
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json)
Hash identifier: UpDKgHi29WtdqbwnsiSaATAYpjGKv17K4B1zfXTmd24=
Subject key identifier: F6:5A:4C:19:00:87:A2:7F:43:C5:58:93:6F:64:42:31:DF:6B:2E:2F
Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Certificate serial: 0947
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
Manifest number: 0BFF
Signing time: Tue 18 Aug 2026 20:30:25 +0000
Manifest this update: Tue 18 Aug 2026 20:30:25 +0000
Manifest next update: Tue 25 Aug 2026 20:30:25 +0000
Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: Ph9zYFOyi9SUAyGTNa9DHezm/+pBT1Q7dyrUzQ9dCCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375 (0x947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Validity
Not Before: Aug 18 20:30:25 2026 GMT
Not After : Aug 25 20:30:25 2026 GMT
Subject: CN=6a84c0e1-703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:49:bf:08:fa:52:5b:e0:9e:5a:97:49:2e:
41:34:79:f7:98:19:ad:4d:57:04:af:4c:44:e1:5b:
03:4a:3b:d1:94:1c:d7:9e:9c:64:06:d9:7e:d8:8f:
13:07:6d:ce:d5:60:8f:fd:83:9b:58:ee:92:aa:4b:
7b:52:93:fe:5f:30:22:77:b7:69:66:b7:d0:5e:8c:
ce:3f:73:4d:2d:f2:1a:49:c4:1b:1c:36:dd:ff:0d:
81:83:1f:29:9e:01:59:7f:08:13:f6:ea:2f:54:f3:
f4:e1:22:33:4b:36:5f:a5:e8:f4:8d:89:10:6b:93:
d4:7c:95:62:58:fb:0a:3e:d1:e8:5d:95:8a:32:5c:
03:6e:bc:3a:36:8a:40:d3:f0:12:49:cd:0d:81:64:
ec:81:02:72:e1:92:36:25:5a:cd:75:4e:49:15:17:
46:08:67:64:5e:e1:ef:6a:51:59:59:cc:5a:23:23:
d3:41:eb:31:1c:47:57:84:68:38:1e:19:65:f8:cf:
66:b9:c6:e3:20:d7:51:f5:fa:e0:a4:00:9c:13:ff:
7a:8f:33:5e:80:95:b4:1f:d1:e2:f9:f1:e5:e0:c4:
03:c7:a9:8c:22:ef:4e:40:67:3c:23:b1:1d:58:0f:
c8:da:8e:0e:7c:94:ea:d8:e1:97:1c:52:fd:a3:42:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:4C:19:00:87:A2:7F:43:C5:58:93:6F:64:42:31:DF:6B:2E:2F
X509v3 Authority Key Identifier:
keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:d0:e7:89:f5:fd:9f:4f:00:c8:5d:c2:12:dc:f6:89:f2:
e4:9d:84:18:1a:1f:6e:2d:9f:ac:b3:28:68:c4:b2:db:30:b3:
8e:eb:3b:d8:85:db:b6:87:f0:b0:53:55:e5:cd:ec:28:8d:02:
bc:b8:1d:91:ee:ca:67:1e:9d:77:ec:62:83:a5:81:bb:17:e6:
27:67:87:b1:02:89:e4:ef:cd:32:68:d3:ef:55:f2:52:b2:47:
b1:12:c9:af:91:49:78:8a:7e:00:c9:c5:c9:7e:b5:dd:09:d1:
69:79:66:03:5b:ac:05:7d:17:f9:00:e7:c0:e3:4c:ca:0e:9f:
bf:dd:f9:61:f9:4a:6e:1d:69:c4:18:cf:fb:bd:94:b6:e1:74:
a6:d4:00:f6:e8:b2:52:f1:73:e2:6b:15:d5:f1:b0:87:c8:c9:
79:60:7d:46:05:a9:05:56:a3:52:18:14:dd:d3:88:e3:f9:d8:
44:c2:37:92:0c:de:ba:a2:38:74:13:ab:c0:fc:50:06:57:38:
4d:d1:55:fd:71:c5:03:4c:04:1e:45:5c:b3:6d:17:c6:5e:d4:
65:fd:7f:93:89:ad:28:b0:12:fa:83:3f:41:42:aa:58:bf:7e:
6e:df:bf:7a:ac:09:69:22:95:0f:b8:0d:c8:4f:72:8a:35:f0:
2e:89:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:34 2026 by rpki-client