
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json)
Hash identifier: r5eUBToIAq5B6RQ0ASDeRFIMLz6wEVwjrEaEP/ddApE=
Subject key identifier: 2F:A6:81:88:2B:3E:61:61:D1:68:CE:6F:14:0C:3C:DA:33:FE:68:59
Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Certificate serial: 0908
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
Manifest number: 0B80
Signing time: Sat 18 Apr 2026 20:11:27 +0000
Manifest this update: Sat 18 Apr 2026 20:11:27 +0000
Manifest next update: Sat 25 Apr 2026 20:11:27 +0000
Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: ube2jJD2cHnPX+rgCBsfkuSRAhhg9P7xyDztS+Mci4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Validity
Not Before: Apr 18 20:11:27 2026 GMT
Not After : Apr 25 20:11:27 2026 GMT
Subject: CN=69e3e56f-4773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:8c:17:a9:6c:c0:10:c3:ec:66:c2:e3:5e:
33:bb:04:6d:06:5e:5d:33:92:ea:4c:3a:2a:98:f8:
cb:60:56:ac:da:21:62:03:db:4e:6a:62:da:3b:67:
94:73:ca:fd:3f:8a:67:46:a8:61:ef:14:80:47:58:
3b:f7:02:c1:68:34:45:17:5b:e5:c3:a5:94:96:9f:
68:aa:2c:83:3b:32:6c:d3:d1:32:47:48:d2:2c:48:
74:bf:0e:9d:71:99:1f:1e:ce:14:8c:63:8c:d4:05:
2c:16:7a:f8:73:71:f3:fb:e2:68:a4:e5:2f:e8:e0:
75:67:97:e0:bb:ad:72:45:51:3e:67:53:f8:e5:fe:
dd:aa:7f:7f:13:61:82:9f:22:43:e3:1a:73:3b:10:
10:2e:2c:3d:9a:00:09:a2:8f:0e:50:f8:37:06:ff:
78:f2:4a:35:6b:7d:4f:e0:81:a9:59:32:e3:71:05:
e3:40:37:a6:06:ec:94:6e:b9:f8:c7:28:0c:6e:6e:
30:1f:05:36:b5:dd:e0:60:1b:fc:41:d4:79:c4:e9:
6f:ff:13:13:e0:e1:18:6f:63:5f:e7:81:46:42:c5:
e9:0c:c8:89:80:eb:42:49:10:c2:3a:6f:13:3e:d9:
ba:d8:ec:a9:ef:ef:03:3a:e3:34:89:66:e9:eb:b1:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A6:81:88:2B:3E:61:61:D1:68:CE:6F:14:0C:3C:DA:33:FE:68:59
X509v3 Authority Key Identifier:
keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:f4:40:7d:1a:0f:32:0e:3f:20:86:bb:ba:60:3e:0a:92:83:
02:04:b2:a6:f7:ea:76:ce:82:e8:e9:9a:58:7e:b7:80:6a:81:
e9:e1:86:e8:3f:4f:69:c7:8c:1a:08:91:86:76:b6:2a:58:15:
6d:ac:c5:97:32:34:ef:cf:9f:c9:63:3e:a2:b7:27:e7:7c:0c:
d0:3a:af:65:88:3c:01:4b:86:b8:51:66:b8:a0:e2:46:81:3b:
ef:d3:fd:70:c1:cf:28:70:e8:eb:54:5a:77:54:5f:68:6a:29:
c6:3f:f5:e0:18:b3:d9:6a:f7:45:1a:a8:f5:c2:33:43:21:48:
21:84:6f:48:a2:c9:06:33:7b:9d:11:e8:35:d7:2b:4b:dd:58:
ab:49:f6:ea:49:5a:6a:c7:15:6b:13:b9:fe:43:10:38:47:cb:
76:f5:47:38:93:2c:53:14:5a:ca:4d:9f:d6:ff:62:d5:36:f2:
81:f2:4c:53:7e:54:fc:0a:5a:87:df:cf:54:54:be:19:5e:cf:
30:74:7c:b9:5f:dc:78:61:a5:00:b1:8f:d0:8c:6c:4c:91:fd:
77:a2:d4:cf:36:15:11:42:12:d1:ca:d9:31:1a:90:c4:cf:1b:
e9:f2:a5:40:d1:04:8c:42:75:7a:78:c1:3d:49:75:39:6a:5b:
f4:cb:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:41 2026 by rpki-client