
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier: H9zlkAj5hoF9ovDrbuR88IrzhogwLE4cLH5vCVCx4Jk=
Subject key identifier: 95:6F:34:E1:ED:4E:AA:93:44:6A:CC:1B:3D:F2:B8:FB:71:5B:87:49
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number: 0144
Signing time: Fri 17 Jul 2026 04:58:48 +0000
Manifest this update: Fri 17 Jul 2026 04:58:48 +0000
Manifest next update: Fri 24 Jul 2026 04:58:48 +0000
Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: ffgEXgRNFG0/CheQ0fhwYwJ4K6oUEBLTIUpJfOAbkUE=)
2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Validity
Not Before: Jul 17 04:58:48 2026 GMT
Not After : Jul 24 04:58:48 2026 GMT
Subject: CN=6a59b688-9b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:f5:6f:e5:a5:70:8f:9a:7a:27:a8:da:b5:
58:b1:15:20:42:b7:2a:d9:ec:17:1d:49:17:e5:ec:
4a:60:f0:0b:1a:2e:0d:a3:ba:15:73:95:7f:18:0c:
f6:08:57:60:2b:ae:68:fa:5f:d9:ce:a0:64:0d:d9:
22:19:e1:67:f9:3e:37:8a:4f:e5:7f:40:45:60:ab:
c2:37:2b:ab:49:8b:c5:0b:4c:38:44:bc:de:dc:8a:
83:ed:89:c2:45:7f:51:74:75:6d:ef:7f:ec:e1:3e:
b0:57:1c:c0:52:75:04:4e:75:49:f7:1d:59:30:f5:
c7:40:51:61:b8:4b:48:6c:a8:da:ca:d6:23:60:ed:
60:50:17:05:8b:00:52:fe:8c:d8:0c:9c:01:77:fa:
91:51:8b:f4:27:ad:e9:ca:45:23:70:4b:98:af:ee:
b6:3b:bf:00:ab:b2:49:91:21:f9:cf:54:33:5c:4e:
c2:b9:f9:a3:b3:71:43:97:3a:24:1b:02:44:ac:33:
cd:a6:b1:dd:1d:30:da:77:f1:42:78:f8:d4:4e:fd:
42:24:5d:46:87:85:8f:ec:19:45:b2:3f:ff:8a:72:
5e:12:3e:8f:24:ce:48:01:19:fd:c7:dc:17:f5:8e:
63:34:ad:f6:42:15:99:50:19:e4:74:90:2a:6e:cc:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:34:E1:ED:4E:AA:93:44:6A:CC:1B:3D:F2:B8:FB:71:5B:87:49
X509v3 Authority Key Identifier:
keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:f0:fc:96:2a:1b:3c:5c:bf:ac:68:de:f5:f9:56:cf:5b:
1a:cb:54:84:8e:0f:aa:86:88:8e:81:56:cf:a4:0b:97:fe:fc:
0a:10:31:2d:bf:88:1e:ff:4b:eb:2c:32:71:54:5b:a8:7e:3d:
fd:e2:ac:32:6c:fc:34:70:ba:ac:f9:3a:cc:1e:43:6f:96:5a:
f5:ec:6f:e3:0b:0a:2b:a7:76:19:ac:b3:52:b3:8e:6d:a0:09:
83:11:15:db:5a:ab:9b:c1:90:21:f8:71:13:9f:2e:d1:f0:27:
55:d3:c2:61:bc:41:67:5a:96:bd:fa:65:bc:82:6d:99:7e:4c:
91:45:c5:d7:da:ba:8d:48:1e:90:a4:d9:e8:58:94:23:d4:dd:
84:97:3f:64:17:bb:7b:3a:18:c4:1b:64:7e:97:7d:ea:7f:b0:
86:93:86:63:93:99:27:1d:8b:f2:ef:83:df:ae:29:cf:7c:64:
e5:69:16:39:a8:7d:e2:eb:85:66:23:4b:d8:99:ea:f7:09:f1:
78:13:91:0d:bf:cb:2f:ee:10:47:50:b6:e3:94:67:78:46:46:
e9:d2:c2:ef:b8:50:73:0a:53:71:57:ae:60:c5:13:fa:1a:d4:
35:a3:fb:6d:e9:9f:59:bf:b9:1c:35:2d:25:2e:3a:d4:90:0b:
42:91:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:44 2026 by rpki-client