
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json)
Hash identifier: UJViimha3eT40cekHJlqjmRFfThuzHnYwejkftQYes0=
Subject key identifier: 7C:D9:9B:D9:D4:A3:6D:00:36:48:8B:EF:9B:E9:5D:C7:FD:4D:E8:10
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
Manifest number: 0199
Signing time: Thu 21 May 2026 04:20:40 +0000
Manifest this update: Thu 21 May 2026 04:20:40 +0000
Manifest next update: Thu 28 May 2026 04:20:40 +0000
Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: sOuRgjuH4DvC+lLZsGRGcPYmogsDOG7ylrYYgh/KIvs=)
2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: solgPQ655LM5Wziva07rC9OvNu/BbDCAz/mq1TMGAKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Validity
Not Before: May 21 04:20:40 2026 GMT
Not After : May 28 04:20:40 2026 GMT
Subject: CN=6a0e8818-80ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:61:88:f7:ce:8e:6f:54:0f:02:15:64:13:
69:66:19:8f:e7:fd:4f:3a:34:06:08:4f:97:06:5d:
8b:4a:06:ba:1d:8d:2b:4e:56:14:3d:67:98:18:c2:
5d:4c:8f:5d:1e:31:b2:e4:f5:25:0f:3d:21:74:09:
78:ac:fc:f0:f4:6c:29:18:5a:a8:94:0e:69:86:35:
18:f4:12:e5:b1:2a:c8:f3:78:d8:83:7e:b9:8e:0c:
3c:df:b5:60:5e:88:7e:18:3e:f0:09:4d:42:df:28:
b5:96:e1:f4:2d:ac:13:63:b0:b9:d4:92:12:8a:2a:
8f:a8:aa:5e:24:bf:45:98:f4:a8:5e:9f:14:fb:42:
af:96:1b:df:f0:3a:3e:ba:10:67:b7:1b:06:48:24:
0d:cb:6d:36:34:56:6b:12:c4:2e:61:db:a0:25:e2:
9b:9c:9f:9a:ab:9b:07:c6:5e:f9:e4:e0:e6:68:0d:
12:59:6f:a4:42:6f:6d:79:34:6a:9e:9f:c7:6a:96:
6b:61:f7:76:6a:9f:44:b2:5b:63:ed:0b:99:36:aa:
12:14:29:13:a8:7b:12:f4:80:e0:81:b2:62:7e:b7:
57:bf:a0:81:b4:04:aa:39:ff:69:b1:e1:96:40:9e:
50:c7:bf:71:87:2d:4b:27:38:fe:ac:15:81:b2:22:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D9:9B:D9:D4:A3:6D:00:36:48:8B:EF:9B:E9:5D:C7:FD:4D:E8:10
X509v3 Authority Key Identifier:
keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:00:65:d1:c1:d7:96:7b:53:51:01:ad:fb:ad:f4:36:30:4f:
ff:d6:db:fd:be:41:fb:c1:84:fc:dd:1a:b1:f2:41:89:f8:3e:
50:01:cc:88:8a:d5:b2:dc:52:7e:0a:e5:26:7e:2d:71:a3:e0:
9c:dc:86:e5:7f:d2:6d:db:4e:e1:f2:9d:99:3c:3b:d1:36:2c:
5c:e0:36:75:98:4e:f9:74:65:da:fd:d5:39:8f:43:14:35:72:
7a:e3:49:c0:8a:c8:d2:e7:a0:b3:65:8f:94:13:20:42:b5:06:
1f:8f:7c:9c:04:64:26:dc:72:14:a9:19:3e:ef:85:24:a9:fd:
cb:8b:d6:dc:2d:8c:77:92:9e:48:fa:84:b2:c1:85:27:6d:ab:
22:2b:25:da:64:d6:ae:21:9e:0c:80:f8:c6:e0:a3:72:38:fb:
5b:52:0e:f4:b9:d2:cf:5f:f0:b4:c6:7e:3d:6a:df:f7:aa:9e:
f3:ae:2f:b8:06:08:4a:8c:20:ec:6e:42:38:b2:74:24:90:4b:
e4:7c:56:cc:83:3f:a5:a2:59:9d:9d:37:bf:22:a8:14:17:7c:
fa:9a:bb:9d:2b:d9:01:be:fb:93:98:60:df:c3:8b:04:35:88:
b0:32:6a:f3:91:42:f6:c8:ed:2e:53:d0:c1:e4:b8:a6:30:8d:
0b:7f:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:48 2026 by rpki-client