
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier: ogFdbwCBob706psHM/4k66HDz6RNkezKLSTs5WmR0D0=
Subject key identifier: 94:ED:E4:D5:7D:C2:15:B7:53:98:26:20:C0:50:C4:D4:21:53:37:3D
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial: 08FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number: 08CA
Signing time: Mon 12 Oct 2026 20:48:51 +0000
Manifest this update: Mon 12 Oct 2026 20:48:50 +0000
Manifest next update: Mon 19 Oct 2026 20:48:50 +0000
Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: aLoZuyEQNOJ3rlttwUnRXRoX9dLhslLDN7KoTujmNAo=)
2: 6228B5D67C3311F1A4365A405EA30FBC.roa (hash: lm6a6sSlcGo7UiIokAJc0to+ipQDBzDwod6EvR7ZUXs=)
3: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: GhfbbBIsZM+E4EuVHL/xJ2Fu2eRbGFvM+U1LBFCjiS0=)
4: A576C5087C3311F1890EBC415EA30FBC.roa (hash: OOm/rpCNOVEzbs5MbTS+KE9MkYUOeHrbZ+HUs/7R0Ao=)
5: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: MCGnucdcznK4z6pNnNE6+XPxuPG/TfxwroCFCdKryF0=)
6: 9D0A5048B0B711F1A935775B6511F970.roa (hash: TqqLO6ohhVV1eoFj1YiCKqeJJ+gDVg7wIfsfChMSkuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 20:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Validity
Not Before: Oct 12 20:48:50 2026 GMT
Not After : Oct 19 20:48:50 2026 GMT
Subject: CN=6acd47b3-1bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:08:8d:64:90:c6:3d:52:fa:28:02:63:6e:
99:13:33:3a:de:b5:99:15:d2:11:32:07:e1:51:23:
1c:30:40:b3:56:96:0b:13:7e:5e:d1:7c:e8:5a:81:
56:e9:e7:43:95:1b:46:0d:35:9b:2c:3c:52:e8:55:
6b:50:b4:1b:bd:0a:26:5f:9e:b2:cc:98:74:ae:75:
b8:91:ef:d5:32:e4:32:cc:66:ad:0b:97:ba:2e:4c:
21:21:13:2d:f1:19:06:87:41:8f:2d:05:75:15:9e:
9f:f1:22:60:9a:9d:18:14:6c:3e:23:75:90:84:52:
70:f6:c7:ed:5d:20:ec:e1:d9:d3:ad:c2:19:ef:55:
87:c7:84:3e:ad:cd:bc:07:03:f0:a5:5d:94:9d:13:
74:f3:38:ff:b4:45:44:94:5c:ae:74:32:c3:b3:60:
35:77:17:77:46:49:36:8a:3d:0f:6b:7c:8d:54:9c:
87:2e:91:05:8b:24:9f:90:f8:a9:94:9b:53:8e:32:
ed:fb:9d:18:df:36:84:66:ef:7d:7a:56:ce:04:75:
9f:72:34:74:b5:62:1f:a7:f4:bf:7c:e1:df:6a:95:
4b:66:c1:56:a2:b1:e7:1e:1b:e9:8d:a8:9f:eb:71:
b7:39:a0:9d:17:15:1b:9f:fc:b7:b1:19:77:f2:96:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:E4:D5:7D:C2:15:B7:53:98:26:20:C0:50:C4:D4:21:53:37:3D
X509v3 Authority Key Identifier:
keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:43:87:98:46:0f:9a:0f:cf:8b:a9:ac:ab:8c:61:64:1f:16:
77:2d:ae:bb:90:9d:bc:b0:9c:72:a6:11:87:df:7d:43:39:fa:
b2:3a:a2:90:fd:5b:8b:79:d1:1d:e5:82:1f:04:9e:64:f5:47:
f7:19:8f:3b:48:da:9d:74:66:0a:8f:73:0a:dc:53:e7:40:9e:
6a:e4:e3:a3:a0:b3:2d:0f:2a:26:d9:91:dd:05:52:ba:6a:f5:
d9:61:fc:bb:18:40:4c:8f:cd:4e:e9:11:43:c0:c6:74:ff:17:
ca:74:c0:ac:be:cc:19:b0:cf:31:86:0e:09:34:e8:de:9d:b5:
22:05:b6:cd:23:28:25:6b:7d:96:0e:60:0b:3c:f0:a5:9b:c8:
6a:9f:91:1d:27:4e:e6:7e:3d:56:69:b2:5c:d6:7e:aa:51:f4:
9c:5d:98:22:26:e0:f7:ab:2c:e7:6a:37:9b:0e:ca:09:02:33:
85:71:dc:68:30:92:24:59:c5:cd:00:3b:4d:30:32:c9:cf:68:
bd:49:cd:71:cd:08:47:bb:3d:8e:9e:83:15:2b:75:0f:9b:98:
35:08:46:87:7b:02:b7:42:93:9c:b8:90:c6:57:84:8b:46:9f:
09:15:fc:7d:32:1b:49:6e:7d:63:a6:ec:3a:88:af:e8:90:e8:
d5:0c:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:11:19 2026 by rpki-client