
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json)
Hash identifier: in9rKicfQcYL6n4XGlWZeT5HWu8z2g3kegDQvNsJYr0=
Subject key identifier: A7:B5:91:70:00:F0:30:EA:89:98:7A:F2:32:09:83:BF:73:90:80:8E
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial: 0BAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
Manifest number: 0B8A
Signing time: Tue 28 Jul 2026 19:26:37 +0000
Manifest this update: Tue 28 Jul 2026 19:26:36 +0000
Manifest next update: Tue 04 Aug 2026 19:26:36 +0000
Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: 7Bnp0XpS0WbT533nRpuEZpT+dXmLUohJJxXcM8bpuK4=)
2: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: 26lgAN5q1jBbqIZ//Uh2LoUZjyzoYehnxO9iBj1I6uw=)
3: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: riMNb3NhwBf/w1oOR93/weOT1W1k0o3vTmjn2YYoeRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988 (0xbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Validity
Not Before: Jul 28 19:26:36 2026 GMT
Not After : Aug 4 19:26:36 2026 GMT
Subject: CN=6a69026c-b5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:d0:9c:f7:7f:5c:05:fc:28:f5:ca:a0:83:
eb:bc:cc:e2:48:7e:73:5e:4a:f3:01:9b:f6:ef:1b:
2b:cd:7d:4f:ae:35:c1:d9:c8:4b:fd:92:54:33:ed:
0f:4a:76:38:1e:5d:d3:46:d7:e5:2f:50:4c:1d:ac:
b9:84:8f:1f:6c:a4:cb:87:56:07:0e:00:37:f5:d7:
5b:16:27:88:dd:2c:04:a8:d8:5a:03:f4:fb:d5:ab:
f8:ba:0f:48:d2:ab:a9:5f:95:57:7c:30:d4:b0:1f:
7e:4f:44:2f:eb:33:34:cb:69:4f:d5:7d:0b:de:96:
7b:37:a9:57:3f:3d:6f:cf:ea:d5:68:8a:50:7d:b5:
5f:38:83:b8:42:6b:cc:13:0e:33:00:a7:f9:1a:67:
92:02:46:69:44:d4:78:20:5b:cb:0a:8a:e1:47:75:
48:15:06:6d:8a:3e:1d:4d:8c:4c:f2:14:d7:09:4f:
5e:54:52:a0:fc:22:67:65:1d:df:53:12:bd:16:6f:
14:53:eb:06:c1:ec:26:61:d0:9c:a4:13:29:e5:1f:
ec:7f:91:45:e5:0e:0a:f9:66:0f:25:71:de:0a:de:
bb:5d:01:7e:1e:ea:96:b8:fd:3d:68:27:81:00:fb:
18:72:22:2c:2b:50:9e:d2:15:ac:cf:92:68:be:ec:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B5:91:70:00:F0:30:EA:89:98:7A:F2:32:09:83:BF:73:90:80:8E
X509v3 Authority Key Identifier:
keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:dd:4f:dc:70:ce:c3:5e:8e:34:53:10:36:97:1c:98:e0:
56:7f:93:46:88:8a:9a:34:b7:d7:e8:bc:33:e9:db:42:4e:66:
4f:3b:5b:97:ae:27:5f:e9:f7:3f:2f:f5:81:25:30:94:e5:a0:
32:30:b9:84:53:97:17:02:ad:6d:d4:b4:4b:67:65:f3:aa:e6:
90:6c:78:83:6e:9d:5a:6c:4c:4d:81:7b:4b:7d:78:d2:7c:03:
e8:0a:f6:b9:a5:8a:62:65:ed:d0:eb:b2:7a:b6:37:27:4a:f5:
0e:1a:88:dc:db:5f:29:08:f8:0e:0e:f8:62:d8:b9:d2:e2:4b:
ab:6f:ba:e7:ae:0f:9d:d2:94:06:47:7b:e0:12:33:56:60:be:
9d:1d:98:d4:68:2a:1b:dd:ef:34:89:c2:4f:5c:39:26:92:be:
e8:9a:67:0a:cd:16:13:d8:f2:9a:a4:db:df:8c:30:9f:4d:30:
6a:78:60:4a:f4:26:99:84:6f:25:b8:71:28:bd:8f:99:a2:16:
29:d8:56:6b:a8:5e:52:82:57:ca:3f:f3:61:f0:d2:dc:c4:1c:
93:4f:43:1f:af:36:29:a3:64:cb:93:67:08:e4:ff:df:ee:ce:
04:b4:16:f8:f6:12:9a:d4:b6:62:0b:b6:a9:3e:52:fb:9c:ad:
a8:e6:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:13 2026 by rpki-client