
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File: MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier: X9IB3vY4Nz7J12trvdFOiTF+Mu5H1zN3fX2ycF5G0LY=
Subject key identifier: 5B:04:A4:0C:A3:D7:AA:16:10:7A:20:98:3A:8E:47:9C:59:DD:69:97
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer: /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial: 0ED2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number: 0EC1
Signing time: Sun 01 Mar 2026 23:51:02 +0000
Manifest this update: Sun 01 Mar 2026 23:51:01 +0000
Manifest next update: Sun 08 Mar 2026 23:51:01 +0000
Files and hashes: 1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: 17/LqUM9aanB8sJ9nsFAflqHJ69CuFCC3ASQa89s9eo=)
2: 5822028E51F811EAB221F834C4F9AE02.roa (hash: /vki4nv9qNLzdhn7evv4ApCXpd+ElpmuHNXoe4NAjn0=)
3: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: ntbpVFLDrEdN+j6iHi8qWs51BS9242lcRYo0r3xyGow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3794 (0xed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Validity
Not Before: Mar 1 23:51:01 2026 GMT
Not After : Mar 8 23:51:01 2026 GMT
Subject: CN=69a4d0e6-9b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:98:ea:26:4f:9e:08:25:3f:c4:fc:ef:e0:
c1:d6:68:0a:2b:c2:6a:3b:52:b9:05:16:7a:1e:2f:
ed:69:bc:50:02:44:71:d1:cd:86:b0:7d:e7:db:43:
fc:0a:1f:b1:a6:45:83:90:9c:c3:37:05:2c:9f:08:
24:84:1a:69:8f:fd:cc:a6:05:35:f7:78:0f:bf:7a:
86:f5:70:bd:62:ea:a3:aa:df:80:7c:a4:d2:b0:2b:
44:95:80:f3:03:b0:65:a9:84:c3:a4:64:2d:60:08:
5c:7b:4a:eb:05:89:46:26:e4:f0:a7:8f:00:4c:d6:
06:f2:64:ca:94:a6:b5:28:52:b9:32:2b:cf:76:ee:
2c:08:04:c5:2d:66:31:89:02:4e:ca:ff:9a:b6:0f:
06:6b:7c:c9:13:27:68:05:67:b4:30:16:e8:56:55:
44:b9:02:bc:e8:78:99:68:ce:a7:4a:cb:75:73:43:
89:50:ab:f4:34:30:ec:67:e0:ea:0c:39:e2:db:45:
76:15:d4:c4:dd:e3:9e:1a:88:86:eb:8a:d9:84:b9:
77:2f:2e:32:44:5a:17:b7:b5:85:cc:4b:3e:e5:47:
8e:32:bf:59:e0:34:fb:77:07:f0:00:32:19:f4:e6:
4d:9a:5b:82:c3:64:65:c4:48:d1:75:76:4a:3e:3e:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:04:A4:0C:A3:D7:AA:16:10:7A:20:98:3A:8E:47:9C:59:DD:69:97
X509v3 Authority Key Identifier:
keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:21:86:c3:86:d0:8f:e4:0e:d5:a8:28:0f:72:33:31:0c:06:
03:73:4f:af:18:c8:c2:0c:c0:d9:c7:2d:e1:ba:a2:16:f8:9b:
8d:ff:c5:b9:2a:4e:a8:04:c2:8e:4e:22:17:80:65:d4:c8:d4:
3d:dd:57:95:69:55:ab:60:bf:a6:f5:05:27:2f:66:ce:8b:9b:
0d:4c:6f:a0:2d:cf:04:fd:85:fa:09:1c:88:0e:93:63:07:70:
f2:a7:0b:e9:83:73:1f:95:46:91:2c:bb:bd:c1:15:fd:00:f7:
f8:f4:75:5a:f5:04:30:5e:0b:89:5d:eb:27:13:23:ee:4f:2e:
0e:19:08:51:f3:f7:b2:90:ea:fe:91:a0:cd:52:6e:9d:69:1e:
cf:17:64:6c:cc:49:14:8b:2e:40:b3:76:5f:cf:e3:9b:32:fc:
4a:f9:98:1f:c0:b6:e0:f2:03:a1:f4:47:fc:c0:67:d5:1d:53:
01:dd:9c:31:10:cd:83:17:53:ca:40:46:23:e5:1b:67:a1:77:
7c:6e:0f:4d:d9:85:b7:69:1e:48:40:f8:ac:c1:87:10:34:a0:
04:54:bf:70:03:12:68:a8:69:4f:ad:73:32:67:f0:14:8b:97:
14:13:97:cf:1c:c4:6e:8b:f2:9b:57:f9:f1:64:bd:90:1c:2e:
a0:42:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:25 2026 by rpki-client