
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json)
Hash identifier: ES0rgM+hsTw0ypJkdQ0FMqgNtoPU0C+zh0emSbw78dI=
Subject key identifier: 24:7E:0A:1E:34:4C:4A:9F:52:80:BB:2C:8A:37:B1:95:64:22:0A:10
Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Certificate serial: 1683
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
Manifest number: 1683
Signing time: Sat 28 Feb 2026 16:45:46 +0000
Manifest this update: Sat 28 Feb 2026 16:45:45 +0000
Manifest next update: Sat 07 Mar 2026 16:45:45 +0000
Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: Ls3MNo9rBErtfmdgB2OvCfIdYYg3JQXJEc1v6yDBhp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5763 (0x1683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Validity
Not Before: Feb 28 16:45:45 2026 GMT
Not After : Mar 7 16:45:45 2026 GMT
Subject: CN=69a31bb9-64d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:35:16:0e:91:97:56:3f:74:1d:88:ec:0a:
7f:15:e5:68:58:2a:98:b7:ae:e5:09:d2:cb:a5:44:
3b:a9:0d:f6:c4:10:14:35:bc:23:a3:44:b6:76:2c:
49:d2:af:d8:f4:2d:f9:23:db:c8:80:d9:a8:b1:92:
6b:f7:1d:27:76:23:70:be:d8:f2:c0:a0:33:ac:3e:
eb:cb:4f:65:56:50:72:75:4a:a7:1e:82:9a:c4:15:
6d:4c:4b:cb:57:9d:d3:ff:cb:6d:6c:13:b6:cd:5a:
f9:0a:e9:2f:34:11:4c:71:14:63:b3:53:d7:8f:fc:
93:53:c2:31:c0:8c:f6:26:a5:26:36:ee:17:3d:a8:
0c:17:e4:a1:10:2c:e3:22:be:dd:40:77:39:ea:1e:
69:c0:f2:74:9e:c0:52:37:8a:8b:95:f4:44:30:c7:
5c:15:cb:ce:1a:b6:fa:4e:e5:3d:16:4f:c5:c5:96:
bb:5e:e4:db:da:a1:26:9c:a3:99:0b:b6:8d:02:1d:
4e:1e:de:60:0d:d3:b5:8e:57:5a:d3:fb:14:41:69:
6e:86:9d:fe:7f:af:12:90:b5:23:9b:da:ab:7e:de:
c3:c3:35:df:fa:cf:82:25:46:57:cc:58:19:f0:a8:
e7:88:23:3e:e0:24:82:8d:b0:f0:89:83:ba:2d:bc:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:0A:1E:34:4C:4A:9F:52:80:BB:2C:8A:37:B1:95:64:22:0A:10
X509v3 Authority Key Identifier:
keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:25:c6:e2:79:84:39:5b:4e:39:9d:e3:6c:f0:c8:fb:e3:67:
82:aa:1e:9e:52:3b:0e:43:0d:03:15:cd:f5:dd:bc:6a:60:09:
4c:1d:8d:d8:13:ae:22:33:22:28:1d:b4:a8:e4:94:e5:17:d6:
e3:50:de:81:77:85:a8:82:49:96:2b:bb:6c:fb:f8:a3:1e:33:
cb:8a:00:f4:14:d3:34:b3:e2:20:af:5c:ff:c3:07:1e:1c:b6:
29:da:bc:d7:cf:1d:cd:fb:da:d7:a0:83:6a:a4:f2:59:3b:2a:
6f:28:46:bc:3c:5f:a9:3e:8b:22:8f:38:7b:0a:c8:05:d5:60:
43:a2:04:cf:90:05:d2:2d:8d:df:ad:03:00:e3:50:c0:18:c8:
e6:e3:4b:e7:fd:71:e2:4c:b1:05:f4:4a:98:5f:6e:03:43:bd:
8d:6b:54:7d:14:b0:bd:57:ba:16:82:d4:71:bd:17:51:d2:4c:
4e:c7:55:ad:f0:ae:92:7f:a1:2b:1e:25:b7:17:5e:d3:53:33:
95:20:19:87:fb:3e:27:ce:08:6e:2c:b1:97:42:a1:88:4e:f9:
37:ab:1c:8c:e4:69:d7:75:68:d9:89:ee:b9:e6:04:64:92:45:
7c:0d:62:2e:6f:4e:8b:b8:01:ab:62:ef:27:75:a7:bb:e1:e9:
ca:7f:c9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:15:33 2026 by rpki-client