
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json)
Hash identifier: SMT9DK7LDPnDap764/IfKCGpvtYhJEzpjhYp+MF5W9s=
Subject key identifier: E3:3A:76:9E:4E:FC:6C:C4:FD:7E:12:4F:5C:D7:E0:83:D3:43:66:43
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial: 0470
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
Manifest number: 0463
Signing time: Fri 17 Apr 2026 00:03:47 +0000
Manifest this update: Fri 17 Apr 2026 00:03:46 +0000
Manifest next update: Fri 24 Apr 2026 00:03:46 +0000
Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: UQLLImgBYnoP3d44G9j+T3I/sT0Lo4dN5TkTkK52eDA=)
2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: T3ZNiVnesGJpryRivylJyU8MVl8VVN9RqH654rVhbKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Validity
Not Before: Apr 17 00:03:46 2026 GMT
Not After : Apr 24 00:03:46 2026 GMT
Subject: CN=69e178e2-ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:4c:51:8e:36:7d:a8:68:42:6c:b0:cd:8d:
94:86:90:c0:ab:bc:8f:be:a3:1c:46:5d:17:af:94:
ef:63:4b:84:7f:c0:2b:64:d9:0d:e9:83:93:2f:61:
1b:62:a1:59:b8:4b:79:e4:60:d7:f2:d0:c1:99:2e:
27:dc:bd:cf:dc:62:41:53:21:8d:47:28:06:c6:e2:
0b:95:fa:ec:a4:f4:49:fe:28:a0:53:b5:a3:49:94:
97:ac:3a:d0:5f:c0:c1:b9:91:34:37:44:a2:ed:2b:
99:5f:17:cf:29:72:2b:f8:44:eb:83:8a:0a:fb:02:
d7:54:5d:6b:08:99:65:3d:85:fa:48:20:6f:8a:02:
ff:3e:67:6d:dc:10:06:58:f4:f7:51:fa:81:66:05:
73:92:63:fb:7a:60:2d:73:a4:d9:8c:ee:30:77:a5:
2e:76:cd:dd:26:a1:d8:d0:88:4e:7d:ff:41:75:f4:
e1:0d:19:c0:49:a4:1e:45:44:a0:84:bb:e4:9a:c9:
87:1e:7d:f6:e0:c6:0a:a0:28:7f:dd:28:3f:33:62:
0d:e0:7a:f6:b6:88:a7:93:a3:cf:77:05:70:ab:78:
d6:9c:5c:53:8a:4e:bf:5f:a2:b9:67:f7:38:9d:5d:
2c:ea:3d:cb:95:39:2d:3a:3d:41:30:6c:8f:b1:d9:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:76:9E:4E:FC:6C:C4:FD:7E:12:4F:5C:D7:E0:83:D3:43:66:43
X509v3 Authority Key Identifier:
keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:62:f8:9c:4f:b9:39:3e:b7:eb:2b:63:65:6e:2b:42:f2:10:
02:71:14:22:03:e3:e8:b0:1d:ae:c9:84:80:3d:da:15:59:a9:
52:e9:aa:04:46:8d:1f:d2:f6:48:cf:0d:a7:a5:83:2e:b2:80:
ee:1d:d4:b3:11:c6:40:23:18:e3:51:9d:de:78:1b:79:94:2a:
eb:2a:b3:a9:ed:0f:9f:72:f4:d1:f5:6c:4f:de:7b:cb:f2:fe:
42:21:09:6c:71:ff:1b:6c:ed:97:c0:45:45:e0:66:62:f9:b8:
e0:d4:07:17:a4:58:1c:2d:fb:b8:9b:b4:a3:af:dc:ef:30:7f:
47:2d:68:26:5b:bd:1a:88:32:99:4b:ea:53:68:9b:4c:a1:2b:
6c:3b:f7:99:78:4a:5a:e9:55:a7:75:c1:bb:5a:c4:6c:f1:29:
9a:0e:f3:ac:f2:4f:dc:84:41:19:2e:0b:d0:89:cd:34:68:65:
05:48:9c:ed:19:63:0e:a0:97:56:a0:ba:7f:0f:de:96:d1:28:
06:90:d8:76:d9:2f:ad:4e:71:d9:0f:1a:64:dd:06:9d:27:c9:
33:1e:8f:85:5b:8c:80:a2:ed:c7:c1:36:fe:70:f0:58:4b:50:
9f:f0:7d:0e:d9:5e:91:cb:2f:e1:24:a2:b7:3f:e9:3a:a2:d3:
ce:09:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:15 2026 by rpki-client