
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json)
Hash identifier: LjPla5PF8r3ml/h5qfJKwyYbFDLgGUUsBI+9pkkpyoM=
Subject key identifier: C8:70:00:0A:89:D9:E4:C4:05:F8:27:12:A5:56:D6:79:E2:4F:64:A9
Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Certificate serial: 0D37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
Manifest number: 0D2E
Signing time: Tue 28 Jul 2026 18:16:03 +0000
Manifest this update: Tue 28 Jul 2026 18:16:02 +0000
Manifest next update: Tue 04 Aug 2026 18:16:02 +0000
Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: GwCqhOgx0mvs4/2Y3Cn/aTCNRRgPCHiXdAHsiZ2/oe4=)
2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: 6RXCUtuNRAX3VWDYFd4VJq3F82wcddefS/3XHjReS6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3383 (0xd37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Validity
Not Before: Jul 28 18:16:02 2026 GMT
Not After : Aug 4 18:16:02 2026 GMT
Subject: CN=6a68f1e2-f418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:86:c0:db:57:7e:b8:63:ce:be:61:3f:25:
ea:5a:8c:f5:62:96:c2:94:a5:51:68:12:c5:03:81:
6c:21:4c:47:cd:45:e1:d7:9b:da:16:3f:51:d7:fc:
40:bf:02:b5:b8:2c:d9:64:ec:f4:c1:74:c1:7f:a7:
67:f3:b3:49:34:4b:9a:47:f8:e5:21:1e:5f:4d:4c:
34:6a:93:d4:ff:d5:a9:ac:eb:f5:93:59:10:f7:8d:
86:75:33:37:fe:91:e5:d9:2d:c3:9e:57:39:e6:25:
7f:b1:7d:c1:6e:95:5c:85:3f:91:51:9b:94:86:27:
38:55:25:1a:88:c6:1c:a6:4e:ce:6c:42:cd:37:4e:
16:05:8c:08:36:0e:ab:28:8a:88:da:11:5c:7d:e7:
f2:d3:51:ac:2a:9f:ee:d0:02:55:75:e3:23:11:cf:
fa:ed:a9:8b:97:76:78:11:38:33:a3:7c:6d:01:ed:
8c:dc:64:8e:ae:87:1a:9d:4e:51:e5:4e:7e:db:dc:
29:c3:cf:c3:ba:d7:d6:8c:73:ae:3a:ec:04:df:3c:
f0:fb:dc:18:69:a0:0d:b7:d0:f9:eb:f8:8f:dd:50:
a0:46:1c:3c:59:4c:7f:1f:36:3b:5c:7a:06:7b:cf:
a6:db:d9:5b:d9:ea:ee:62:a4:df:d1:60:b9:90:70:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:70:00:0A:89:D9:E4:C4:05:F8:27:12:A5:56:D6:79:E2:4F:64:A9
X509v3 Authority Key Identifier:
keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7a:85:7c:fa:10:9d:5c:8b:52:f4:16:46:23:3e:b5:51:15:
3b:cf:e0:ea:0a:49:04:35:7e:b9:ee:1c:76:2f:f6:7a:c1:12:
7e:1d:13:05:a4:49:8c:39:29:e2:4a:59:6c:2d:3d:9f:4d:e8:
10:68:c6:f0:a7:54:ea:9e:90:9d:3f:34:4e:e1:ca:44:f4:d4:
ff:16:85:c5:dd:82:3f:3c:15:82:c1:df:d0:16:8c:ab:a3:56:
7e:16:77:67:69:cf:5e:4d:65:b6:df:f7:51:87:86:ee:93:8d:
31:64:2a:26:fd:ea:1a:bd:f5:b1:56:75:88:d3:7e:e1:e1:d3:
09:d7:79:59:c1:5f:ea:36:72:13:a8:2b:ca:31:8f:33:ea:90:
23:4a:52:72:73:dd:76:b9:0a:3b:6e:ce:bb:10:7f:e8:6e:af:
63:a0:35:f4:48:97:bf:b3:83:54:cd:19:b5:d0:04:ef:77:5e:
7f:8e:f6:99:4c:d7:e9:35:94:7f:70:81:b9:0d:79:46:1c:a3:
cb:fd:4f:fe:87:8c:96:f0:96:c5:f0:38:65:72:23:f3:72:40:
de:52:5c:13:1e:e5:32:f4:67:71:05:23:c3:4c:0e:ed:76:cc:
e0:46:c4:f1:fa:b3:14:2c:c5:91:f7:f6:80:fa:5f:c1:af:55:
e3:7e:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:45 2026 by rpki-client