
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json)
Hash identifier: 6p35oJ7P4t9uIOA2WW4W/OFcq8WLJcayE07wz3FAfDY=
Subject key identifier: B3:30:1A:5E:03:FB:7E:82:29:09:2C:D5:63:D4:23:AA:04:69:2C:E2
Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Certificate serial: 0B61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
Manifest number: 0B46
Signing time: Sun 26 Jul 2026 19:40:03 +0000
Manifest this update: Sun 26 Jul 2026 19:40:02 +0000
Manifest next update: Sun 02 Aug 2026 19:40:02 +0000
Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: JcsAZQPYs1sNNIUZhq6SyqkeLHNZyJjDS/SQd0D0c8E=)
2: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=)
3: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=)
4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2913 (0xb61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A
Validity
Not Before: Jul 26 19:40:02 2026 GMT
Not After : Aug 2 19:40:02 2026 GMT
Subject: CN=6a666293-cc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:44:43:55:6f:cc:72:15:08:4a:11:f7:6a:
45:6f:d0:e0:43:fc:fa:7a:a6:76:96:3f:87:91:87:
df:6a:3c:84:7e:dd:81:a3:19:25:71:e6:ba:4e:1e:
bd:4e:ff:c2:05:41:c2:52:f0:96:05:f6:be:49:54:
16:21:c7:af:8e:5b:19:56:89:c1:04:40:59:f1:8d:
b8:23:1d:3f:bf:61:75:50:5e:d0:02:72:66:a0:cc:
5b:38:63:03:c9:cd:c2:14:3f:48:e8:ad:2f:04:1b:
01:0d:f5:15:a1:ea:aa:e0:91:b4:ae:32:55:d3:c2:
12:72:e5:dc:be:5d:65:b8:ee:a7:9f:21:68:94:cf:
df:95:a5:25:54:d6:86:eb:33:a8:b3:26:00:2b:6b:
b5:1e:29:3f:78:2d:67:18:58:c4:5a:cb:26:a6:2f:
46:2d:60:79:80:12:63:bb:70:e7:1c:dc:df:28:86:
65:c1:0e:a9:7e:89:f2:13:5e:88:c1:1e:14:d9:57:
7f:6c:0e:7f:2c:7d:57:55:62:12:7e:b7:86:d8:37:
3e:8e:b8:1e:b6:99:b1:a0:5f:62:9e:8a:02:fc:93:
28:c4:93:9e:c3:10:c1:19:e2:35:4e:58:6d:5e:46:
11:ea:db:5b:2e:e7:38:08:f4:9d:54:98:90:89:a2:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:1A:5E:03:FB:7E:82:29:09:2C:D5:63:D4:23:AA:04:69:2C:E2
X509v3 Authority Key Identifier:
keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:8f:3a:b0:46:ad:5a:23:4d:bc:9d:e1:24:11:66:14:fd:92:
eb:22:cf:0a:09:ba:3e:f4:f0:f2:22:b3:cd:d4:1f:5e:a9:53:
8f:10:58:45:14:0a:66:67:22:d2:cd:89:b5:83:07:3e:0c:d2:
4a:26:c7:a1:e7:ba:d7:2d:4f:b5:bb:40:e8:17:96:66:0c:5e:
39:68:b4:d9:28:d8:da:12:18:2b:df:3c:72:0e:9f:20:06:32:
39:09:78:3c:5c:de:66:91:d7:89:82:75:9b:c3:c8:57:a7:29:
1c:df:30:7d:5d:98:1c:4a:b2:c5:43:de:fd:69:1c:32:1a:ac:
ab:f4:38:37:51:db:a3:de:ac:96:32:c0:da:85:1e:eb:97:76:
15:24:83:45:d6:0e:6d:33:4b:17:de:86:36:e8:87:48:6c:a0:
52:45:fd:12:ba:d4:88:61:e3:b6:26:25:b4:79:ad:76:a6:d5:
e9:01:9d:6b:1e:f3:99:b2:e7:e5:e4:41:5b:b8:f4:dc:7a:38:
47:6d:f8:69:7d:81:3e:a3:39:79:34:1d:28:b9:cb:ca:fe:ae:
1e:e6:77:05:96:60:bf:02:1e:6d:40:70:3b:0d:1d:8d:51:5c:
56:72:17:bf:e9:da:5d:87:d6:b8:f0:1a:fb:11:b6:87:f5:1b:
ff:72:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 06:40:23 2026 by rpki-client