
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json)
Hash identifier: TT8g5wSlPW2PRpYrs9oRflSAxEc87AL9pm5b3HiV7GU=
Subject key identifier: 5A:C3:CB:BE:49:6D:39:8F:8B:94:9C:F1:91:46:D2:31:CB:45:9D:38
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial: 0BCF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
Manifest number: 0BAD
Signing time: Sun 04 Oct 2026 19:10:15 +0000
Manifest this update: Sun 04 Oct 2026 19:10:14 +0000
Manifest next update: Sun 11 Oct 2026 19:10:14 +0000
Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: djAux6cT9f7wCxSC3IS0IwaMa+oKjClrBE/glQzzVHs=)
2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: riMNb3NhwBf/w1oOR93/weOT1W1k0o3vTmjn2YYoeRU=)
3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: 26lgAN5q1jBbqIZ//Uh2LoUZjyzoYehnxO9iBj1I6uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023 (0xbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Validity
Not Before: Oct 4 19:10:14 2026 GMT
Not After : Oct 11 19:10:14 2026 GMT
Subject: CN=6ac2a497-e312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:67:cb:fd:bf:b9:6a:70:97:62:3a:fd:e7:
ab:a8:de:da:7a:b5:28:c2:8c:57:13:ed:a8:56:97:
e1:7b:3b:32:25:a1:e7:56:b0:cf:12:b7:b3:66:95:
67:85:68:a8:b5:01:ab:26:77:30:12:0d:58:28:02:
07:f8:d0:2f:03:43:4a:5d:d7:9f:8b:86:0e:82:4a:
a9:26:d0:b9:42:6f:43:1a:2e:f5:5e:4b:0a:1f:cd:
e4:16:d0:e6:5e:7e:bb:bd:17:9b:63:25:a7:47:b4:
5e:77:e5:d1:b0:08:86:58:53:0d:72:6d:ea:6a:2f:
05:94:d7:0e:5a:73:da:c5:6a:ea:d2:8f:6a:e9:07:
ec:04:91:b4:c7:3d:52:9e:c8:b3:c0:bf:35:0c:57:
f8:56:52:dd:d2:71:63:58:ca:e9:f4:93:7e:a5:f9:
36:f8:f3:92:d0:97:77:13:51:f1:b9:36:aa:74:4c:
79:67:e8:bf:f7:42:1d:f9:b7:42:65:a1:f9:ed:f1:
57:b0:02:e6:05:54:54:1b:6d:b7:a3:64:f0:8a:9e:
9e:3d:ee:97:03:87:d5:c9:e8:53:13:19:0d:a3:1e:
60:b5:4e:ea:6a:3e:0c:53:6b:15:f2:16:80:dd:56:
a0:55:ba:d0:ba:48:e1:72:6f:36:c0:1c:fa:aa:d4:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C3:CB:BE:49:6D:39:8F:8B:94:9C:F1:91:46:D2:31:CB:45:9D:38
X509v3 Authority Key Identifier:
keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0b:cc:fe:8a:02:b1:3f:53:dd:c4:5c:32:87:72:72:fe:77:
a2:ae:94:9a:29:11:c3:f7:81:98:0e:c5:2d:63:96:e1:5c:6a:
01:cf:44:08:79:cb:72:dc:78:d2:49:12:fa:ba:fd:53:b8:57:
0a:51:54:1b:93:aa:58:cb:1b:bb:76:98:c4:43:7e:c1:9a:ec:
e3:0b:4d:e5:12:3d:a6:2c:41:ca:1c:1d:84:f6:ec:f1:aa:43:
db:4e:27:e5:12:56:57:b8:46:26:76:e6:5a:4d:32:8b:aa:26:
e8:ba:98:4b:d1:ee:43:52:28:71:76:6f:47:e8:7a:b0:01:73:
ab:d0:65:9a:45:f1:dc:d0:75:9f:1c:f7:e4:dc:df:8d:98:49:
c2:74:71:57:6d:03:56:05:3d:8c:d5:1a:d1:d1:64:b9:b8:67:
0a:e4:a1:8d:59:25:a8:4f:ec:9e:e7:7c:9f:36:e6:30:be:fa:
23:50:07:3e:aa:0c:a4:51:24:84:6d:b9:7b:16:d5:14:f5:61:
d6:30:cd:ed:ad:0d:b1:b9:7b:c0:82:93:b0:33:ad:b4:4d:27:
c9:98:3b:42:6b:76:67:3c:af:71:08:e4:2f:04:95:4d:26:e1:
33:e7:31:45:d1:67:fc:13:cb:5c:d3:a4:10:ca:b9:bb:fb:59:
34:aa:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:33:17 2026 by rpki-client