27:3c:2b:83:b5:
3f:ed:15:3b:fa:02:37:a2:c0:33:18:22:cb:15:28:
84:66:e3:e9:0b:05:2f:d7:17:99:d7:a2:46:69:3e:
f7:42:20:55:2a:72:74:88:de:3e:a7:e2:d1:1d:27:
58:9c:6c:8a:4e:ec:2e:76:2e:50:0a:6b:22:da:d5:
0e:49:dd:43:26:6e:8d:01:89:2f:04:51:a1:87:77:
22:d9:4e:de:49:2b:17:f2:5c:0e:9b:14:56:da:13:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:5B:74:49:D7:39:5F:E9:C8:1F:BF:DF:AF:70:57:D0:44:17:FB
X509v3 Authority Key Identifier:
keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:aa:a3:79:1f:e0:98:c3:be:c1:7b:00:9e:5c:1d:50:6d:00:
c7:21:7f:96:a9:1e:0c:93:99:52:c0:49:90:59:63:77:53:ad:
35:b7:49:f0:a6:e3:84:f3:f5:8a:69:4b:6b:1e:d9:97:33:b6:
d8:5a:03:fc:a6:7c:71:bd:65:a3:dd:2b:23:fb:40:ec:29:34:
96:2a:f9:cd:e7:99:4b:f3:49:df:87:aa:23:6f:1e:86:6d:fd:
0c:8a:ce:e6:35:2c:52:47:64:2b:73:e7:d4:49:52:4a:11:17:
36:4a:40:c7:09:31:c2:dc:f3:0d:cb:24:ca:79:22:d1:7b:9d:
5f:48:7b:fd:68:5c:15:6c:54:b7:f5:42:d3:78:e7:fb:71:1c:
5d:b4:a7:f2:0c:00:a2:48:c9:03:72:81:30:c1:db:25:ed:6d:
57:b5:93:29:67:a7:4b:60:12:8e:e8:a0:07:f9:22:de:fa:df:
27:99:d0:3d:4c:ca:8e:4b:57:db:d0:36:0a:21:0c:e5:48:5c:
78:d3:ce:5f:39:72:51:83:2c:01:bd:19:cf:08:b9:c0:b6:1d:
9f:21:c5:04:02:89:51:bd:ed:02:d5:be:09:14:8f:ba:62:69:
fc:e8:39:ea:9d:12:d2:52:0f:30:54:14:56:5d:c6:bf:8e:96:
bd:cc:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 07:00:40 2026 by rpki-client