
$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier: AsXZ4gfMomwK+bVephKeeXKj5SzUR5WXWdE2XPFiAKs=
Subject key identifier: 79:8E:B0:49:43:75:9C:6D:3B:5E:79:14:20:79:D4:76:D3:FB:C2:A3
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial: 09A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number: 0994
Signing time: Tue 12 May 2026 20:04:20 +0000
Manifest this update: Tue 12 May 2026 20:04:19 +0000
Manifest next update: Tue 19 May 2026 20:04:19 +0000
Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: o2jJhZldyZ2bsbMo2Y3jcfpO1BFeOsFk6aoEITy7sqw=)
2: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: 5TJ8fpI/hph92A8Cw9TwpRY9J8n0ZIFo0zChXcOf4qo=)
3: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: xhNjPqA73OpL8U8u4dVTjHBcy8FV6vJPVW6N4NhLK5I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2467 (0x9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Validity
Not Before: May 12 20:04:19 2026 GMT
Not After : May 19 20:04:19 2026 GMT
Subject: CN=6a0387c4-27c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:a1:95:0a:3e:a6:55:49:75:94:2e:ba:33:
0f:66:9a:f4:0d:85:3d:d6:72:ea:b6:95:9c:80:3e:
90:7a:f1:4e:d6:c5:12:83:e9:4f:52:fe:d4:52:5d:
cd:05:43:66:d1:e4:9c:83:4b:c5:6b:4e:2a:a7:3c:
23:25:ca:1c:a3:74:5e:4b:d6:eb:9e:09:53:15:02:
b5:9a:52:9b:1f:c3:2c:46:e1:f5:91:87:45:ec:a4:
d4:3c:2d:66:ad:9b:49:15:29:8e:52:c3:89:bd:04:
c6:c4:53:c0:95:a6:e4:64:03:14:b4:86:fc:3c:35:
25:47:16:af:1e:9c:f3:a6:02:33:fb:5f:e7:d6:73:
ea:00:25:05:ba:e6:ef:98:0b:de:61:37:7b:df:ff:
3c:28:59:f2:25:b8:dc:60:0d:fc:6b:14:9c:56:d2:
bf:64:61:ae:62:c0:f4:3b:57:7c:3d:f2:b8:09:ce:
e0:e7:fb:17:ca:19:4c:d3:e8:04:b5:30:3c:1d:b8:
86:44:d5:eb:8e:aa:c9:dc:31:50:67:a5:b1:53:05:
20:b0:d8:4a:a3:94:ae:af:d2:84:34:1c:ca:44:02:
7d:fa:8f:c5:0f:93:e2:80:2a:15:23:1a:c6:e3:74:
d2:9e:1f:73:d4:e0:97:dc:9c:80:14:df:f0:c3:a3:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:B0:49:43:75:9C:6D:3B:5E:79:14:20:79:D4:76:D3:FB:C2:A3
X509v3 Authority Key Identifier:
keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:95:63:5f:2b:c7:64:ee:f7:88:e4:2e:66:5a:92:72:04:
1c:39:e0:cd:2e:2e:77:07:ed:5d:96:60:0f:ec:ac:67:16:e0:
29:aa:c3:50:e9:a0:68:92:69:c7:00:44:9e:ba:ed:a5:ed:80:
3a:4d:f8:ba:8a:0e:93:6d:c4:65:b8:9b:b5:e6:5b:29:cf:84:
cd:5c:e8:db:bc:8a:ba:ce:52:9c:21:72:11:5c:66:6f:ff:99:
89:df:3a:f5:92:40:ec:18:52:5c:21:d9:a4:67:cb:70:75:f1:
4a:3f:1b:61:86:39:0e:5b:0a:bc:33:ed:1c:68:66:36:7a:60:
0e:d2:f5:4a:e1:16:54:8e:e6:36:8f:0c:f7:b3:b5:6d:e8:f5:
ef:05:dd:10:a9:eb:ae:44:d2:be:80:e0:c1:1f:30:3f:99:85:
22:72:b3:40:c2:9e:4a:6f:dd:2d:0a:73:07:2b:b7:91:d8:a6:
42:72:18:d4:8c:03:0c:2d:93:97:7a:7c:84:47:58:4d:3c:1c:
cd:d5:ed:66:f2:d2:8c:38:40:d0:7c:48:b4:6c:50:1e:d8:ef:
0c:3f:cd:62:a3:d0:30:2c:35:28:41:96:6b:ea:b6:7b:c6:d1:
49:27:c2:ad:b7:60:b7:16:f0:17:f7:be:1d:32:58:07:81:6a:
bc:9b:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:14 2026 by rpki-client