
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json)
Hash identifier: PVrsP7Y9rprT8tbkwwbRMLfPp10lCEBWbNvnEgMEaOI=
Subject key identifier: 2B:8D:14:4C:94:B2:D5:1B:AE:90:38:E0:7C:DA:A0:AC:C3:E6:9E:7D
Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Certificate serial: 0CE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
Manifest number: 0CE0
Signing time: Mon 02 Mar 2026 02:08:46 +0000
Manifest this update: Mon 02 Mar 2026 02:08:44 +0000
Manifest next update: Mon 09 Mar 2026 02:08:44 +0000
Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: xpfHr6LQ4H0Fsz85FD8LcOhyJ4lTtzg8GCKwJP9UkwE=)
2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: BxdToQUnq7s7IiCDOp8OROzzu8gjSdJZbTs5vKx24f4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3304 (0xce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Validity
Not Before: Mar 2 02:08:44 2026 GMT
Not After : Mar 9 02:08:44 2026 GMT
Subject: CN=69a4f12e-8530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:cc:3e:8a:de:e9:1b:50:31:ea:aa:d7:bc:
01:8b:1b:e1:b0:5a:08:c4:51:c5:44:46:9f:9b:07:
00:92:a4:84:46:67:f9:47:b1:4c:2b:e4:19:07:f4:
07:2c:30:e4:aa:89:f6:5a:be:b0:67:f8:80:cd:f9:
8c:1b:63:24:56:4a:4f:f9:c1:cc:ed:86:7e:b5:5e:
97:b0:20:77:0c:39:1e:5c:51:ca:d9:5a:51:2d:10:
08:82:cc:cc:16:55:2f:5b:69:3c:05:80:69:89:b8:
d1:10:17:53:74:f6:3c:73:bc:2c:2e:b6:14:c2:97:
2c:72:ff:36:da:8b:35:36:c5:6a:a5:6f:90:41:c9:
75:8e:f8:bb:64:b1:79:bd:ec:0f:9e:9b:0b:21:c2:
df:a6:30:b0:a6:e6:8f:eb:52:d7:9e:59:f3:d7:08:
e7:d6:57:17:31:c1:24:2c:9e:8f:37:5a:0b:46:32:
7d:7e:4f:02:83:84:8a:d0:40:26:c5:9f:5d:6b:7c:
57:95:b4:28:75:a1:78:83:dd:4a:0a:2a:74:ed:f4:
95:4e:40:4a:61:b7:7a:81:fb:f9:64:a5:40:02:4b:
db:fe:0e:a6:1e:f1:04:9e:d3:89:8a:80:a6:18:a2:
78:dc:8a:dc:fd:81:d8:de:99:0b:b5:d2:83:9d:86:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:14:4C:94:B2:D5:1B:AE:90:38:E0:7C:DA:A0:AC:C3:E6:9E:7D
X509v3 Authority Key Identifier:
keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:8d:ed:6a:4f:fa:7a:d4:b2:4b:22:6d:79:26:d9:2b:30:
b1:a2:ac:60:54:5d:96:1b:91:9b:1a:9b:28:6b:09:34:96:d1:
8f:a2:24:16:e9:bd:2d:b7:85:f0:14:fb:61:a7:1e:0a:c9:7e:
d1:05:a9:e4:e8:d5:9d:59:29:c4:be:45:65:27:6b:43:97:0d:
32:a9:ef:fb:3d:ae:c2:4a:fb:82:21:46:18:77:3f:0f:5b:47:
bc:08:ed:5a:ef:a4:b8:f8:9f:b3:b6:fd:21:f7:a4:9a:e1:26:
cd:fe:c5:68:c7:7e:d0:86:8b:7c:49:e5:f4:99:93:bc:2b:60:
bd:1f:2a:3d:d0:1a:61:53:fa:a1:8b:98:95:82:28:3c:96:f8:
99:a9:75:a3:91:2e:e3:05:ae:7b:6b:2e:0b:a8:5f:42:2f:b8:
29:1a:3f:f9:57:37:d8:e2:a3:e8:4d:e7:15:47:a5:6c:c9:81:
2a:a7:b5:55:b0:32:c3:e8:54:3b:c1:f2:1c:50:6b:17:bf:b7:
22:f3:af:eb:43:c5:fe:f8:3b:81:bb:27:eb:18:2c:7a:1f:91:
b7:bc:6c:3b:32:0e:79:98:50:9d:03:6b:6d:26:7e:38:9b:90:
fd:4e:b6:5d:9b:6d:bb:1c:6e:f6:9f:5c:c2:e0:b9:f9:23:4a:
20:48:5a:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD
MEQ4RTkyMjQwHhcNMjYwMzAyMDIwODQ0WhcNMjYwMzA5MDIwODQ0WjAYMRYwFAYD
VQQDEw02OWE0ZjEyZS04NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurLMPore6RtQMeqq17wBixvhsFoIxFHFREafmwcAkqSERmf5R7FMK+QZB/QH
LDDkqon2Wr6wZ/iAzfmMG2MkVkpP+cHM7YZ+tV6XsCB3DDkeXFHK2VpRLRAIgszM
FlUvW2k8BYBpibjREBdTdPY8c7wsLrYUwpcscv822os1NsVqpW+QQcl1jvi7ZLF5
vewPnpsLIcLfpjCwpuaP61LXnlnz1wjn1lcXMcEkLJ6PN1oLRjJ9fk8Cg4SK0EAm
xZ9da3xXlbQodaF4g91KCip07fSVTkBKYbd6gfv5ZKVAAkvb/g6mHvEEntOJioCm
GKJ43Irc/YHY3pkLtdKDnYZOUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuNFEyU
stUbrpA44HzaoKzD5p59MB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy
MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt
RDk4Z0RuaWJJNkxBMk9raVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJreN7WpP+nrUsksibXkm2SswsaKsYFRdlhuRmxqbKGsJNJbRj6IkFum9LbeF
8BT7YaceCsl+0QWp5OjVnVkpxL5FZSdrQ5cNMqnv+z2uwkr7giFGGHc/D1tHvAjt
Wu+kuPifs7b9IfekmuEmzf7FaMd+0IaLfEnl9JmTvCtgvR8qPdAaYVP6oYuYlYIo
PJb4mal1o5Eu4wWue2suC6hfQi+4KRo/+Vc32OKj6E3nFUelbMmBKqe1VbAyw+hU
O8HyHFBrF7+3IvOv60PF/vg7gbsn6xgseh+Rt7xsOzIOeZhQnQNrbSZ+OJuQ/U62
XZttuxxu9p9cwuC5+SNKIEhaMg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:49 2026 by rpki-client