
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File: MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier: TEhMrTIBfid8+2hLXycZiTrhNCRAgZC6c8cAd5vXJ7g=
Subject key identifier: B6:CD:2E:BA:30:CB:D5:86:C5:F6:6E:BE:2F:36:CD:7D:25:96:5F:28
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer: /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial: 0EEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number: 0EDA
Signing time: Thu 16 Apr 2026 17:35:01 +0000
Manifest this update: Thu 16 Apr 2026 17:35:01 +0000
Manifest next update: Thu 23 Apr 2026 17:35:01 +0000
Files and hashes: 1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: dPpZhCf+pb+O4/FIzZ9mGvPSGF0CIolQi2JgfLyXd4Q=)
2: 5822028E51F811EAB221F834C4F9AE02.roa (hash: 3FX6yd8ajXUCf1DvaodFv7wjS6jvEbFRhv/3yRD4WYA=)
3: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: xKR+1TqcXk1tuGXmRs5U35Hu6EeN0viZWiMmzSgp8ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3823 (0xeef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Validity
Not Before: Apr 16 17:35:01 2026 GMT
Not After : Apr 23 17:35:01 2026 GMT
Subject: CN=69e11dc5-9745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:ac:16:58:94:59:94:19:98:b3:a4:43:b7:
27:29:c1:e2:b5:e1:a8:66:1d:32:9b:37:d1:c8:ee:
a1:ab:20:52:4f:53:f5:bb:b7:96:15:59:e9:20:7c:
38:1f:18:1c:62:6b:dc:22:24:de:c2:fd:63:09:d0:
ef:64:62:22:a6:ee:65:4b:e7:bf:78:9e:1a:bc:fe:
b4:f0:7e:2e:19:a9:3f:01:b5:04:d9:8c:e7:f0:0a:
35:71:86:9c:f8:c0:f9:2f:94:43:6e:c6:44:a6:4c:
36:ea:e5:17:3f:29:47:88:99:43:a0:17:76:28:80:
8d:f9:41:be:80:0e:c8:e6:16:76:ef:bc:d9:f0:38:
2a:b3:e7:d9:5e:2b:33:65:4b:46:b9:d1:4f:a9:31:
32:05:3a:15:9d:c3:a5:9c:18:1d:56:2d:a6:64:0e:
c8:e9:17:73:6c:ef:3a:6c:5f:a7:f4:12:eb:02:ea:
31:5c:f4:c9:3d:26:61:45:14:bc:2a:5a:8e:ff:9c:
28:05:86:39:0c:f3:96:cc:3a:03:e1:3a:96:0b:bc:
1c:20:c9:1c:37:29:8e:8d:6a:32:44:23:f4:0c:ce:
01:44:cd:6b:a4:c4:38:8e:1d:36:67:52:9b:ba:0d:
e8:7e:9d:e4:23:07:43:4a:be:4d:6a:5e:65:97:28:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:2E:BA:30:CB:D5:86:C5:F6:6E:BE:2F:36:CD:7D:25:96:5F:28
X509v3 Authority Key Identifier:
keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:6a:b6:cd:14:a1:c2:22:6a:3c:4b:21:dc:85:57:f2:cc:
fc:c3:9a:21:cb:63:34:8c:91:98:18:87:fa:da:dc:d5:85:be:
64:6c:ac:ed:75:51:65:d7:b2:54:e6:88:06:d0:c0:62:31:b6:
ec:b9:83:b1:8b:f4:73:af:29:89:cb:cb:35:04:5a:2c:66:5b:
97:32:b2:90:89:e8:83:1f:eb:e4:74:a6:c8:7a:fc:fb:51:f4:
cc:7d:3b:a3:49:3b:b7:aa:c1:ec:83:1d:51:fe:85:dc:d8:9a:
02:57:80:0d:1e:dd:d5:03:f5:b8:6b:1f:8a:11:ef:02:36:25:
90:2e:f9:7b:c3:7d:5f:6a:aa:1c:cd:e4:2f:0a:ad:31:c0:a7:
c4:cf:c8:37:5b:a2:8f:2d:25:f2:dc:33:84:6a:0c:23:13:35:
a1:0a:4f:7b:46:1a:6e:f9:fe:99:52:f7:33:ac:1c:d4:16:52:
b4:88:fe:bd:aa:05:e7:bb:29:4f:b3:0e:d3:da:a4:45:01:77:
ab:d3:c9:72:9b:81:ee:48:09:5b:b1:a1:3c:1a:9a:52:19:47:
55:ae:cd:2a:58:86:41:ba:6e:ea:ea:22:06:e8:ac:6c:71:a2:
55:86:27:d2:b8:d3:fe:60:0a:d4:95:aa:87:95:43:b1:a7:6b:
1b:d8:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:00:55 2026 by rpki-client