
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json)
Hash identifier: QQ9vxv+02xtZb2v2WpIu7qjpT0MY9EeEmG8hch/mAZQ=
Subject key identifier: 49:88:54:66:AC:56:F0:B0:4D:5F:F6:34:B0:5E:6A:A2:11:A1:41:63
Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Certificate serial: 07D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
Manifest number: 07CE
Signing time: Sat 28 Feb 2026 21:47:41 +0000
Manifest this update: Sat 28 Feb 2026 21:47:40 +0000
Manifest next update: Sat 07 Mar 2026 21:47:40 +0000
Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: yK/UF4WVuGO5nEnVcNGq3EXfKE+cHZPyYml7PZ7HLIE=)
2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: 9PkY3r845C6Gg3gR8AKgajQ8wsvmdGvtBQ6YZXFN9yE=)
3: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: D1qcgVGZql5RrIKafCkI4bM9fu5CZK6G546UdqksHKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009 (0x7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Validity
Not Before: Feb 28 21:47:40 2026 GMT
Not After : Mar 7 21:47:40 2026 GMT
Subject: CN=69a3627d-64c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d4:03:6c:2a:c0:fb:13:25:4d:37:16:40:af:
37:c5:78:f9:9b:0f:32:a0:56:65:c2:51:b3:eb:fd:
47:82:25:07:47:28:90:1e:de:3a:35:6a:1a:43:58:
c9:a1:51:6f:36:d8:bb:09:40:00:14:ae:76:fd:aa:
76:9d:3e:56:6a:7a:f8:d2:ee:ac:92:05:46:dd:87:
01:c6:e2:2c:bc:47:f1:0d:61:ba:d3:c7:3f:c1:4b:
7c:31:51:d4:71:2d:73:dd:f1:1f:f7:23:60:9a:a9:
b0:7b:be:d4:2c:bf:29:4f:38:f4:76:44:34:fb:3a:
a9:a0:3f:87:80:09:8e:1c:7b:cc:57:ac:77:48:8b:
64:51:cb:81:66:e7:eb:b2:70:3c:c6:fb:c9:38:d9:
66:78:43:98:ec:fe:10:29:1f:5d:bc:81:4e:81:a3:
ad:9a:cc:36:99:b1:3e:c1:25:a6:89:9e:8d:a3:03:
c4:2b:29:25:aa:18:64:7f:c0:c0:8c:58:88:13:46:
98:f3:91:53:ee:3f:65:e9:3c:53:ed:20:7c:6e:e7:
38:dc:ea:a4:29:ad:09:bb:1d:26:31:1d:ec:a8:57:
c3:ad:96:e4:ae:f3:8a:45:11:06:f7:fb:1b:e5:2c:
00:ee:be:68:44:5d:48:84:e8:03:4b:60:7d:2c:f5:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:88:54:66:AC:56:F0:B0:4D:5F:F6:34:B0:5E:6A:A2:11:A1:41:63
X509v3 Authority Key Identifier:
keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:eb:f6:90:2d:54:66:0f:16:a1:69:3d:91:31:70:20:d0:ff:
fb:d4:85:3f:4a:7a:19:9e:f7:9f:bd:69:e7:60:54:9e:03:c7:
d1:75:49:11:f2:d7:e3:e0:97:88:4c:2d:75:c8:c8:54:9b:0b:
d4:c2:60:37:76:05:73:49:5b:33:7c:ec:5e:eb:0d:1f:b2:1b:
d1:89:fe:f1:4f:7c:64:63:85:dc:41:c7:b8:dc:4c:76:1d:36:
88:ef:68:e5:7b:41:19:89:65:d8:51:86:6c:a4:76:1d:ea:0a:
a2:7d:3b:9b:c7:4e:33:34:41:3a:1d:8d:f0:96:2c:e9:a1:68:
77:81:b6:59:35:af:fc:10:b7:16:fc:23:36:2b:d8:cb:1a:d3:
14:81:47:eb:0a:a8:e1:89:be:1f:c9:b6:d8:a7:88:6a:94:70:
be:ce:55:19:f1:c5:1e:a9:a4:f3:46:56:10:90:b2:72:c2:43:
fc:07:28:8c:14:e5:f3:b2:60:76:9a:48:86:cf:0e:da:7d:eb:
ea:10:59:0d:a7:10:9f:a6:59:8f:0c:6f:a0:92:fb:4f:bf:1c:
06:93:6d:28:3b:32:9c:ce:d3:2c:d6:67:82:81:5a:d2:c0:44:
2a:db:77:b7:ba:25:b3:65:12:ba:bd:d0:b0:19:d1:7f:87:f0:
c7:dd:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:03 2026 by rpki-client