
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json)
Hash identifier: xnj016BYU4L2huP+H65UcmKsKTMKb+6RPTBr518KIfA=
Subject key identifier: A0:14:8A:07:82:59:DD:C0:17:55:C0:68:D0:DD:1A:E3:F5:BD:A7:E3
Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Certificate serial: 16F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
Manifest number: 16F8
Signing time: Sat 10 Oct 2026 16:39:47 +0000
Manifest this update: Sat 10 Oct 2026 16:39:47 +0000
Manifest next update: Sat 17 Oct 2026 16:39:47 +0000
Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: Q6nL/SvWbEu8CFL3RWp22fjtWUc795R38lBcrJwnY1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5880 (0x16f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Validity
Not Before: Oct 10 16:39:47 2026 GMT
Not After : Oct 17 16:39:47 2026 GMT
Subject: CN=6aca6a53-bc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:28:ee:04:63:6d:62:df:61:fd:ae:4b:46:
37:dd:79:b0:c4:0e:0b:5a:e0:d6:f6:9a:12:28:4b:
24:e5:96:9f:81:aa:d4:2c:ef:3b:b7:d3:db:d1:f1:
29:39:f5:05:56:7d:0a:81:e7:32:b3:d6:30:78:dc:
3a:b5:b5:54:fa:5a:11:aa:cf:e2:e3:d3:5d:f3:54:
97:2e:17:35:e9:83:8d:3f:ad:7c:de:23:91:8c:9d:
85:25:20:21:0e:f8:b2:6f:1a:11:4c:6a:15:1b:40:
26:9f:09:7a:6e:6f:d1:f1:40:c8:04:5c:c5:13:c9:
00:b5:52:20:ee:58:95:16:55:c4:8d:87:dc:6a:21:
e6:8d:da:51:53:db:0f:89:11:e3:41:77:1e:e4:5e:
58:6e:a3:c7:6f:26:68:f9:4f:b6:f0:e2:7c:af:5b:
b1:28:32:68:86:fc:3f:63:1d:21:dd:d7:a6:8c:1c:
fb:78:b5:4d:ee:e7:02:7e:86:76:6a:0c:d2:4f:ac:
d4:94:dd:c9:43:fc:54:ad:f3:96:c1:80:76:19:a8:
b6:7d:da:6d:98:b8:2d:41:3d:23:66:8f:fd:ae:23:
a1:23:e3:d5:33:9f:c8:69:ed:c0:04:d9:9e:b2:5a:
68:9d:6d:72:32:33:72:a1:0b:5c:d5:ed:4e:da:45:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:8A:07:82:59:DD:C0:17:55:C0:68:D0:DD:1A:E3:F5:BD:A7:E3
X509v3 Authority Key Identifier:
keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:1e:92:56:34:ed:5a:28:0d:f9:33:6d:72:9a:27:fc:cb:7b:
3d:52:97:47:c7:f2:1b:65:da:4e:fa:f7:07:e9:83:40:02:fd:
e0:cb:92:3c:f5:89:05:84:46:0d:fb:ef:9e:b0:9a:e5:0b:ba:
03:18:27:29:26:ca:6e:2e:b5:81:47:df:9d:d5:27:b7:08:5d:
48:ef:3b:ca:a0:98:b5:c4:7e:49:25:a5:1e:9d:18:f8:b7:66:
47:d8:92:f9:d6:fc:da:42:48:04:0a:91:7c:fe:7b:eb:ce:a4:
98:cc:48:2e:e7:1d:fe:f1:a4:63:17:f5:f2:1c:55:de:5b:ed:
ad:63:4f:69:59:c9:d9:99:73:40:21:de:6e:3e:76:50:08:ff:
b6:ea:c3:26:1c:c0:64:90:8f:72:cb:ea:4f:23:53:55:e5:1b:
fc:bd:c6:42:65:00:98:8f:3e:64:1f:c9:30:5c:60:53:42:b0:
23:91:2a:1e:20:f6:ed:fa:7e:55:41:18:f3:16:03:7a:1a:53:
3f:74:96:b5:06:d1:36:d7:ce:ec:09:34:f1:3d:3e:bd:b3:e6:
62:16:e8:a3:b9:34:29:53:3a:87:88:70:fb:a4:ed:ab:5d:76:
fa:97:fc:37:88:e8:5c:32:c8:e4:05:5d:ec:e8:fc:44:97:c3:
dd:99:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:36:29 2026 by rpki-client