
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier: aG2yOKIAyuyfQ6hvbBIHC7ouxRYP3xSKX2DaermjmYs=
Subject key identifier: 7E:DC:F5:67:52:CA:2A:95:A6:C4:D4:51:07:B5:87:ED:12:D2:66:20
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial: 09E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number: 09D3
Signing time: Tue 08 Sep 2026 19:58:13 +0000
Manifest this update: Tue 08 Sep 2026 19:58:12 +0000
Manifest next update: Tue 15 Sep 2026 19:58:12 +0000
Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: WvjBY12O9sBiQY42ep9cF9IghAVvSKYk1xar+Guhfj0=)
2: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: F7WyOekFgI8ivePs6ZQwLbNz0QkuTR1HhVS0Z6YFZWs=)
3: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: CYtTamBw2WXxPcIM3rrSk3dBYaMWIxNwfk91+jxjXp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 19:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Validity
Not Before: Sep 8 19:58:12 2026 GMT
Not After : Sep 15 19:58:12 2026 GMT
Subject: CN=6aa068d5-5ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:e7:8c:7a:eb:c5:78:d4:a4:f1:36:c4:e4:
d5:74:5a:db:02:08:4d:ad:b2:6e:60:e7:93:f2:87:
64:4f:02:10:e2:09:17:ca:57:6b:c1:b1:4f:7a:0f:
8b:7d:c2:6b:d3:7d:d7:73:91:fd:93:3e:e3:05:9c:
30:d5:09:36:70:a7:07:c0:aa:46:bc:b7:6c:23:32:
d9:c4:9c:5d:f4:8f:db:3e:67:9c:70:4e:75:b4:aa:
ec:ae:37:d0:35:bd:a2:f6:ee:f9:33:32:0d:32:dc:
be:bc:4c:a4:8d:fc:f9:e8:5d:48:6c:b9:a7:c8:56:
9e:5c:51:42:3f:b2:c3:1e:6a:14:a6:78:e0:8c:01:
b4:29:89:11:6f:26:7b:81:5b:11:6e:5c:e8:92:1e:
77:66:27:54:58:3b:ea:c0:1a:af:41:91:4e:7b:25:
38:e9:1e:46:0b:eb:3a:3d:16:b3:b5:a1:0c:92:94:
f1:bb:58:b7:5b:19:bb:17:47:cd:dc:43:4e:19:8d:
89:73:a8:f0:4a:e0:4f:0e:93:21:b4:8f:8f:29:b4:
d6:b3:b7:71:2d:a0:3f:04:0f:a2:40:49:53:8c:78:
c8:3f:9c:50:b4:af:74:e0:ae:3b:b0:60:63:60:bc:
4f:d1:5c:50:9f:35:6f:04:62:30:31:cc:3d:4d:60:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DC:F5:67:52:CA:2A:95:A6:C4:D4:51:07:B5:87:ED:12:D2:66:20
X509v3 Authority Key Identifier:
keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:21:84:f8:4a:71:b1:69:92:b4:1b:17:19:f5:d4:7b:c8:c2:
fa:c7:95:33:71:e6:e6:f9:6b:19:75:84:e7:25:3a:17:bb:ca:
ba:72:dc:12:73:d0:54:de:91:41:85:68:ba:6d:92:ff:ab:30:
d7:4a:c8:56:07:8b:df:f9:97:c7:72:aa:b1:a7:e8:fe:b8:1d:
c5:0c:2f:30:7c:ce:3a:e4:3f:42:3d:a0:5d:9d:57:88:9b:84:
f4:72:21:2b:f6:85:96:e2:63:41:7c:ef:59:fd:83:c7:ce:29:
93:50:0c:18:7e:a6:5e:48:97:58:b1:11:2a:71:af:8f:bd:be:
d1:d5:ea:db:b8:40:f4:ab:96:9e:2c:31:2e:1c:7e:0a:dc:df:
6b:47:3f:c4:18:4d:1c:f8:de:91:97:12:dc:39:d6:3e:ee:ae:
17:eb:2a:8a:88:22:69:76:dd:9b:c4:9d:8f:2d:f9:e4:0f:9e:
b5:ee:76:3a:f5:d4:88:03:ad:dc:3a:ae:4c:ed:08:3d:62:cf:
08:a2:5f:73:30:cf:aa:d9:12:16:82:81:57:b9:b3:6d:ca:90:
7e:f3:1c:e5:82:3e:ca:ce:ca:ba:0c:6e:59:74:34:f8:33:0d:
e3:1a:59:06:b0:58:b9:54:22:92:6a:e7:ad:ff:cb:f1:bf:cb:
28:5e:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:30:52 2026 by rpki-client