
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier: UsRIzP+/LHNEeASlkRj/3/bjnACBpPxqMgNBoZ3iqXE=
Subject key identifier: 52:B2:9D:95:19:DE:0B:4C:1D:17:2F:2A:19:91:2E:BD:AE:A3:F9:EE
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial: 08FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number: 08CB
Signing time: Wed 14 Oct 2026 20:53:36 +0000
Manifest this update: Wed 14 Oct 2026 20:53:35 +0000
Manifest next update: Wed 21 Oct 2026 20:53:35 +0000
Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: u/E2ltkTprk6mf32a7ACz3XtpPodfITjBRLWhB4mdIs=)
2: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: MCGnucdcznK4z6pNnNE6+XPxuPG/TfxwroCFCdKryF0=)
3: A576C5087C3311F1890EBC415EA30FBC.roa (hash: OOm/rpCNOVEzbs5MbTS+KE9MkYUOeHrbZ+HUs/7R0Ao=)
4: 9D0A5048B0B711F1A935775B6511F970.roa (hash: TqqLO6ohhVV1eoFj1YiCKqeJJ+gDVg7wIfsfChMSkuo=)
5: 6228B5D67C3311F1A4365A405EA30FBC.roa (hash: lm6a6sSlcGo7UiIokAJc0to+ipQDBzDwod6EvR7ZUXs=)
6: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: GhfbbBIsZM+E4EuVHL/xJ2Fu2eRbGFvM+U1LBFCjiS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 20:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Validity
Not Before: Oct 14 20:53:35 2026 GMT
Not After : Oct 21 20:53:35 2026 GMT
Subject: CN=6acfebcf-1e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:ac:b6:63:95:6c:01:79:bb:ff:5a:9d:03:
5d:4a:58:a1:ee:5d:f6:1b:45:f6:d5:79:aa:b7:c6:
1b:f4:74:f0:18:d2:1d:2f:67:c1:62:01:3f:7b:9d:
e0:02:e4:6a:71:eb:3a:98:a0:5d:13:89:46:fe:ca:
e5:6f:ee:e2:3b:5c:2b:58:48:54:c3:da:14:9d:67:
8a:a7:8c:02:0f:ec:d0:09:0c:33:4e:62:94:a6:d2:
a7:00:dc:33:38:cb:4c:e3:70:45:d6:7a:e7:d9:2d:
9d:5d:8d:7a:8d:e5:13:ff:7d:a3:3d:07:a6:10:db:
11:24:fd:75:4d:eb:42:b7:98:c5:90:e4:c1:d8:ff:
92:d2:dc:90:88:f0:17:e8:cf:4e:c9:3a:23:92:e4:
65:2d:aa:5c:6b:a5:74:46:9c:ad:12:08:26:94:af:
65:cf:29:5e:b6:6c:f4:12:d1:7b:07:31:b4:aa:ac:
e0:b3:85:ec:9d:28:ff:f5:ca:9e:c0:2f:b6:67:34:
38:f0:92:63:77:10:5f:21:30:fc:50:01:2c:c3:4b:
e3:10:e5:02:7d:90:96:38:96:22:68:3c:d5:be:5d:
00:b8:d3:8f:58:82:f2:ff:4f:4a:60:f1:a1:8b:f2:
cb:f8:bd:2e:ca:30:dc:aa:77:8a:17:67:f1:38:13:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:9D:95:19:DE:0B:4C:1D:17:2F:2A:19:91:2E:BD:AE:A3:F9:EE
X509v3 Authority Key Identifier:
keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:f4:f1:06:21:03:e1:28:1f:74:b1:97:71:01:fd:90:81:
5e:51:6a:31:a8:09:8e:36:21:14:90:75:8a:f0:9e:a5:ac:2f:
7f:36:b4:b8:01:66:8b:71:ee:57:59:74:1d:94:cc:40:dc:4a:
3c:ea:c7:0b:67:5f:ab:9c:4c:ef:01:b5:74:c5:f2:59:ab:33:
39:01:cf:9c:ec:1e:0e:42:0a:5a:55:a3:9c:19:51:12:b8:b0:
9d:78:3f:5b:bd:33:2b:ff:9a:ed:1c:4a:1f:50:d6:71:f3:80:
be:79:6b:db:3d:93:68:32:c5:b4:a2:8e:d1:78:dd:40:11:46:
b7:85:5a:60:13:50:65:a0:95:67:24:14:47:ae:59:25:2f:d9:
7d:87:40:ee:e5:f0:5e:eb:77:50:11:3d:73:16:1e:0c:a1:5b:
09:f0:2d:fd:4d:a0:4e:08:ec:7d:a7:ca:b9:c2:fc:d4:34:70:
da:34:28:44:f2:fa:77:5a:f9:4d:f9:cf:1d:a5:b4:64:9d:78:
f0:62:17:09:da:a2:d9:ed:47:c4:7b:1b:8c:e5:05:f7:1d:d3:
82:44:96:91:31:16:ec:fa:af:3b:dd:91:ec:ae:da:cc:dc:02:
41:fb:31:12:4f:f8:c4:25:0f:55:df:7d:62:af:72:b5:d8:31:
30:7c:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:51:00 2026 by rpki-client