
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
File: BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json)
Hash identifier: xcPsvEPw+kh0Nu7m4UB0+OKejlfJuwfz/RGMVy65GDE=
Subject key identifier: E5:84:CC:30:02:7B:55:D9:84:C8:7F:17:77:D5:9B:3C:3D:3F:7B:97
Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
Certificate issuer: /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Certificate serial: 08EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
Manifest number: 0B4B
Signing time: Sat 28 Feb 2026 20:41:17 +0000
Manifest this update: Sat 28 Feb 2026 20:41:16 +0000
Manifest next update: Sat 07 Mar 2026 20:41:16 +0000
Files and hashes: 1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: 2CrX/VZQ2C5i+NU/QB55jq1VoXlKsK6zWAXn7dI7ftM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Validity
Not Before: Feb 28 20:41:16 2026 GMT
Not After : Mar 7 20:41:16 2026 GMT
Subject: CN=69a352ed-ee15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:2b:d0:08:c2:6b:f9:21:bc:cd:ee:ef:ba:
c1:69:5a:1b:2b:85:22:be:f9:88:ca:4b:8a:47:40:
e4:b8:c1:d5:b4:6f:4d:70:12:95:89:8e:95:a1:4e:
17:8e:9a:87:d1:48:01:33:de:29:8f:43:1d:b6:c2:
2b:86:73:34:11:3f:7b:98:a4:99:31:10:d6:c0:96:
d4:c6:4e:52:3e:c6:bc:5f:ab:b9:9c:0b:71:8c:09:
6c:2b:88:6d:2c:7c:b5:ed:1a:5f:76:44:14:7e:35:
7b:a4:5f:a8:37:ea:c8:cd:87:ab:3c:e6:50:77:f8:
7d:7f:65:71:66:0a:f1:54:b8:9b:01:21:0b:9d:89:
2f:fa:44:43:c9:27:78:01:67:51:3b:08:80:8e:ae:
b0:6c:6c:82:be:3f:e4:49:58:37:91:6f:e2:9b:ad:
94:d1:ee:4c:d4:8e:3f:ae:f0:69:c4:1b:9d:4d:58:
3b:f6:65:53:5d:35:19:dd:ce:4e:ca:15:d6:4c:70:
4a:12:09:46:f7:f2:67:ff:db:82:b7:75:01:30:0d:
41:0c:4f:64:d0:e7:d4:a9:74:7c:ad:ed:83:ba:0b:
ae:ab:64:61:0c:88:17:ff:b1:fc:6f:5e:8d:b7:d3:
f1:9c:47:9b:0c:1e:65:8b:eb:37:f7:00:a7:69:f2:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:84:CC:30:02:7B:55:D9:84:C8:7F:17:77:D5:9B:3C:3D:3F:7B:97
X509v3 Authority Key Identifier:
keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:f6:31:7b:bc:52:c7:33:d1:e8:f6:fb:c6:8f:8c:2d:ac:
f3:60:b3:6a:04:1b:45:aa:11:d8:ad:ed:db:1e:5c:63:c7:32:
85:14:94:23:b3:03:7f:9e:ac:ba:9a:8b:4e:a6:2e:aa:6f:49:
07:cc:9e:9f:bf:10:a4:19:ed:54:8c:91:06:b9:2a:42:03:73:
bd:1a:1d:9f:c7:6a:18:c6:26:25:80:6b:29:79:7e:4e:69:55:
13:1d:17:68:c2:94:5a:1e:16:94:28:d1:be:20:ec:6f:08:99:
9a:6d:38:4f:e9:78:74:60:b3:11:8d:42:13:c0:fe:16:c5:12:
c7:cc:35:2f:07:ef:33:f7:69:fd:3a:ed:d7:a6:a8:7c:13:c1:
f8:f4:fe:77:f6:53:dc:18:95:92:52:34:32:4c:80:da:22:a5:
4e:3e:5e:af:5e:52:01:c1:bb:4a:eb:ea:ee:15:b9:77:25:ee:
dc:09:9f:ea:d6:39:e3:c4:9b:79:10:e0:8d:bf:88:d5:c0:32:
a7:30:6f:32:0a:17:86:19:79:a0:3a:35:da:9f:00:5c:2e:75:
5e:9e:29:27:bf:b8:07:f8:2c:06:95:f3:0b:6c:87:14:d4:56:
7c:83:b4:e4:aa:25:ec:70:d0:e7:1b:96:25:16:1a:d9:84:3d:
20:51:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:50 2026 by rpki-client