
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier: M0HJ6iGPrrd8oachJw7LC/WaKSrJrWKhpf/xGRSFdSE=
Subject key identifier: 67:BD:B0:7B:00:0D:A7:A9:0E:84:4F:D1:84:0B:4D:44:F9:00:AC:2D
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial: 0C15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number: 0BF7
Signing time: Mon 22 Jun 2026 18:53:38 +0000
Manifest this update: Mon 22 Jun 2026 18:53:37 +0000
Manifest next update: Mon 29 Jun 2026 18:53:37 +0000
Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: rrpoUlNbwDpfHjj4QdyLqOdBUfxcyATAwOROR+M1wzc=)
2: 90FE23B83D5011F1860BF56AA6833773.roa (hash: XUvqr+C7+uQgBL9ktwJt5Z6F/YsCiQrJ061Wa1rTzxI=)
3: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Validity
Not Before: Jun 22 18:53:37 2026 GMT
Not After : Jun 29 18:53:37 2026 GMT
Subject: CN=6a3984b2-df01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:bb:60:26:c4:37:77:4a:58:8c:1e:45:7c:
70:b0:8f:8e:16:34:5b:ed:01:b8:d8:0c:02:f4:e8:
28:be:44:b3:8d:dc:5d:69:b1:98:be:40:d8:31:a7:
3c:a9:ec:04:46:98:b9:b2:2f:a1:52:7b:3f:81:3b:
26:dc:2c:84:2d:5d:51:af:9a:16:1d:d7:31:50:13:
f2:75:db:ae:24:88:bc:63:58:ee:25:84:e1:45:ab:
4f:be:33:80:3b:de:38:f4:35:c6:77:db:45:33:39:
05:7d:83:88:4c:ef:10:7d:f6:d4:41:4b:3a:da:18:
5a:b5:18:e6:1a:ce:2d:c9:52:c6:e2:1b:01:40:75:
4f:bd:cb:7d:51:df:43:98:eb:ce:34:d2:99:34:fa:
47:90:23:28:10:03:2a:23:d0:5b:ce:95:33:9d:c3:
a6:33:04:95:79:9c:20:06:96:17:5b:61:a1:73:57:
24:40:bc:77:61:81:cc:d9:cb:4e:1b:4b:fe:4a:83:
62:8c:ba:e3:d5:dd:96:25:4a:8b:65:18:a7:5d:65:
61:79:e9:89:4c:24:52:64:c7:72:f6:c2:3a:90:c5:
5d:9e:b2:19:8d:b7:8d:66:58:75:07:dd:8d:11:45:
70:bf:eb:57:49:9c:c9:03:82:13:ca:5c:04:df:6c:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BD:B0:7B:00:0D:A7:A9:0E:84:4F:D1:84:0B:4D:44:F9:00:AC:2D
X509v3 Authority Key Identifier:
keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:2b:6b:65:3b:61:0a:62:51:45:0a:1e:2f:26:e6:7c:a3:e8:
b5:df:a5:bd:e2:89:90:11:29:63:66:d4:af:1d:8e:bb:c7:4b:
ee:2e:f7:4c:74:6e:35:6d:3e:b9:2d:f7:68:b7:12:44:ed:c5:
a5:b0:71:94:78:40:fb:0e:10:1d:9a:10:bd:c8:dc:e0:89:63:
47:5b:f1:46:3e:a6:f4:dd:7e:6a:8d:dc:35:9e:d8:4e:6e:ea:
a2:58:e2:57:12:fc:36:7b:a6:f9:14:9c:75:05:1c:ef:01:d7:
e4:46:ef:32:b2:6d:d8:b2:6c:e4:7f:b8:bd:6e:c3:e2:25:28:
50:70:2e:05:34:18:8e:03:1d:97:c8:2c:6d:a0:98:69:e6:36:
47:f8:a7:d8:23:20:a2:bd:8d:dc:12:0e:cf:5b:a5:d2:6c:d9:
4d:7d:97:c2:30:6c:b3:fe:66:96:92:51:2e:d9:04:db:fe:85:
82:f9:e8:17:3f:4a:56:79:a7:71:c1:e4:a7:7d:b3:5a:89:70:
f6:c6:53:5f:1d:35:01:fe:d1:0e:a4:2d:c8:ab:8b:f0:ed:f6:
b2:56:db:2d:84:e5:e2:51:26:d2:05:9a:91:1d:c3:2a:86:2d:
e2:55:b5:3e:a4:65:5e:24:5c:55:f6:69:74:3b:dc:ea:1e:63:
1c:ef:2d:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5
NjA4RTQzQTgwHhcNMjYwNjIyMTg1MzM3WhcNMjYwNjI5MTg1MzM3WjAYMRYwFAYD
VQQDEw02YTM5ODRiMi1kZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqt+7YCbEN3dKWIweRXxwsI+OFjRb7QG42AwC9OgovkSzjdxdabGYvkDYMac8
qewERpi5si+hUns/gTsm3CyELV1Rr5oWHdcxUBPydduuJIi8Y1juJYThRatPvjOA
O9449DXGd9tFMzkFfYOITO8QffbUQUs62hhatRjmGs4tyVLG4hsBQHVPvct9Ud9D
mOvONNKZNPpHkCMoEAMqI9BbzpUzncOmMwSVeZwgBpYXW2Ghc1ckQLx3YYHM2ctO
G0v+SoNijLrj1d2WJUqLZRinXWVheemJTCRSZMdy9sI6kMVdnrIZjbeNZlh1B92N
EUVwv+tXSZzJA4ITylwE32zZOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGe9sHsA
DaepDoRP0YQLTUT5AKwtMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE
QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0
UU16OUszQk9ZQ1NXQ09RNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4itrZTthCmJRRQoeLybmfKPotd+lveKJkBEpY2bUrx2Ou8dL7i73THRuNW0+
uS33aLcSRO3FpbBxlHhA+w4QHZoQvcjc4IljR1vxRj6m9N1+ao3cNZ7YTm7qolji
VxL8Nnum+RScdQUc7wHX5EbvMrJt2LJs5H+4vW7D4iUoUHAuBTQYjgMdl8gsbaCY
aeY2R/in2CMgor2N3BIOz1ul0mzZTX2XwjBss/5mlpJRLtkE2/6FgvnoFz9KVnmn
ccHkp32zWolw9sZTXx01Af7RDqQtyKuL8O32slbbLYTl4lEm0gWakR3DKoYt4lW1
PqRlXiRcVfZpdDvc6h5jHO8tqA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:14 2026 by rpki-client