
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier: /CW4Zgxm7YTQ2wZwc12QAQR3fTv45R6YCGBd1NDFmQk=
Subject key identifier: 42:20:46:0F:CE:EA:4C:9E:BD:39:60:B2:87:CF:51:38:B0:D4:3B:F3
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number: 0133
Signing time: Sat 13 Jun 2026 04:10:16 +0000
Manifest this update: Sat 13 Jun 2026 04:10:15 +0000
Manifest next update: Sat 20 Jun 2026 04:10:15 +0000
Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: DkUz/D9j3SLbb3b1/6bwaMAcpk9Ru5e92brN/vDImJw=)
2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Validity
Not Before: Jun 13 04:10:15 2026 GMT
Not After : Jun 20 04:10:15 2026 GMT
Subject: CN=6a2cd828-e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:8b:bd:20:f6:4e:6b:61:ec:b5:96:b7:3e:
da:e4:37:3c:e4:24:43:98:01:3f:65:8f:f4:3a:09:
77:0a:e8:8f:b5:7c:85:d0:28:15:9a:bd:27:ae:80:
7a:77:ba:29:ce:ad:e1:5c:5e:cf:dc:e4:b8:75:b8:
e3:00:5b:bc:1d:fc:65:43:3b:d8:c4:02:93:9b:08:
49:8f:8b:d2:e6:06:27:13:e4:4d:2e:21:d8:d7:f6:
3c:20:2b:e7:a4:31:81:c8:51:cf:72:7f:4b:d6:12:
ce:ad:e3:ad:f7:79:96:3f:d1:13:fc:c2:34:33:25:
07:1f:7b:ff:3b:e5:ce:f6:32:9a:a5:81:39:84:90:
40:94:30:a1:f5:73:b1:60:b6:2d:2f:d1:df:14:b9:
4b:b5:dd:80:34:76:1c:88:9d:e9:f0:cf:fb:1c:a9:
00:8f:cc:5f:b8:11:d3:2a:bc:ba:a8:13:d1:77:4e:
15:4d:c6:f8:bd:3a:4c:a0:b8:88:d7:ed:0f:4b:23:
56:df:5c:ea:d3:d8:e9:d1:36:4e:60:33:30:b1:a8:
38:4c:8b:1d:74:97:4f:5d:ec:c1:08:cf:e1:78:f8:
66:7d:29:0d:a9:0a:59:ac:86:6a:59:85:0a:d3:93:
5c:b0:bf:4d:24:9d:d5:67:fb:12:6e:ef:88:9a:fd:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:20:46:0F:CE:EA:4C:9E:BD:39:60:B2:87:CF:51:38:B0:D4:3B:F3
X509v3 Authority Key Identifier:
keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:12:c3:13:e9:13:ad:1d:e1:b6:a8:31:c8:ab:78:78:d0:7d:
5d:6b:5c:60:44:2d:30:26:44:61:53:83:ac:99:2a:6c:02:50:
e1:ff:ca:84:ec:b3:1c:4c:9c:33:0c:8c:94:af:c8:b7:52:5f:
d9:b3:9a:eb:2c:82:c4:7b:3e:d2:b8:aa:40:3f:4c:7a:cb:ac:
06:98:ca:3d:70:64:3c:28:80:7b:91:08:25:f9:bd:f4:a8:76:
73:63:7e:e5:19:33:07:95:c8:9d:21:e8:bc:87:a6:19:b9:5c:
1b:22:77:83:ba:68:e4:3d:d8:62:53:62:8f:cb:db:30:4d:e3:
07:ac:de:87:3e:04:12:e5:cf:6d:fb:41:61:c1:af:bf:25:e3:
be:ea:e8:03:49:47:e1:5e:8c:27:ea:bb:27:26:0b:10:6d:13:
fc:ef:26:0f:46:c7:21:29:02:66:70:66:b5:a1:d5:db:ef:ed:
36:5a:78:6c:00:1d:49:01:d0:b3:c4:4f:27:c6:7f:76:0c:40:
01:a4:38:b7:e0:39:dc:ce:07:61:83:36:49:71:26:a5:99:cb:
4a:65:8a:18:70:88:2e:c5:aa:52:c7:ce:0f:15:01:fa:31:e9:
2a:8e:57:68:d3:51:a6:a6:6e:15:d7:d4:67:ea:04:e5:99:61:
27:a7:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:52:41 2026 by rpki-client