
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json)
Hash identifier: pQt6g335aiR2aW8P8LHNbHijpx6RjmnS+tHaOxnNUPc=
Subject key identifier: C6:F0:D3:86:1C:94:50:D5:EB:80:50:E1:AD:40:83:DA:52:7A:89:91
Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Certificate serial: 0918
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
Manifest number: 0BA0
Signing time: Wed 20 May 2026 20:18:24 +0000
Manifest this update: Wed 20 May 2026 20:18:23 +0000
Manifest next update: Wed 27 May 2026 20:18:23 +0000
Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: sGVAh/R1rEeblxgY1lHO0c/eF67Td7DuWQw3Yhy/B+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2328 (0x918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Validity
Not Before: May 20 20:18:23 2026 GMT
Not After : May 27 20:18:23 2026 GMT
Subject: CN=6a0e1710-c2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:87:92:f6:69:3f:cb:8f:6a:81:eb:0a:bf:
87:fc:f5:36:f0:ee:17:94:4f:71:f8:01:b8:ba:21:
5c:20:fb:97:e9:36:44:d5:bf:86:97:84:a4:ac:f3:
81:44:de:64:1b:1e:5d:21:d1:dc:54:04:e5:f8:1b:
7d:11:b6:4e:c0:d8:d9:55:b8:57:a5:03:5c:f8:88:
5a:fc:bb:dd:fb:94:18:7e:16:81:07:1f:87:55:d9:
22:a8:03:2e:b8:5d:f8:f2:38:da:d7:b7:c1:24:ba:
b3:fe:a0:9b:5d:b3:70:b6:c7:3a:6a:43:db:06:15:
62:ff:85:23:bb:f5:33:7e:e7:10:0e:00:46:cf:c2:
25:0d:dd:57:c2:1a:0a:3c:0d:56:ef:ee:7a:d1:3f:
a1:54:dd:f3:ba:1b:0b:9d:4e:9f:6c:d0:10:31:53:
b9:10:af:f1:38:a4:3c:f8:0a:2f:2b:62:73:ef:a0:
e6:99:dc:ef:f2:9f:5e:0d:2b:82:53:88:e3:68:65:
dc:1e:e6:31:15:5a:f5:2f:fb:5d:40:d6:3a:a3:d7:
a0:9d:39:8c:1b:70:5f:a5:c0:f3:e9:7e:74:7d:17:
19:6b:fe:8e:52:cd:c4:26:71:57:cf:e6:29:e4:48:
75:ec:cb:b3:4f:19:62:06:d9:18:3e:a5:3b:54:fe:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:D3:86:1C:94:50:D5:EB:80:50:E1:AD:40:83:DA:52:7A:89:91
X509v3 Authority Key Identifier:
keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:b0:50:a5:59:eb:31:1c:f5:bd:2e:d0:bb:7e:ad:e8:de:8e:
24:cd:c4:ca:22:6c:24:d6:89:dd:b5:f9:db:cb:a0:9e:b5:96:
40:40:de:ec:55:6c:e3:13:aa:f5:af:9a:bd:52:ba:b3:e7:57:
13:03:db:69:72:c2:98:1b:9a:95:c6:51:c9:27:fb:42:ce:ce:
c8:98:57:6d:3d:74:e7:e8:a5:3a:d4:9d:da:f7:61:23:99:48:
89:04:78:a1:21:86:58:fd:c4:32:56:7e:b8:4a:ed:8c:8b:62:
c1:35:7e:97:3c:f4:07:1b:34:d1:0f:a8:67:28:7a:1a:e0:3e:
39:bc:8c:df:9b:11:d2:42:bc:12:39:b2:85:e5:fd:3f:69:1d:
1f:31:ca:2e:a4:22:65:84:2a:a2:ba:64:58:48:6c:3c:f2:e0:
77:1e:5a:10:2e:ec:78:29:c3:67:db:7a:6c:56:fd:c5:9c:07:
90:c7:d8:dc:ed:eb:45:51:ce:3e:65:4a:c7:98:a5:cd:31:8b:
22:19:c3:b9:15:0d:ac:65:a8:ad:50:72:08:bc:c3:f8:0e:67:
56:44:51:b9:59:1a:07:7e:da:5b:61:c0:3b:b3:48:ea:bc:55:
79:e6:31:b6:8d:b6:8f:fc:65:e0:e0:7e:70:cb:15:53:5e:8b:
91:7a:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:30 2026 by rpki-client