
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
File: mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft (raw, json)
Hash identifier: mHh3FHeoxuPxoN9XaUhkTNjM6Huvx86hhgKa3V1wkg8=
Subject key identifier: 78:85:7D:FF:9B:2A:62:D1:42:7A:76:3D:77:A0:1C:E8:9E:91:12:67
Authority key identifier: 99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46
Certificate issuer: /CN=A915A797/serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
Manifest number: 80
Signing time: Thu 19 Mar 2026 06:49:50 +0000
Manifest this update: Thu 19 Mar 2026 06:49:50 +0000
Manifest next update: Thu 26 Mar 2026 06:49:50 +0000
Files and hashes: 1: mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl (hash: pnz3bP7D6R3ozcfIrmBSBIFIfu/xZ45yobvh/KLDaoI=)
2: 1110B336733A11F0A50CB40BC4F9AE02.roa (hash: Bky8qK2Bolvx6AryWBaKtcOLwH8O2VIIKpjzNANFsIY=)
3: 117FF3C2733A11F0A50CB40BC4F9AE02.roa (hash: eFMqMx1XcwIYfwPU0YRygEin11c4JG6O8A2+m4ByoGM=)
4: 77B72AD6944E11F0AE3B5D3BC4F9AE02.roa (hash: KtvTVjgCAWOcBuPKSwBd9An16OYSBYspJW9eNvVNuDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl
rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 06:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A797, serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
Validity
Not Before: Mar 19 06:49:50 2026 GMT
Not After : Mar 26 06:49:50 2026 GMT
Subject: CN=69bb9c8e-9bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:19:f6:d5:33:e1:0f:61:e1:96:d2:3f:3e:
f7:cb:a9:eb:5a:27:61:00:63:96:e5:23:a0:34:85:
13:e4:3d:5e:b0:0d:65:a5:c6:4d:3d:3f:a7:fa:e7:
c6:9e:aa:34:f0:25:57:a6:c6:11:a0:6f:74:e6:4a:
09:42:f8:69:76:c5:1d:ef:a3:0b:7f:b6:93:71:bb:
2f:72:30:19:85:4f:ea:f3:89:d0:ec:8c:c6:a1:6a:
29:02:d7:06:af:79:91:05:d7:a3:a2:e4:fa:ef:b5:
4f:45:1a:90:55:f4:21:0e:d7:29:dc:7b:07:3b:13:
36:6d:cd:6b:b3:14:bb:a8:4b:18:fb:7c:5d:d2:c1:
18:c0:1f:ff:58:d1:25:7b:13:09:05:b4:e4:99:57:
13:72:b8:0a:5f:70:36:3c:b8:71:18:51:30:44:cd:
4c:e3:40:af:8c:14:d6:bd:fb:09:bd:77:ea:97:18:
5f:d5:ea:d1:f8:a1:e9:2b:69:fd:e7:b5:76:46:82:
20:8d:42:7a:32:7b:6e:40:ac:26:5d:52:e5:6f:c7:
29:4b:74:80:a2:75:cc:5d:ea:17:e3:b5:d2:6e:41:
d1:ce:d4:62:d0:73:62:be:67:f6:0b:c8:eb:61:68:
61:db:4a:a0:a6:2f:f8:03:13:6e:f1:03:e4:f2:2c:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:7D:FF:9B:2A:62:D1:42:7A:76:3D:77:A0:1C:E8:9E:91:12:67
X509v3 Authority Key Identifier:
keyid:99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ae:84:2d:78:f0:ac:f0:50:db:50:8d:ca:99:49:83:20:26:
1a:9a:07:97:ba:9d:ee:89:ed:11:e0:2b:d3:64:d0:95:05:fc:
1e:04:f3:88:02:44:f6:fb:de:7f:a2:7e:03:1f:d9:bc:b9:21:
50:2b:48:0e:8c:56:62:f8:2a:fa:a2:8e:f0:a2:27:0b:95:50:
7e:4e:cd:87:1e:2d:e7:f8:06:7d:7f:58:bf:4b:55:57:9e:3a:
3c:da:23:c2:00:9b:46:a2:f9:bf:ef:0f:62:24:22:d9:1e:00:
ed:96:09:81:c7:a2:41:d9:51:c3:42:bf:cd:e0:55:5b:02:05:
43:0f:84:70:ae:2c:63:56:d5:da:90:df:a7:51:78:7f:c2:f8:
ed:20:d9:e2:f8:0e:ac:8f:55:0a:1e:79:f3:4f:ef:65:0f:89:
b0:5a:95:9b:98:92:86:4d:a5:0d:53:2f:aa:04:0f:15:a5:9d:
34:1d:e4:f4:dd:f5:41:63:ba:b3:fb:38:23:3d:2d:6d:9c:71:
e1:10:53:ab:31:5b:8a:94:f7:7c:bc:5d:84:1b:05:9f:4b:d5:
a3:07:b3:3c:be:76:12:d7:d5:63:6a:0e:ad:cb:de:a8:82:2b:
00:29:6a:03:5f:75:83:54:87:72:42:1f:dd:2e:80:37:90:60:
d1:7d:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 16:03:24 2026 by rpki-client