
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier: atVd4tcN0WQAPzTd2mdpU6CFNVDENBKqL54/k+Y/z3g=
Subject key identifier: E9:89:10:81:1F:0D:74:93:33:1F:AB:76:FD:8C:B0:D1:77:22:83:21
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial: 0C32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number: 0C14
Signing time: Tue 18 Aug 2026 19:07:29 +0000
Manifest this update: Tue 18 Aug 2026 19:07:28 +0000
Manifest next update: Tue 25 Aug 2026 19:07:28 +0000
Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: flIK0Ui/q713dc8pI9WzlNvUvxnIsQkpzLvNqBvQVFw=)
2: 90FE23B83D5011F1860BF56AA6833773.roa (hash: XUvqr+C7+uQgBL9ktwJt5Z6F/YsCiQrJ061Wa1rTzxI=)
3: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3122 (0xc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Validity
Not Before: Aug 18 19:07:28 2026 GMT
Not After : Aug 25 19:07:28 2026 GMT
Subject: CN=6a84ad70-d6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:d1:1e:af:ec:16:6d:ad:8c:7e:84:4f:5c:
25:18:b7:c9:1e:81:8d:52:e5:18:0d:9b:74:00:47:
37:40:42:d0:23:b2:a1:69:c0:2a:b9:54:a5:22:18:
61:d1:21:18:ce:e7:2c:85:96:fa:18:b9:d9:8b:45:
33:73:37:42:2c:81:26:6f:9b:c2:49:6e:9a:47:1f:
39:cd:cb:17:7f:1a:51:23:aa:cc:e4:ff:6f:b7:63:
b5:46:34:9a:3b:0f:59:a7:32:4d:da:79:ed:e1:9c:
bb:12:46:83:7a:ff:a6:94:7a:16:49:e7:6e:7b:ff:
2e:c6:54:27:f6:e8:b3:5f:ee:a8:5c:1b:1a:36:de:
f5:c3:2b:17:fe:06:56:a1:45:a7:dc:20:85:40:fe:
f8:7f:18:94:72:80:84:50:dc:fd:b2:58:3c:f4:cb:
20:e8:04:b9:5c:b2:da:01:34:64:64:98:b1:d0:23:
4c:32:3b:2e:c2:d0:8f:a9:79:bf:eb:3a:85:cb:33:
4b:8e:e6:a3:44:4a:3d:6e:82:f9:4e:3a:0b:32:8d:
d1:a9:f6:66:bb:76:a3:c0:95:b7:a9:61:8b:1a:95:
66:bc:f1:da:e4:22:1e:0b:ed:69:9f:7c:ce:52:66:
60:73:0e:c1:fa:c1:d9:c9:26:85:4b:5e:86:ad:aa:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:10:81:1F:0D:74:93:33:1F:AB:76:FD:8C:B0:D1:77:22:83:21
X509v3 Authority Key Identifier:
keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:7b:65:f4:8a:6b:80:b1:74:aa:b1:dc:1c:af:85:92:ef:65:
99:73:75:64:93:e2:eb:48:12:14:dc:a8:e8:99:8a:ce:d4:8d:
a7:99:f5:22:9f:10:5b:7e:8a:6a:d6:32:ea:c3:2e:b9:7c:e2:
1a:a1:8f:6d:fb:9a:7b:e3:bd:5c:66:da:3c:cd:91:49:ee:cd:
d9:e2:13:fe:f5:8a:f7:38:25:ec:c4:d0:87:0a:bd:c5:e6:78:
2a:a6:87:94:c4:f1:85:90:8d:eb:29:ea:23:1e:b1:d7:60:02:
78:b3:2a:78:4d:5e:b5:16:9e:99:93:9e:c2:13:7b:78:93:ae:
a2:c4:ac:00:db:96:a4:fb:fb:e3:36:ef:e4:2a:31:45:20:68:
e9:9e:df:b7:76:a7:b3:8f:30:11:b6:0c:43:fe:54:e7:bf:d3:
c0:b1:1c:8e:a7:d0:f3:95:1b:59:4e:d2:a6:55:e3:2c:12:20:
68:fb:30:38:4b:88:5e:ce:07:e9:a2:11:e1:81:39:01:d5:ff:
4d:4f:97:cb:1d:9b:ae:db:ba:fe:06:8f:d7:6b:1c:76:87:a4:
d9:53:2e:2e:c8:ec:19:bb:d0:d4:41:28:d7:6d:e5:66:5c:5a:
02:a8:65:ba:16:97:1f:50:98:50:80:06:bd:fc:94:31:f3:e2:
6f:11:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:32 2026 by rpki-client