
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json)
Hash identifier: q98IZpjJdDu28CLb+E4ZK5TlPTScIYYZrch7Mb39kP0=
Subject key identifier: 61:1C:B0:20:28:D1:38:84:6A:42:C1:E6:08:47:0C:B8:99:FE:58:F8
Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Certificate serial: 08D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
Manifest number: 08BD
Signing time: Tue 18 Aug 2026 20:54:21 +0000
Manifest this update: Tue 18 Aug 2026 20:54:21 +0000
Manifest next update: Tue 25 Aug 2026 20:54:21 +0000
Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: CQ91Osc7YNAaDl6UpP5pQSiHrwDkciKvojKkip9lUCU=)
2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 4+lHA5+XA6q3WA0a7feDPb9rgvNk8uk4zcP3rt42nhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Validity
Not Before: Aug 18 20:54:21 2026 GMT
Not After : Aug 25 20:54:21 2026 GMT
Subject: CN=6a84c67d-7f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:90:05:a7:ee:5d:ce:d5:b4:ce:17:0d:fa:
fe:b0:25:16:0c:c4:c3:30:2e:6c:26:54:25:0c:c7:
b5:34:f1:e3:8e:95:cb:8d:8f:69:8f:a1:13:b5:cd:
a6:62:e8:56:43:ae:ba:38:41:3d:98:d3:11:05:dc:
4d:c0:8d:44:33:e0:2d:4f:cb:50:29:5b:3d:09:1c:
f7:6a:3f:66:9d:4d:6d:5b:0f:a4:85:9e:d7:17:af:
95:c2:b5:48:6c:9a:39:ba:8f:64:5e:36:7a:21:b2:
53:35:cd:24:3f:51:6a:dc:5d:4a:8d:b4:2c:93:21:
05:41:18:cf:5a:d9:da:54:59:3a:04:bb:45:89:67:
99:d7:fd:1f:5d:4f:35:08:93:d7:ea:1f:bc:dc:68:
a9:8e:c9:47:ee:32:ca:bb:35:81:ba:ee:67:1d:4d:
d7:64:7b:49:03:7d:a8:33:58:c2:4e:8b:57:f9:11:
3c:3e:59:76:63:81:d6:25:89:b4:49:65:d1:89:b9:
ec:dd:db:6b:49:f8:13:39:13:8e:33:a7:59:6f:78:
2b:5b:34:d5:d0:cf:cc:72:7c:70:6e:fc:52:9d:cc:
f1:9f:b6:70:2d:a5:e2:24:7e:aa:8a:d9:a6:1a:02:
3f:41:ef:82:46:df:0f:c7:59:2f:7d:9c:23:1c:c6:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1C:B0:20:28:D1:38:84:6A:42:C1:E6:08:47:0C:B8:99:FE:58:F8
X509v3 Authority Key Identifier:
keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:af:d3:04:45:94:ba:7f:e7:ca:66:4c:eb:34:92:1b:0e:60:
a9:5d:99:5b:63:e9:7c:d0:9b:da:90:14:b6:ae:10:6c:73:5e:
c2:fd:25:3b:a1:d5:98:61:71:ac:a4:99:8a:6e:36:ca:69:88:
9b:4c:5b:57:81:84:44:dc:90:65:00:8a:00:f1:99:a4:45:a7:
ae:60:f7:b4:f3:25:8a:f8:d2:e8:44:78:da:6f:e6:10:37:ac:
67:27:83:c9:ce:ec:0f:8a:0c:44:7e:a4:a4:62:b5:21:5c:fb:
31:10:9b:10:c5:9c:5c:32:35:61:1d:ba:e7:0b:8f:48:3a:bb:
2c:97:f1:9b:26:2e:95:91:d6:2c:6f:ac:c1:a6:a0:1d:1f:a4:
4a:3c:c9:e7:5b:ab:1d:4d:84:49:e2:98:4b:61:a6:f1:1c:a8:
d3:4d:2e:bc:d6:0a:03:1b:86:fc:9d:86:a9:e1:32:05:9b:de:
22:49:98:2b:aa:41:2c:ad:03:03:6b:4d:52:fd:0b:c0:e2:81:
9e:a9:9e:52:21:96:57:b2:f9:df:f3:64:2f:14:21:a4:5b:f5:
c4:ee:2e:8a:28:09:cd:aa:cf:2f:20:71:70:7c:b9:f8:ca:31:
2d:b2:f7:d6:0e:33:ff:88:4d:67:06:9d:2c:67:ec:06:a6:31:
32:8c:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:08 2026 by rpki-client