
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json)
Hash identifier: GXLntH3hAH70r3UMTz2kySVUtZgmI1RG44tqjjBU5FQ=
Subject key identifier: 54:BE:CC:B1:AB:52:3A:79:87:93:74:B8:59:E7:D4:80:BD:E7:47:3D
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial: 04DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
Manifest number: 04D1
Signing time: Sat 14 Nov 2026 23:35:26 +0000
Manifest this update: Sat 14 Nov 2026 23:35:25 +0000
Manifest next update: Sat 21 Nov 2026 23:35:25 +0000
Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: br+7y/JGpa2CmATbUl0Tll0s0U+WgT4F5vPEGrYo+fk=)
2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: 58r0vtdt/oV3rGoChr48NFwAppp4ue8CY8DLnIFlHCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Validity
Not Before: Nov 14 23:35:25 2026 GMT
Not After : Nov 21 23:35:25 2026 GMT
Subject: CN=6af8f03e-1c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:36:5b:8f:ea:87:32:3d:57:34:8f:cd:72:
7d:4b:99:f9:96:f6:c7:a2:76:c2:6b:2d:c3:09:58:
ee:77:89:bc:ac:d9:91:b1:8f:56:91:77:4f:3e:98:
77:f5:e1:43:a7:49:c9:b3:04:f2:9c:d0:3d:8a:8e:
53:e4:27:5d:28:00:ae:16:16:a7:a5:f8:34:50:8b:
f3:2a:f1:70:83:3c:ea:99:07:a3:e9:12:f6:e3:59:
12:1c:76:f1:6e:04:bd:2a:0d:a0:4f:96:ad:55:f1:
e2:31:42:f4:fe:4b:76:7a:09:ea:5f:7a:ee:a1:bf:
73:63:f7:02:82:ed:be:59:7d:d2:55:7a:03:b0:c4:
90:72:39:8f:a4:d9:1f:cd:78:ca:56:c3:b2:0f:b8:
31:14:a3:d1:31:5e:51:78:8d:12:c4:54:37:04:09:
8d:79:09:0d:04:06:19:6c:8b:b3:7c:23:56:ca:e4:
4b:87:28:a1:3f:b2:09:cb:78:4f:c1:7e:dc:03:9d:
9b:ed:cc:66:d0:14:c8:76:21:e1:54:0f:4b:f5:68:
b0:0c:dc:71:91:63:c6:ba:0c:fa:fa:cd:0b:39:47:
3d:ca:c1:20:5b:d3:c8:9d:e4:85:4a:c5:fc:ec:e3:
1f:bd:ca:e4:18:e7:30:2e:7c:a1:90:bc:f0:25:f6:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:CC:B1:AB:52:3A:79:87:93:74:B8:59:E7:D4:80:BD:E7:47:3D
X509v3 Authority Key Identifier:
keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:81:36:f7:85:2d:48:b7:30:33:e7:63:84:5e:30:e8:3e:62:
c4:af:1d:8d:c7:ca:d1:f2:49:83:32:b0:f9:b9:f2:df:2e:4f:
1f:43:51:b1:c3:8c:00:e1:6f:05:40:ce:1a:3e:d0:f1:f3:2b:
8e:6a:49:c0:06:cd:86:5e:f6:0d:e8:8b:69:f3:47:32:b8:3e:
27:23:62:c7:7b:e2:bc:51:9b:08:c7:d2:71:36:01:53:e7:14:
da:fc:43:68:34:0b:a7:02:a0:bc:20:87:39:9b:3f:6f:4f:71:
31:98:16:4a:c4:8d:33:66:5d:ac:ef:39:a4:a9:df:e4:3d:49:
9e:aa:ca:2c:01:fd:34:38:64:b0:14:c1:67:d8:c5:d7:6a:5e:
2c:7c:92:b2:77:fd:94:f0:28:1e:2c:4f:ff:aa:be:33:14:f8:
15:d8:e5:94:9e:5a:12:47:b9:0e:5d:01:03:2a:e1:10:d0:d9:
39:df:0a:dd:bc:24:a3:5e:86:cc:81:f4:eb:69:6d:bc:ad:de:
8a:3a:1b:1c:b8:e7:d7:6d:b6:8f:38:6b:cb:59:0e:96:dd:e8:
e1:7c:b9:55:d8:96:63:c1:7d:1a:f1:28:c0:8b:b6:8a:c0:39:
23:fa:9a:79:40:8f:c7:2c:a2:6f:a2:d4:63:fb:55:ba:16:f3:
06:d6:c6:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG
QjlBQkU5OTMwHhcNMjYxMTE0MjMzNTI1WhcNMjYxMTIxMjMzNTI1WjAYMRYwFAYD
VQQDEw02YWY4ZjAzZS0xYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTo2W4/qhzI9VzSPzXJ9S5n5lvbHonbCay3DCVjud4m8rNmRsY9WkXdPPph3
9eFDp0nJswTynNA9io5T5CddKACuFhanpfg0UIvzKvFwgzzqmQej6RL241kSHHbx
bgS9Kg2gT5atVfHiMUL0/kt2egnqX3ruob9zY/cCgu2+WX3SVXoDsMSQcjmPpNkf
zXjKVsOyD7gxFKPRMV5ReI0SxFQ3BAmNeQkNBAYZbIuzfCNWyuRLhyihP7IJy3hP
wX7cA52b7cxm0BTIdiHhVA9L9WiwDNxxkWPGugz6+s0LOUc9ysEgW9PIneSFSsX8
7OMfvcrkGOcwLnyhkLzwJfb7/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFS+zLGr
Ujp5h5N0uFnn1IC950c9MB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG
OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk
bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgIE294UtSLcwM+djhF4w6D5ixK8djcfK0fJJgzKw+bny3y5PH0NRscOMAOFv
BUDOGj7Q8fMrjmpJwAbNhl72DeiLafNHMrg+JyNix3vivFGbCMfScTYBU+cU2vxD
aDQLpwKgvCCHOZs/b09xMZgWSsSNM2ZdrO85pKnf5D1JnqrKLAH9NDhksBTBZ9jF
12peLHySsnf9lPAoHixP/6q+MxT4FdjllJ5aEke5Dl0BAyrhENDZOd8K3bwko16G
zIH062ltvK3eijobHLjn1222jzhry1kOlt3o4Xy5VdiWY8F9GvEowIu2isA5I/qa
eUCPxyyib6LUY/tVuhbzBtbGmQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:15 2026 by rpki-client