
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json)
Hash identifier: zhXGmSe6ZCiHJ2enTKuojMDjIqK1j2+92zkNVNyhvD0=
Subject key identifier: 0D:9F:96:4B:31:AD:3E:6D:1A:35:BC:1D:C4:43:F0:BA:32:D2:C8:C8
Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Certificate serial: 082E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
Manifest number: 081F
Signing time: Sun 26 Jul 2026 21:51:48 +0000
Manifest this update: Sun 26 Jul 2026 21:51:48 +0000
Manifest next update: Sun 02 Aug 2026 21:51:48 +0000
Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: uUCRvChrqc0vcxn5+ks7VPUit8zNHtz6JKPM/PLR1SA=)
2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: cVjs8CCmJom1l0o4wFC6QkXwpn/JOlzgY1YvrYV5KoA=)
3: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: VwwT7RQ/qXGeiFBkCB3JtIL1WCq5yNf8aGSsCVk++yQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Validity
Not Before: Jul 26 21:51:48 2026 GMT
Not After : Aug 2 21:51:48 2026 GMT
Subject: CN=6a668174-2653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:f9:9f:f9:c6:40:4a:aa:59:67:ad:77:26:
0c:a7:c2:11:af:39:8a:d5:6c:03:10:bb:a7:53:21:
e2:a6:56:1e:bb:92:d1:90:90:d2:45:56:d3:65:d5:
da:ce:7a:96:42:c8:18:87:81:6f:72:6b:e5:cb:38:
69:ca:f4:ac:86:b4:94:42:d4:d0:9e:0a:4a:67:aa:
8e:40:06:cc:aa:a4:0f:e4:43:42:f3:9a:d7:5f:90:
c6:32:66:72:ee:f4:cc:b5:3e:0f:6a:bf:fc:70:df:
29:e6:f2:8c:72:b2:33:78:ba:f3:5e:74:11:56:fc:
fa:25:f4:db:12:4e:34:e6:4e:42:13:ea:90:21:bc:
34:2d:67:05:31:70:a6:04:f4:22:60:9c:26:ce:92:
f0:da:41:78:34:16:d6:42:07:36:6b:20:ae:15:34:
18:28:2f:f7:0c:96:9a:74:73:2e:58:4e:8b:de:04:
fa:51:a5:e9:01:c5:84:4d:dc:3f:a3:84:87:b7:ed:
02:6e:92:2f:ae:9c:77:3c:9c:96:32:b7:c8:54:3a:
b0:57:4f:1b:65:84:ca:ac:bc:e0:9c:a2:ab:c8:43:
12:9c:4c:82:f4:ea:1a:64:75:e5:c8:13:c3:01:15:
d3:d7:bf:21:82:a4:1a:90:af:09:07:f8:2f:8d:3f:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9F:96:4B:31:AD:3E:6D:1A:35:BC:1D:C4:43:F0:BA:32:D2:C8:C8
X509v3 Authority Key Identifier:
keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:d6:76:d1:4c:d3:81:53:5e:eb:81:24:fc:48:e9:27:fa:
1a:3a:d7:83:bd:d1:ea:51:9a:2d:81:c8:21:b0:61:03:0b:41:
83:9c:f9:75:43:99:3b:f2:c2:60:dc:06:fe:f2:90:21:e3:eb:
bd:80:1d:b2:eb:fa:4f:b9:71:ac:a5:c7:0d:cf:73:aa:33:1b:
bc:64:a9:0c:21:78:8d:07:6b:ab:84:97:ce:7d:f5:40:2c:c8:
f0:39:a3:1f:da:c0:4e:1c:e7:6f:f1:2a:29:fd:a3:92:8f:bc:
09:c1:39:3c:c1:8c:71:5f:d0:40:a7:9f:6d:1e:d8:36:44:fb:
88:2d:d5:8e:00:ac:43:7e:91:66:e8:44:6e:60:9a:df:0c:e3:
9b:98:68:4d:91:77:07:16:e0:e7:d7:2a:8f:f8:9e:55:56:6d:
0c:c5:c9:1c:8e:a6:74:ef:65:03:5d:34:c6:a1:54:48:51:a9:
8a:f4:13:32:35:c7:a1:ca:a2:b5:c7:fe:92:44:a8:32:aa:c6:
83:83:04:11:ce:45:2c:b2:5f:2e:51:a4:80:1c:81:9d:92:02:
3d:1f:2e:c2:14:a9:69:7e:da:97:07:f6:84:e0:de:9a:6a:0a:
43:56:32:5c:32:92:c3:18:ce:c8:cd:18:45:92:c2:e0:95:ff:
3a:02:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:13 2026 by rpki-client