
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File: MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier: G7jzV9zqp5NNKC+FyxRk7tKmCmRhEmkoCg0DDfXCU8s=
Subject key identifier: 7F:1C:DA:7E:B0:7E:8F:B6:5F:63:8F:B5:EF:C3:29:29:EF:2C:84:B0
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer: /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial: 0F2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number: 0F19
Signing time: Tue 18 Aug 2026 17:49:10 +0000
Manifest this update: Tue 18 Aug 2026 17:49:09 +0000
Manifest next update: Tue 25 Aug 2026 17:49:09 +0000
Files and hashes: 1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: QLBxzeg4Wmt1f5DoEoeB2Jj1oWbEmncGlw1rKt2IYQg=)
2: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: xKR+1TqcXk1tuGXmRs5U35Hu6EeN0viZWiMmzSgp8ik=)
3: 5822028E51F811EAB221F834C4F9AE02.roa (hash: 3FX6yd8ajXUCf1DvaodFv7wjS6jvEbFRhv/3yRD4WYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3886 (0xf2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Validity
Not Before: Aug 18 17:49:09 2026 GMT
Not After : Aug 25 17:49:09 2026 GMT
Subject: CN=6a849b15-16b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:6a:00:30:97:18:15:86:d8:5d:f6:52:6c:
f6:10:28:81:a3:78:83:9f:e0:26:81:68:e6:c0:24:
a9:00:0a:fe:9d:c8:54:4e:b2:46:61:e0:37:87:61:
3c:4a:11:b6:ef:10:ec:92:9a:85:42:1d:bb:8f:22:
dd:5f:33:60:5a:a7:16:aa:4c:1b:c1:27:d8:65:b0:
7a:2a:d5:34:d4:eb:a1:6f:d6:64:dd:71:56:3f:f0:
90:ad:87:6a:9c:02:1c:07:9e:7c:d6:c9:e0:82:d8:
4f:4d:90:f4:b1:ce:88:7a:88:3c:10:0b:53:0d:7a:
9a:3e:d1:f9:1e:bc:cf:9c:7e:58:e8:c0:23:03:e2:
b4:b7:a5:2f:64:91:3f:8b:d3:aa:73:c1:7e:83:0e:
69:8e:7c:51:2c:47:14:28:7a:c6:d7:1e:62:49:cd:
53:e9:24:c9:e0:0e:4c:61:a5:e0:50:06:56:2b:ae:
d5:67:45:55:89:a6:9c:ef:1b:92:49:2b:0f:51:43:
03:57:80:d8:4d:31:00:c2:0a:17:22:d5:9e:14:1f:
a5:f9:a5:c1:02:9f:75:12:ea:0f:23:b0:49:7d:a9:
18:61:68:00:6b:60:82:7f:bf:97:8f:a9:65:e1:a2:
3f:13:a7:9e:0a:e9:c2:d7:6e:6b:08:4c:c4:4b:7d:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1C:DA:7E:B0:7E:8F:B6:5F:63:8F:B5:EF:C3:29:29:EF:2C:84:B0
X509v3 Authority Key Identifier:
keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:86:a4:ef:53:e1:93:cd:57:9f:43:36:a7:77:9a:bf:4d:7a:
35:49:82:5d:69:2f:39:6e:b8:2f:ea:5f:39:24:f7:fa:91:2b:
7e:6d:1e:12:fb:55:d1:62:5c:d4:05:f1:f3:82:98:89:e6:14:
8a:f4:66:e0:76:d6:52:62:6e:a8:cc:aa:2e:73:4a:1a:05:aa:
81:dd:52:af:87:1e:d1:05:96:88:9a:af:98:24:86:9a:be:de:
38:41:53:54:68:81:e6:50:51:a4:b6:f0:39:42:65:48:ba:a1:
84:22:b4:59:74:a2:a2:2f:3b:7d:0b:58:ef:9a:19:0c:3f:05:
01:e2:38:d7:40:11:5c:14:a1:0d:98:56:0f:8f:08:27:30:61:
5f:75:ca:24:e6:ba:09:21:b3:7f:df:e5:93:50:34:14:d4:45:
93:25:4c:a3:83:e9:7e:a6:df:11:59:46:f0:41:14:ec:16:a1:
f1:58:50:b1:6d:4b:ec:0d:60:11:04:9a:a4:7d:ab:64:45:16:
0e:3c:37:50:ab:8d:b1:c7:59:4e:eb:a9:24:66:00:ae:ba:d0:
f4:fc:46:50:4b:ee:78:40:2f:8d:65:4d:dd:54:5d:db:3b:d3:
55:a6:2e:89:1c:47:d3:39:5e:ef:ee:67:a5:3a:5e:60:12:5b:
47:bc:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:01:25 2026 by rpki-client