
$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier: qAFv6WiL6bOE5ZYEG1C4hcm2nrus0VGMt2kMBqAEQmY=
Subject key identifier: 54:07:1D:31:92:09:3A:CD:CA:46:CA:81:D1:98:E7:1A:DA:39:B3:0B
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial: 09B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number: 09A5
Signing time: Wed 10 Jun 2026 20:00:22 +0000
Manifest this update: Wed 10 Jun 2026 20:00:21 +0000
Manifest next update: Wed 17 Jun 2026 20:00:21 +0000
Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: TuaL1LnsZUEZObem/+c5BSTxpIio8r1dk6HAhIJG7W0=)
2: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: F7WyOekFgI8ivePs6ZQwLbNz0QkuTR1HhVS0Z6YFZWs=)
3: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: CYtTamBw2WXxPcIM3rrSk3dBYaMWIxNwfk91+jxjXp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2486 (0x9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Validity
Not Before: Jun 10 20:00:21 2026 GMT
Not After : Jun 17 20:00:21 2026 GMT
Subject: CN=6a29c256-9a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:72:2c:80:3e:41:48:d7:19:de:f3:93:1e:
48:4d:85:9d:a9:5f:71:53:aa:73:d2:c4:8b:22:8d:
4a:7d:31:44:7d:38:15:c9:4d:6e:45:b1:23:b8:67:
26:c6:b0:8c:8b:d0:dd:46:9f:60:00:f6:62:5a:08:
40:37:82:77:dd:0d:70:1b:79:9e:5a:02:98:5c:3f:
a7:78:6a:ef:de:3b:0b:a3:f7:97:14:06:ab:21:b5:
4f:01:84:91:b6:01:08:2b:20:4b:05:e1:5b:da:70:
ac:2f:7c:16:5a:75:64:86:67:6c:1e:7f:14:27:69:
dd:be:02:01:17:4f:ab:7c:ba:07:2f:34:7c:bd:7e:
10:85:0e:f8:61:3d:29:7d:ec:94:88:0d:cb:5a:8b:
7a:90:5c:e7:34:5b:eb:f0:1f:43:2b:88:b9:89:86:
15:c5:79:b4:58:f4:8a:a1:a3:51:0c:a2:74:f5:8b:
75:77:ec:6f:bf:ca:3c:16:24:a8:0d:99:93:c7:d0:
32:cf:fe:00:e4:d9:ea:c6:63:32:df:61:1d:33:ea:
86:6b:9e:03:8f:1f:db:f3:6d:f9:17:45:ed:e9:dc:
a6:aa:a7:f8:55:6b:87:b6:7f:fb:d1:c7:3b:29:c7:
4c:97:ad:30:c2:63:5f:01:23:98:60:3e:f7:ee:7d:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:07:1D:31:92:09:3A:CD:CA:46:CA:81:D1:98:E7:1A:DA:39:B3:0B
X509v3 Authority Key Identifier:
keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:07:45:9c:2a:fa:1c:e3:7e:b9:2e:32:cc:2a:1b:fd:fe:a3:
54:2f:b2:e9:08:b4:2a:ed:ef:93:41:e8:f6:f4:1d:57:7a:86:
f4:1a:5f:fa:e0:7d:55:65:ba:ef:0c:cb:ca:1b:78:e5:90:6f:
20:ff:03:24:0b:76:6d:3a:42:23:65:f5:8d:71:a4:81:78:61:
b1:72:9f:f3:f2:a4:61:a3:e6:2b:2f:55:94:15:29:a9:3b:98:
be:82:fb:2c:5f:3f:40:8a:a6:03:f0:5e:15:dc:7a:e9:04:86:
c1:b4:5d:3b:8d:87:4d:0a:7e:ca:bd:e3:42:46:fd:77:85:cc:
4c:95:fa:0b:4e:ef:e5:20:63:79:dd:ad:ba:b7:d9:d2:44:ff:
55:a8:72:cb:97:c7:51:78:e5:0f:f6:44:2f:73:48:1e:fe:e8:
e5:d6:c5:48:02:54:50:31:3e:de:54:74:36:3f:86:20:95:9f:
c8:d0:68:f5:56:d2:e8:e2:32:c1:4c:b3:0e:dc:0c:95:8b:f4:
14:8c:52:c7:d8:1b:49:b4:9b:6a:1c:49:a6:34:c7:dc:f1:04:
4a:0f:e7:27:d4:6a:ea:55:57:7e:8e:bb:64:f6:2d:25:f2:fd:
43:7c:c8:c3:67:ad:f1:d4:06:b7:d4:ba:62:c3:1b:52:3c:0b:
4a:9b:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:25 2026 by rpki-client