
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier: RYse+Teimf13zF3xeuN/8s2r9leaLYFdntJ4wWpVlBk=
Subject key identifier: 8E:30:F2:83:AE:84:87:2D:8C:15:DC:A4:F6:7B:22:42:4C:C8:A2:84
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial: 0C10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number: 0BF2
Signing time: Fri 12 Jun 2026 18:55:48 +0000
Manifest this update: Fri 12 Jun 2026 18:55:47 +0000
Manifest next update: Fri 19 Jun 2026 18:55:47 +0000
Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: /QTWxjIEzuGSDQvkImksWQzywpjalJPyJrnpVfL0jUc=)
2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=)
3: 90FE23B83D5011F1860BF56AA6833773.roa (hash: XUvqr+C7+uQgBL9ktwJt5Z6F/YsCiQrJ061Wa1rTzxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Validity
Not Before: Jun 12 18:55:47 2026 GMT
Not After : Jun 19 18:55:47 2026 GMT
Subject: CN=6a2c5633-9895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:3a:fe:75:04:fb:a5:f9:1f:e5:52:c9:d9:
21:b8:a4:33:e5:6d:b6:b1:c8:eb:b4:97:d7:50:4e:
4e:93:48:1d:9c:b2:8f:ad:4e:df:0c:f7:ec:a3:c3:
e2:39:38:64:be:98:da:55:e1:56:96:03:1d:fb:1e:
7d:77:61:1b:18:99:0f:8b:81:2e:2b:29:34:5e:f6:
ed:f1:29:2a:3e:ac:c1:0c:42:a1:9f:11:d0:3b:69:
42:24:33:3b:84:bd:d0:3b:fc:e3:ea:c3:bc:9e:86:
83:db:ac:80:a4:90:96:36:c5:24:5a:1c:6e:e2:3f:
23:fd:3f:75:8a:cc:e1:90:4a:07:b7:81:d5:b1:a6:
16:73:06:02:36:d4:6f:c5:06:9b:53:ce:eb:73:c2:
a7:14:58:35:45:cc:f1:3e:05:1e:21:ce:c1:ed:aa:
27:e3:2e:fa:3e:68:f5:d8:8b:d6:c8:c3:3f:ab:f9:
82:e5:99:94:6f:b7:f7:4f:d5:f3:63:d5:eb:84:84:
41:a5:f8:5e:56:16:36:17:09:f5:7c:6e:6e:82:78:
cf:55:bc:3f:e1:4f:31:b7:df:38:87:6c:62:70:72:
e7:30:5d:83:11:18:ef:ef:f2:7a:2e:67:9a:e5:15:
f4:98:9a:62:dc:fa:c0:40:00:4c:f0:6b:3a:c9:e1:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:30:F2:83:AE:84:87:2D:8C:15:DC:A4:F6:7B:22:42:4C:C8:A2:84
X509v3 Authority Key Identifier:
keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:72:e3:5b:77:50:dd:b7:c6:1b:91:42:66:00:d4:4f:8d:ac:
02:df:a0:a8:1f:8b:10:f7:b0:15:95:f0:bd:23:fe:91:15:da:
ab:a3:1c:d6:d2:1d:71:b5:62:bf:e5:a1:7c:ce:9f:b1:f7:e9:
62:2b:db:ff:4e:90:37:49:02:7e:9d:f7:6b:2a:3f:e2:2f:54:
8a:98:93:5e:f5:3c:8b:ba:b4:06:31:c7:36:02:a7:8e:7d:cf:
3a:90:e3:3c:a0:b3:3c:62:9b:6a:49:85:59:0c:17:d6:42:6d:
3e:6f:12:d6:5b:4f:ec:59:db:ba:ec:68:59:27:6d:3f:1e:3e:
4e:40:43:83:81:92:89:b0:d4:d4:c3:24:d0:44:90:a0:80:7f:
37:e8:e7:23:ec:c3:7f:41:1d:40:f4:ae:a8:17:8e:74:a1:e6:
9a:06:8f:3e:1a:6e:ba:83:c3:6d:23:37:62:95:7a:23:25:f1:
b4:5b:a3:7e:6e:7b:26:4f:31:22:68:6b:3a:4b:9e:52:e4:18:
d1:79:31:93:b4:63:9e:70:f2:7f:31:4c:15:1b:dc:e9:61:0b:
4e:61:45:ed:1e:41:81:3d:2b:0e:bc:d6:89:2b:a5:bd:be:5b:
b5:87:eb:6a:cc:e2:a3:3a:0b:71:86:ea:02:32:c1:26:9f:e9:
2c:68:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:36 2026 by rpki-client