
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json)
Hash identifier: LkbpTBlpmlpCRTdPF+3WRvlwdROfLjpPI7pODUBDjjA=
Subject key identifier: A6:0F:E7:A5:97:22:8D:7D:E5:19:B1:6F:3B:40:17:2E:65:88:D8:AF
Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Certificate serial: 0960
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
Manifest number: 0C31
Signing time: Tue 06 Oct 2026 20:15:02 +0000
Manifest this update: Tue 06 Oct 2026 20:15:02 +0000
Manifest next update: Tue 13 Oct 2026 20:15:02 +0000
Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: IlDHjqxPICOi4cgfaaAuZwW9QDy2tQtHsI+UWEAYbNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Validity
Not Before: Oct 6 20:15:02 2026 GMT
Not After : Oct 13 20:15:02 2026 GMT
Subject: CN=6ac556c6-d116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:c7:8e:4e:61:5b:43:6e:af:f0:aa:ce:bd:
0e:c0:92:13:66:76:3e:09:0f:d0:a6:9c:ba:e9:5f:
f9:e9:7c:b1:8a:5e:f5:2a:14:14:20:31:ab:4f:2b:
65:fc:62:13:66:bd:10:e7:ba:cb:14:3b:d2:d6:ae:
c1:42:10:6d:ac:59:31:79:8a:10:b1:c6:07:53:ea:
d9:38:5a:69:ed:30:10:e6:35:20:8f:99:e1:ed:aa:
8a:fb:a5:f9:bc:e2:30:2b:3a:05:41:46:0c:72:41:
49:f0:e4:94:e3:ad:61:e8:0c:77:08:c8:de:d9:ae:
f8:e1:be:6e:d2:47:bb:f9:29:23:b0:af:8e:b9:bc:
9b:68:d4:28:1f:ab:35:5c:0f:c2:b4:77:eb:dd:de:
db:f4:c9:84:7b:10:f3:34:f8:47:6e:ff:db:bf:ac:
89:af:08:3d:00:2b:d9:6e:07:6c:eb:bb:ad:98:05:
3d:24:70:22:38:08:75:be:bb:c6:51:a8:86:69:e8:
68:f8:1b:20:e5:15:3d:ab:fe:ac:34:6b:a4:c2:57:
71:13:36:d9:fb:d3:33:47:b2:3c:47:d7:35:af:03:
2e:d8:88:e0:38:c7:65:39:df:0c:ac:4c:9c:84:28:
1a:b9:6c:13:e3:84:0e:39:ff:36:af:ca:c8:53:ec:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0F:E7:A5:97:22:8D:7D:E5:19:B1:6F:3B:40:17:2E:65:88:D8:AF
X509v3 Authority Key Identifier:
keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:11:65:c0:b3:0b:ba:cb:4a:8c:9f:ac:56:bb:5b:cd:fd:ef:
f2:17:b3:73:b5:0b:fd:45:78:73:35:d0:d7:c3:09:f1:3e:4b:
52:62:58:38:cb:88:48:c8:01:95:d0:d4:d9:aa:60:75:a1:fb:
fa:41:82:e3:a8:c3:f5:49:42:c8:fe:9a:90:30:9b:61:e3:99:
80:29:b9:98:41:2b:79:e7:d4:df:5a:c1:07:f0:6c:25:0f:2a:
f4:4c:08:40:f0:1a:3b:42:7a:2f:46:a6:57:61:63:9e:5f:ed:
e4:31:2f:d0:09:47:1c:aa:4d:55:66:96:b1:62:05:ed:70:05:
12:d8:1d:d1:6b:53:26:3f:a2:99:07:fe:cf:84:b8:19:31:98:
de:a5:a2:b5:f0:01:74:5e:d8:71:6d:ed:48:fa:a5:5d:b4:b3:
5f:d1:23:04:e6:fa:73:a7:0a:48:15:4c:bb:6b:ac:5e:ec:4e:
22:82:ab:42:6a:f1:00:c0:9e:8f:89:ae:71:cd:15:9c:67:90:
94:08:af:3c:86:01:1c:ce:82:56:2e:c4:5a:50:2a:15:84:13:
96:8d:e1:0c:1a:5e:1f:94:08:ff:f0:c3:25:f1:88:a0:a7:23:
23:05:44:45:8b:be:2a:28:bc:cb:64:99:2d:1b:17:69:5c:6c:
e7:7c:93:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEwQUUxMTAvBgNVBAUTKDA0MDhBRTYwRkYzNjhCOEM0RkNEOTMxOEVBNTJBNTlD
ODcyODk0OUMwHhcNMjYxMDA2MjAxNTAyWhcNMjYxMDEzMjAxNTAyWjAYMRYwFAYD
VQQDEw02YWM1NTZjNi1kMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzDTHjk5hW0Nur/Cqzr0OwJITZnY+CQ/Qppy66V/56Xyxil71KhQUIDGrTytl
/GITZr0Q57rLFDvS1q7BQhBtrFkxeYoQscYHU+rZOFpp7TAQ5jUgj5nh7aqK+6X5
vOIwKzoFQUYMckFJ8OSU461h6Ax3CMje2a744b5u0ke7+SkjsK+OubybaNQoH6s1
XA/CtHfr3d7b9MmEexDzNPhHbv/bv6yJrwg9ACvZbgds67utmAU9JHAiOAh1vrvG
UaiGaeho+Bsg5RU9q/6sNGukwldxEzbZ+9MzR7I8R9c1rwMu2IjgOMdlOd8MrEyc
hCgauWwT44QOOf82r8rIU+xoZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYP56WX
Io195RmxbztAFy5liNivMB8GA1UdIwQYMBaAFAQIrmD/NouMT82TGOpSpZyHKJSc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5
NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0eFB6Wk1ZNmxLbG5JY29s
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JBaXVZUDgyaTR4UHpaTVk2bEtsbkljb2xKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi9CQWl1WVA4Mmk0
eFB6Wk1ZNmxLbG5JY29sSncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVBFlwLMLustKjJ+sVrtbzf3v8hezc7UL/UV4czXQ18MJ8T5LUmJYOMuISMgB
ldDU2apgdaH7+kGC46jD9UlCyP6akDCbYeOZgCm5mEEreefU31rBB/BsJQ8q9EwI
QPAaO0J6L0amV2Fjnl/t5DEv0AlHHKpNVWaWsWIF7XAFEtgd0WtTJj+imQf+z4S4
GTGY3qWitfABdF7YcW3tSPqlXbSzX9EjBOb6c6cKSBVMu2usXuxOIoKrQmrxAMCe
j4mucc0VnGeQlAivPIYBHM6CVi7EWlAqFYQTlo3hDBpeH5QI//DDJfGIoKcjIwVE
RYu+Kii8y2SZLRsXaVxs53yTCA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:51:54 2026 by rpki-client