
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json)
Hash identifier: 9/1uNQXceR7Qbzfqs8DzkKIgmvfSdAFeIJifAR3wKZw=
Subject key identifier: F4:AB:E7:0E:35:7A:2F:DA:1A:5E:22:DA:2D:C1:AD:FC:11:C1:B5:DE
Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Certificate serial: 0D36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
Manifest number: 0D2D
Signing time: Sun 26 Jul 2026 18:24:33 +0000
Manifest this update: Sun 26 Jul 2026 18:24:32 +0000
Manifest next update: Sun 02 Aug 2026 18:24:32 +0000
Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: 4J7y8HCBYAxIWfMCqJ6OShg2RLQlWYeTJrCoM3A036M=)
2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: 6RXCUtuNRAX3VWDYFd4VJq3F82wcddefS/3XHjReS6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3382 (0xd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Validity
Not Before: Jul 26 18:24:32 2026 GMT
Not After : Aug 2 18:24:32 2026 GMT
Subject: CN=6a6650e1-fe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:e2:7e:28:5c:78:1b:c2:9b:93:36:58:b5:
cc:d2:d0:8a:b8:65:93:a7:82:67:d3:93:35:35:5f:
5a:29:a7:24:2b:60:d0:19:23:62:e2:f0:bb:df:df:
f4:98:df:06:d1:11:0a:05:c1:1c:24:ec:09:07:3f:
95:3c:d2:74:8f:49:44:af:92:d5:a0:a3:fe:4f:e0:
18:94:5b:1b:7c:c2:31:8f:24:a6:3f:f5:7d:f7:ff:
f0:9a:00:51:61:d8:14:54:00:b1:69:53:39:fe:66:
9c:55:f9:ce:6f:2a:be:84:60:d8:b9:d8:31:27:a1:
01:7b:45:6c:3d:68:91:62:37:d4:f2:91:f2:c7:26:
c5:f3:c3:48:a0:e3:9c:23:f2:ec:8d:af:04:bc:61:
dd:9c:c7:b3:98:be:ec:52:ea:d5:52:3b:d4:20:ec:
90:83:d3:30:93:4e:8d:ca:8c:30:72:4b:f3:5f:60:
4f:05:7d:47:19:07:37:89:32:55:9b:82:6e:a1:2f:
ef:6c:f4:c4:76:20:05:ee:80:c3:d3:38:a8:c2:c2:
37:8d:5a:a1:df:b0:b0:46:20:ef:02:d8:10:42:5d:
dc:5f:ce:aa:46:e9:17:2d:d6:93:6e:5e:00:4d:12:
aa:a9:43:e9:37:37:65:ff:e0:37:25:8d:32:9c:6c:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:E7:0E:35:7A:2F:DA:1A:5E:22:DA:2D:C1:AD:FC:11:C1:B5:DE
X509v3 Authority Key Identifier:
keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:c7:34:5b:87:ce:80:ef:5b:e6:2d:e2:ab:3d:19:0a:cc:9f:
09:5e:8f:af:df:5e:0a:e9:60:1b:eb:ca:23:c7:12:6c:41:fd:
0c:55:69:60:f3:e5:22:8d:2d:48:e0:8e:4b:95:7e:e0:02:3f:
4b:91:d7:73:c2:11:a1:38:cd:54:87:b9:5b:04:c1:26:c5:0d:
fa:16:12:9e:38:1e:3a:5a:51:57:cf:ae:46:43:6c:e5:1e:7a:
92:d5:fd:eb:ba:36:8f:ae:04:bb:9b:bf:62:24:c1:35:ba:52:
9b:1f:c2:dd:58:9d:1f:9a:d4:5f:fc:92:55:e2:2b:23:22:7b:
02:cb:bf:45:41:61:07:fc:ee:8e:e8:a4:be:4b:54:2c:bb:59:
3d:77:52:3e:a2:fb:6a:a1:04:b1:2f:e1:79:4e:7b:39:1c:5f:
5c:14:41:70:3f:1f:2f:7b:57:65:e6:a6:31:4c:3e:f5:fd:85:
21:da:3a:68:e7:e1:44:48:1d:2b:0a:09:fc:39:8f:6f:b6:5a:
d0:e6:c2:5a:c1:17:a1:dc:3b:cc:6f:79:2b:60:ff:94:27:5a:
3e:23:88:fc:7c:c2:98:f5:f6:08:c6:fb:25:f8:ca:80:a6:5a:
75:2a:d7:cd:c8:c5:50:df:a1:5d:ef:2e:06:73:a3:4d:bd:d8:
b3:a3:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:50:40 2026 by rpki-client