
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json)
Hash identifier: jPqYZpY+uBgCIP1gBHNZqK4GyimaIaW0OgF2RLykWmM=
Subject key identifier: 5F:6C:04:E5:1A:CB:86:F7:2B:1E:95:F9:54:40:CF:CF:76:E8:68:DC
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial: 04A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
Manifest number: 0498
Signing time: Mon 27 Jul 2026 01:00:30 +0000
Manifest this update: Mon 27 Jul 2026 01:00:29 +0000
Manifest next update: Mon 03 Aug 2026 01:00:29 +0000
Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: H0fqFP7nC/D6jDhpamSOCf5PwRX1/JS8reCy3y0XSQw=)
2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: 58r0vtdt/oV3rGoChr48NFwAppp4ue8CY8DLnIFlHCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Validity
Not Before: Jul 27 01:00:29 2026 GMT
Not After : Aug 3 01:00:29 2026 GMT
Subject: CN=6a66adad-6db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:2f:d6:6f:db:d2:87:a5:a2:eb:5a:df:f6:
f7:2e:d2:cd:cc:17:2a:13:1c:dd:a1:33:0c:45:f7:
9c:de:67:aa:09:d2:37:49:29:6c:5a:05:76:af:87:
db:15:51:65:67:dd:92:a7:32:77:a5:2e:35:5b:fe:
f9:df:95:23:c0:ac:5f:91:0c:4a:cb:94:a7:62:3e:
04:1f:0b:ca:4c:74:7a:7f:c4:6a:86:af:9f:7d:a3:
99:40:63:32:17:b6:71:64:8c:02:66:fa:95:e4:95:
24:8e:2b:13:f2:a2:de:b9:d4:f0:64:d1:5c:ac:4c:
21:cc:31:b3:12:8c:80:b0:d1:a8:3d:39:a2:1f:7b:
36:a6:2e:01:43:eb:f6:6e:5f:28:84:07:01:ec:e4:
04:b9:7e:4b:ba:ca:94:ce:1b:59:8a:6b:19:80:66:
bc:68:01:b5:7f:28:d7:30:1b:ea:71:32:e8:a0:e2:
96:20:41:14:7c:5d:fe:29:33:81:5b:81:e4:13:40:
8c:b1:13:50:7f:f9:e4:1d:17:5c:b1:2d:7e:b4:a8:
31:fd:ff:e2:44:58:b8:2e:71:fb:10:a7:f3:b4:ba:
e5:1d:ce:7c:9f:2a:5f:d7:48:87:41:17:9f:e6:5c:
cc:32:0d:b8:9c:85:8e:81:55:05:05:4a:45:ee:14:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:04:E5:1A:CB:86:F7:2B:1E:95:F9:54:40:CF:CF:76:E8:68:DC
X509v3 Authority Key Identifier:
keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ed:89:9e:ae:cb:9c:a8:32:df:84:cb:d7:27:c5:db:20:ef:
ce:49:7f:2a:35:48:6a:10:1a:af:e4:13:ed:e2:d4:53:18:34:
ca:39:f9:b7:96:f0:68:91:35:eb:14:8d:32:e9:54:ea:8a:e0:
61:e5:ba:d2:d2:10:28:c8:d7:f9:1a:b7:ee:78:74:2d:7e:8e:
5d:39:14:6d:2c:f9:c2:17:42:78:2d:83:a4:48:9b:06:5b:6e:
d3:20:d7:c0:22:8a:c0:50:b9:89:fe:13:2d:d6:93:09:3c:6f:
3e:99:45:d1:81:6a:93:0e:94:ca:ff:d8:51:c5:85:39:a2:25:
11:74:00:94:90:01:3c:0b:fe:4e:16:67:a6:50:99:3f:eb:08:
e7:bd:12:17:78:26:11:27:e4:f0:4c:b8:7b:ac:ad:9b:d3:9b:
e0:e1:d9:aa:3e:6d:95:fb:df:7c:bb:33:c8:6a:3e:11:ae:31:
09:ed:b7:dd:4c:45:94:53:e9:84:63:f6:d0:f3:d0:3c:f3:66:
d6:fc:4b:7b:47:55:fe:dc:d7:84:fc:02:4c:61:14:2c:41:e2:
c2:82:9e:10:00:ac:b9:a7:a0:a6:a0:7a:c2:27:1c:72:8e:7d:
0a:1d:5d:72:e9:76:70:26:bd:70:62:39:01:8b:27:40:58:9f:
8b:8e:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:39 2026 by rpki-client