
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json)
Hash identifier: G2Vr36OTOyGNESGrBvI10Om2Pbx5N7rs0hM2mKYj478=
Subject key identifier: 6B:55:2F:4F:60:58:EE:01:81:16:DF:53:C5:34:B3:59:AF:AD:99:04
Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Certificate serial: 0B4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
Manifest number: 0B30
Signing time: Fri 12 Jun 2026 19:17:54 +0000
Manifest this update: Fri 12 Jun 2026 19:17:53 +0000
Manifest next update: Fri 19 Jun 2026 19:17:53 +0000
Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: FFzdX4OBIW9WuKvJJRTwfsYA1qpEzF9HBqSm/C379lA=)
2: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=)
3: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=)
4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2891 (0xb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Validity
Not Before: Jun 12 19:17:53 2026 GMT
Not After : Jun 19 19:17:53 2026 GMT
Subject: CN=6a2c5b62-e899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:70:4c:4a:f8:97:73:99:3a:93:e4:f6:d4:
17:34:2e:3c:ce:8a:5e:09:5f:db:d9:e9:34:3d:25:
f1:ae:6d:90:de:c5:77:f8:91:fc:13:5c:d5:d1:36:
f8:da:7a:ef:ac:f6:8c:0b:31:d7:9b:bc:9e:2d:0d:
ba:af:e5:8b:89:42:c3:e9:44:0d:56:a9:76:20:02:
fa:32:71:bd:3f:20:d4:b2:e5:cb:bb:0e:bf:b9:3a:
d7:d7:67:02:ad:a0:87:01:38:8a:c4:77:eb:21:e2:
c8:94:b9:cd:2a:9a:e4:79:8e:ae:84:b3:d6:68:d7:
79:9e:15:46:ba:0b:61:bf:30:ec:71:23:9f:fd:16:
cc:ab:57:2c:5e:a0:fe:1f:7a:2d:ba:d1:69:df:c3:
2d:13:1f:87:3c:93:c7:bd:31:a4:ab:40:9c:71:b4:
6d:43:29:8b:cf:5b:c6:58:fd:ec:a9:64:21:82:88:
e1:ae:1f:a6:ed:7e:90:f0:b4:e7:73:2b:0b:0b:20:
b0:cb:04:cd:01:45:41:13:45:72:8a:73:3f:fa:8e:
d6:3e:6e:3d:f1:e4:fa:b8:fd:65:70:85:b7:c0:a3:
6b:de:50:cb:21:39:e2:44:8b:d5:c8:a1:7d:39:e3:
8e:20:73:aa:3f:40:75:d5:3a:b5:ba:68:60:d9:94:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:2F:4F:60:58:EE:01:81:16:DF:53:C5:34:B3:59:AF:AD:99:04
X509v3 Authority Key Identifier:
keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:99:d3:bc:66:41:b5:c6:43:81:f1:4a:14:6b:90:79:73:ce:
9e:f4:a2:d1:e2:b3:a3:49:9f:12:90:e1:7a:66:39:4d:db:a1:
98:eb:8f:dd:9f:fe:dd:00:d7:1e:ad:12:49:f4:97:75:60:71:
3d:47:46:be:6d:a7:91:97:48:37:ac:f2:d2:62:5d:e8:12:55:
d9:82:c9:ff:c7:c0:4b:d3:6c:01:e2:bf:bd:1d:d6:94:ae:8a:
35:b9:e5:f1:63:8d:0e:4f:be:b5:35:98:e9:c4:42:eb:a8:a4:
aa:a7:a2:29:47:22:10:cb:eb:cc:8e:a2:c1:5b:74:47:11:a7:
9e:12:31:af:da:f3:d2:c8:66:9f:38:4f:8a:8e:9e:f5:34:45:
fa:d2:cc:85:b2:ac:7a:6e:a8:c8:d0:b9:6f:03:a6:ee:56:b0:
12:34:c5:59:1b:6e:b2:40:a4:a6:5d:16:3b:1b:e0:31:31:6f:
7f:6d:54:24:06:44:27:a0:c5:84:5e:c8:95:ba:c3:61:21:af:
b4:92:e7:f5:c8:57:b6:d1:42:55:8e:ce:31:3d:81:62:e4:6a:
60:cc:74:e5:65:7d:ff:23:e6:8e:65:23:cc:e0:91:49:1f:88:
98:15:20:c0:1f:43:33:e1:d8:e2:e0:eb:56:f0:db:27:28:2c:
86:f8:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:56 2026 by rpki-client