
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json)
Hash identifier: aaN+zP+QiYCC843vOprZBKvLh0UXfk6mcpU9YEql3qE=
Subject key identifier: D4:52:19:C8:F4:7B:F1:92:55:F1:71:EB:53:D1:4E:49:9C:2B:6B:C0
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial: 0B85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
Manifest number: 0B65
Signing time: Wed 20 May 2026 19:14:50 +0000
Manifest this update: Wed 20 May 2026 19:14:50 +0000
Manifest next update: Wed 27 May 2026 19:14:50 +0000
Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: N7kVcOUOZ0E8K8C9drXGzTvQLYEgdBmnQWPEThQfwgQ=)
2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: GN6iKRgWjN9l+X5yS7hj3dibra4NHS61ozVmkt7C+TM=)
3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: 4QsDMDAa6fXs4bWa6QotOZsAqIzC29boJI/VGeWpJB8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Validity
Not Before: May 20 19:14:50 2026 GMT
Not After : May 27 19:14:50 2026 GMT
Subject: CN=6a0e082a-0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:ac:7a:78:e0:63:fd:db:83:8b:51:a0:0b:
17:fc:9e:2d:35:ae:e2:5e:0a:e3:7a:d2:33:9d:73:
c2:15:4a:a9:89:29:15:0b:e6:a8:a7:a9:15:85:b6:
ac:9b:2c:15:9e:de:ed:e7:87:d7:f3:8a:30:d4:f1:
cf:c6:53:cc:a2:66:1c:97:e5:c3:fb:88:02:f2:71:
53:31:60:77:a2:52:fb:38:9c:4a:d0:87:2b:23:9e:
e1:0b:61:b4:ae:aa:39:0f:c7:fe:99:26:11:9c:c8:
14:da:40:6a:5f:35:55:81:d2:36:e2:a8:28:e5:87:
3d:37:c7:e8:a5:05:bc:11:4f:6e:48:5d:06:57:02:
d4:04:35:bd:77:ed:40:e4:61:1b:65:39:d6:b1:60:
dc:72:e1:7e:3e:f1:6a:5b:ac:62:6c:6d:d3:29:ec:
c1:95:6a:5e:ca:9d:5b:bf:c7:37:c5:37:c0:39:0d:
77:0c:28:4c:f6:9d:31:33:4b:66:a9:97:24:9d:cb:
5c:a9:a0:9b:1a:9c:9a:5f:af:47:f0:7b:c3:c8:ea:
0b:4c:1d:f7:f6:09:1e:31:19:6a:37:aa:69:be:b3:
b5:77:6d:0d:5b:cc:4b:50:22:a9:c9:f9:23:c8:83:
d0:7b:07:4c:e5:29:c6:c1:14:d9:e1:8e:e7:d0:c5:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:19:C8:F4:7B:F1:92:55:F1:71:EB:53:D1:4E:49:9C:2B:6B:C0
X509v3 Authority Key Identifier:
keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2c:f2:51:35:2b:50:97:3f:68:af:36:4d:9f:85:1b:65:f6:
c3:6b:fc:5e:c6:7c:55:65:d4:98:23:19:38:5f:25:85:56:94:
d4:75:63:43:46:78:2a:fd:0e:07:b4:03:75:77:e8:b9:2e:20:
1d:03:cb:71:bd:13:90:cf:b1:7c:b9:0b:2a:19:fe:0d:51:86:
b8:d9:28:f1:f1:ab:cd:eb:80:e3:e8:76:26:78:ff:3f:f6:df:
9b:a0:3d:06:41:3b:e9:73:3a:a9:34:10:c3:ae:08:a0:8a:6f:
6d:59:44:04:e7:87:ab:d7:ec:e6:4b:8b:c6:f3:aa:ce:db:63:
d2:71:81:f8:38:ba:e1:fb:95:c4:30:80:be:57:b3:84:6c:ad:
e0:b6:95:79:b8:cd:9b:fb:1b:02:57:9d:4e:0c:48:7d:5a:25:
65:e3:73:d9:0a:f7:89:62:c2:c5:2a:c3:f4:c6:01:58:ad:03:
90:9d:7a:8e:af:cc:ec:2f:bf:84:a8:7b:f9:11:b0:fd:8a:e0:
16:07:42:cb:e5:db:9d:87:f7:d8:b3:87:ef:31:d2:e9:36:8a:
bd:da:7b:70:dd:c9:10:61:1d:2d:0a:8b:de:ab:6a:64:46:71:
c2:66:24:9c:89:94:e7:93:d2:57:5c:e0:cc:47:f3:ca:1c:81:
55:94:e4:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy
QThFMUU0NDMwHhcNMjYwNTIwMTkxNDUwWhcNMjYwNTI3MTkxNDUwWjAYMRYwFAYD
VQQDEw02YTBlMDgyYS0wYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApyOsenjgY/3bg4tRoAsX/J4tNa7iXgrjetIznXPCFUqpiSkVC+aop6kVhbas
mywVnt7t54fX84ow1PHPxlPMomYcl+XD+4gC8nFTMWB3olL7OJxK0IcrI57hC2G0
rqo5D8f+mSYRnMgU2kBqXzVVgdI24qgo5Yc9N8fopQW8EU9uSF0GVwLUBDW9d+1A
5GEbZTnWsWDccuF+PvFqW6xibG3TKezBlWpeyp1bv8c3xTfAOQ13DChM9p0xM0tm
qZcknctcqaCbGpyaX69H8HvDyOoLTB339gkeMRlqN6ppvrO1d20NW8xLUCKpyfkj
yIPQewdM5SnGwRTZ4Y7n0MX8lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRSGcj0
e/GSVfFx61PRTkmcK2vAMB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4
ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1
RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx
YlRkLXZkU19vWWNxamg1RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWizyUTUrUJc/aK82TZ+FG2X2w2v8XsZ8VWXUmCMZOF8lhVaU1HVjQ0Z4Kv0O
B7QDdXfouS4gHQPLcb0TkM+xfLkLKhn+DVGGuNko8fGrzeuA4+h2Jnj/P/bfm6A9
BkE76XM6qTQQw64IoIpvbVlEBOeHq9fs5kuLxvOqzttj0nGB+Di64fuVxDCAvlez
hGyt4LaVebjNm/sbAledTgxIfVolZeNz2Qr3iWLCxSrD9MYBWK0DkJ16jq/M7C+/
hKh7+RGw/YrgFgdCy+XbnYf32LOH7zHS6TaKvdp7cN3JEGEdLQqL3qtqZEZxwmYk
nImU55PSV1zgzEfzyhyBVZTkUg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:27:44 2026 by rpki-client