
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json)
Hash identifier: QjFdKyRT34TnL0kd3sNclWtTMfmN8N5mNUdPITRJhwA=
Subject key identifier: 66:DC:C6:96:03:DE:A3:4E:39:5D:F8:14:1B:EC:EA:CA:AE:EB:C0:D1
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial: 0BB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
Manifest number: 0B95
Signing time: Tue 18 Aug 2026 19:26:14 +0000
Manifest this update: Tue 18 Aug 2026 19:26:14 +0000
Manifest next update: Tue 25 Aug 2026 19:26:14 +0000
Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: yUp+jBqXvuD/ZEUi66ZylQcc2GnJyX9HOrgJNNs+gec=)
2: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: 26lgAN5q1jBbqIZ//Uh2LoUZjyzoYehnxO9iBj1I6uw=)
3: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: riMNb3NhwBf/w1oOR93/weOT1W1k0o3vTmjn2YYoeRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Validity
Not Before: Aug 18 19:26:14 2026 GMT
Not After : Aug 25 19:26:14 2026 GMT
Subject: CN=6a84b1d6-9524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:44:ea:c0:21:b0:a1:68:81:d1:63:bd:de:
7f:6d:75:99:78:9e:4c:0a:9d:17:be:b5:ca:7b:2f:
99:f3:30:73:b0:ed:7d:04:bf:4f:66:b7:4d:58:88:
9e:d6:4a:46:74:28:52:f1:cd:0f:a9:20:b8:9b:4b:
88:02:42:ab:ad:85:37:6c:13:c9:a9:c4:15:6c:e9:
ec:6d:7c:08:57:4b:f7:67:58:6f:00:50:6e:ba:ad:
f0:54:11:ab:2f:8d:44:52:67:a4:8d:1a:95:63:8d:
d4:7e:02:73:fa:b7:b2:f9:d7:bf:86:0e:98:9e:e2:
e0:99:8f:ea:8f:7c:2c:7c:69:9e:1b:8f:b9:61:94:
1d:b7:dc:85:e5:54:0e:d4:15:0c:4f:3c:18:1b:29:
f1:5d:62:98:1c:b9:be:c9:7c:97:23:b3:ae:1b:52:
1f:3a:fe:e2:84:78:6d:30:0e:bb:41:66:4a:34:db:
ba:6e:32:68:9d:69:bb:31:d2:4d:8d:b7:60:1d:25:
f9:90:34:96:4f:ba:5a:83:fd:34:08:b1:01:ee:17:
39:7f:01:9c:2c:33:eb:fc:0e:3e:b4:a4:11:c8:14:
4e:0c:41:f3:f1:c4:b3:3b:af:5b:6e:8b:2a:57:0e:
ca:ea:c3:a5:a2:1a:52:56:bc:47:cf:a4:ce:5f:1d:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DC:C6:96:03:DE:A3:4E:39:5D:F8:14:1B:EC:EA:CA:AE:EB:C0:D1
X509v3 Authority Key Identifier:
keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:83:f4:a8:77:c5:98:d3:c2:3a:41:72:8b:d3:07:c9:e2:ea:
f1:3d:c8:42:96:b4:d4:59:81:87:fc:88:c6:c2:55:f4:33:5d:
25:9d:1a:dc:45:25:94:7d:79:69:1f:2e:35:fc:e7:ad:47:dc:
2f:f5:d4:6d:92:30:5b:8f:71:76:be:0c:11:cb:35:24:82:12:
eb:fb:44:7e:ec:b7:ea:d5:10:d7:6f:cd:85:51:61:fd:a4:cf:
b5:a4:1b:a5:28:84:e1:a5:03:78:45:e4:61:36:4d:41:e4:cc:
4f:0e:12:95:c3:a0:91:4a:fc:cd:57:2b:7c:1b:b8:46:02:92:
fc:39:32:6d:02:88:d4:b1:94:7a:dc:e9:e5:58:13:26:8f:b1:
ee:a3:f7:0f:58:22:fb:ae:07:16:ab:f7:2b:17:3b:7d:c5:8f:
ea:d2:48:50:1c:fe:d2:73:45:79:1e:1d:f9:96:1a:f9:87:44:
67:f5:ca:72:cb:e7:94:eb:8e:35:c3:3f:f5:c9:3e:b9:c3:2b:
9a:0c:ee:d4:9b:d6:57:23:67:de:1f:70:ec:4f:95:a6:f8:b7:
3b:3a:3c:c9:1c:1e:cf:1c:c5:ab:86:89:b6:ee:c6:a0:1f:67:
5a:8f:f3:d6:6d:3d:8a:56:63:08:82:8e:b3:84:d8:7a:e7:e6:
07:71:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:42 2026 by rpki-client