
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json)
Hash identifier: 8LuHJYQALu89bbOjiwZElbzSGP5vIEzjBWT1XE2bFe8=
Subject key identifier: 80:46:B7:C0:AD:DB:EA:4D:CC:67:65:83:31:14:F3:27:FC:A2:97:19
Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Certificate serial: 0B62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
Manifest number: 0B47
Signing time: Tue 28 Jul 2026 19:30:23 +0000
Manifest this update: Tue 28 Jul 2026 19:30:22 +0000
Manifest next update: Tue 04 Aug 2026 19:30:22 +0000
Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: gtSZ6f0RNauxoXYrc6Vi8MmV6oZ4UYHQqCSiavF/YEs=)
2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=)
3: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=)
4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2914 (0xb62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Validity
Not Before: Jul 28 19:30:22 2026 GMT
Not After : Aug 4 19:30:22 2026 GMT
Subject: CN=6a69034e-08e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:22:5c:ac:7a:21:39:62:fa:5e:54:08:f1:51:
70:1d:5c:ae:c2:60:e1:3d:1e:d1:d5:82:a4:d6:a3:
95:18:9c:2b:9e:53:d9:5e:e8:ff:74:90:1f:e6:de:
1b:e6:54:83:0a:92:64:dc:59:79:b6:3b:6a:a8:21:
12:9f:cb:a1:e1:97:a1:98:07:73:87:8f:f0:ce:ca:
94:bf:bd:50:cb:af:ff:d1:15:0f:42:81:c0:5c:15:
81:8c:d8:8f:4c:bc:64:f4:6b:67:18:ca:c6:b7:f3:
78:0a:de:40:14:48:62:a8:eb:30:e1:d1:2b:60:ff:
25:c8:93:31:21:5a:f5:18:c5:b4:8a:d1:7c:cf:6d:
23:77:03:f0:8f:09:f4:a3:81:cb:38:2b:b0:39:8a:
6a:c7:36:3e:97:75:9f:64:e7:45:04:c6:f4:3a:5b:
a6:b1:40:6a:94:28:1b:15:33:31:03:0a:77:44:26:
f0:e0:9d:19:04:ce:2d:89:91:33:c0:45:30:e8:50:
17:c2:63:a5:7a:09:b2:02:e5:39:d0:43:20:44:4e:
79:bc:b4:03:97:0e:e9:27:5a:e1:cb:b5:66:2e:dd:
83:ea:1c:fb:5b:48:00:95:83:a9:90:b7:56:ed:4b:
ba:2e:06:97:c9:39:dd:ba:89:b3:06:5c:2d:40:ce:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:B7:C0:AD:DB:EA:4D:CC:67:65:83:31:14:F3:27:FC:A2:97:19
X509v3 Authority Key Identifier:
keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:24:73:96:cc:31:a7:8d:5a:61:4b:cd:04:83:93:07:f9:af:
10:e3:e2:57:68:7b:f1:89:09:04:07:cf:1e:4b:22:67:11:d1:
b7:40:a0:b7:9a:16:b0:a5:fa:06:ae:fa:ee:c8:ae:ea:f2:78:
d3:23:c8:d3:11:a8:fa:57:82:c5:b9:2d:02:72:92:98:f4:f4:
5c:39:ea:20:8a:f4:c9:ae:30:be:e6:9d:4c:6b:ff:e0:40:d5:
78:b8:39:0f:ea:f6:a6:08:2e:12:bb:18:be:46:0e:a7:33:c3:
21:02:81:ad:0f:ef:52:d6:1d:65:ed:ce:50:21:6b:ae:8d:a0:
ed:b8:56:93:53:f6:72:8e:3e:83:b5:b6:7b:df:1c:d9:1a:3a:
cb:ae:d9:7c:20:46:b3:a3:b3:55:0f:7a:bf:64:7c:8b:91:bc:
c1:5d:68:fb:07:44:f7:04:56:ca:8f:5a:d9:68:94:5f:12:89:
50:af:4d:12:90:43:7a:80:f3:2c:30:a1:30:da:47:b0:1f:43:
ce:50:cf:92:60:2b:ab:2a:be:2a:15:48:11:4d:77:91:8b:fa:
8a:a4:30:97:9e:ab:1d:02:66:c8:28:e0:77:20:72:70:9e:bd:
91:ab:0d:83:11:7b:7c:1e:ce:b9:3a:e4:03:35:4d:36:3a:ea:
80:7d:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:04 2026 by rpki-client