
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
File: mpXY8Mq1144dbKm5o7JX446MfVs.mft (raw, json)
Hash identifier: gVQ4O4klbZxyVfg25M0A4m8qSc5cFK8KoRDzyWDjiQQ=
Subject key identifier: 1B:17:64:03:C3:A6:24:06:57:2B:80:11:A0:2D:4E:4E:3B:F9:7D:6E
Authority key identifier: 9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
Certificate issuer: /CN=A915CF84/serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
Manifest number: 2F
Signing time: Fri 17 Jul 2026 09:59:10 +0000
Manifest this update: Fri 17 Jul 2026 09:59:09 +0000
Manifest next update: Fri 24 Jul 2026 09:59:09 +0000
Files and hashes: 1: mpXY8Mq1144dbKm5o7JX446MfVs.crl (hash: hkDm0asvDC7ZlRheexhph0wciP77y047B7Iu0W9dfKU=)
2: E0D625A23C6A11F183CD979F90833773.roa (hash: qj9IQ2Y4YzDmdOE6yQMu07d0ie+83o7yGutlXtdHDIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl
rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CF84, serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
Validity
Not Before: Jul 17 09:59:09 2026 GMT
Not After : Jul 24 09:59:09 2026 GMT
Subject: CN=6a59fced-22cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:8a:a2:2c:c4:e2:35:c0:67:52:54:e1:e1:
cf:bf:c2:89:95:23:95:30:a2:9a:6f:76:0a:35:35:
27:8c:4f:2b:e4:e1:9c:9b:0e:95:34:48:19:52:c9:
6b:39:df:17:46:f3:b4:2e:3d:cf:fb:61:08:44:62:
f2:c6:ac:52:72:42:34:bb:3b:66:71:c0:41:27:d0:
ba:63:cf:79:81:07:63:2e:8f:2a:b3:41:86:fe:8c:
42:42:1f:9f:fe:ac:cb:6a:36:bf:1f:16:12:4c:b1:
ab:7f:70:bc:f2:6a:2d:16:7f:a9:01:e1:f5:99:77:
32:4f:14:0e:16:57:27:22:7e:19:0f:51:0e:45:56:
07:8a:03:5a:87:4a:a3:1c:72:19:c9:fd:97:ba:c6:
dc:5f:fa:0c:14:b7:9d:16:e2:e6:08:f0:24:9b:86:
16:53:f5:7b:70:08:08:ee:2a:e0:57:d1:19:5a:c4:
17:48:25:5a:2e:24:28:6b:0c:25:1d:b5:b8:43:35:
c0:c2:ab:88:64:f9:2f:87:14:f2:f1:85:67:1b:a7:
69:40:df:b6:54:c7:26:68:02:5a:9c:31:47:ec:f7:
77:e2:c7:b4:23:1f:84:6e:f3:8e:0e:6d:ec:a4:3d:
81:5b:09:6b:8a:c6:11:ba:ac:55:9e:fd:41:40:d2:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:64:03:C3:A6:24:06:57:2B:80:11:A0:2D:4E:4E:3B:F9:7D:6E
X509v3 Authority Key Identifier:
keyid:9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c1:4f:cc:59:7f:9a:d1:6f:c6:b2:1e:09:0a:72:c4:e2:76:
58:49:7d:18:a9:e0:b3:47:89:42:a0:50:08:6c:07:f0:ba:ba:
28:93:77:53:d8:45:f2:d0:2d:31:24:b2:3e:55:66:fc:a9:ab:
7b:73:8a:5b:23:c1:96:1d:5c:e8:96:73:ed:dc:0d:7c:d2:f2:
86:68:1a:4f:b5:46:ae:6a:04:6c:60:aa:4a:02:18:7e:5a:30:
08:9a:13:af:c8:cc:04:5a:de:39:0f:a3:12:ca:05:85:18:54:
b8:1f:b3:d5:b5:ab:69:4b:b3:94:c5:e2:2f:2f:66:8b:58:51:
7e:90:c7:ed:a6:3f:63:b4:a9:77:8c:fe:4e:3e:10:70:3b:6b:
a9:2f:23:ad:bd:89:90:4f:01:12:17:80:95:2f:0d:34:38:e7:
0b:f2:31:b5:39:6c:c8:f0:76:0f:73:90:dd:16:a3:40:6b:eb:
a4:bb:ae:17:82:c4:44:11:2c:1c:09:46:e5:ee:c4:c8:a5:92:
3f:46:ee:28:e9:5c:9a:be:21:0d:77:05:dd:ef:08:f2:65:d6:
c6:6d:6a:2e:f7:d4:ed:46:6d:e0:cd:f9:a4:aa:2e:c0:db:49:
9c:bc:ce:aa:72:bb:1c:dc:79:51:dc:ea:67:f6:81:cf:3d:5b:
8a:3d:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:26:48 2026 by rpki-client