
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json)
Hash identifier: KieNdTcFhKiuOJG1WAVTKUIFHJAktzTSNeOvU27794A=
Subject key identifier: 10:11:B0:2D:32:AA:57:95:A2:8F:33:C4:BA:85:75:8B:56:47:D6:70
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial: 04C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
Manifest number: 04B4
Signing time: Fri 18 Sep 2026 23:47:06 +0000
Manifest this update: Fri 18 Sep 2026 23:47:06 +0000
Manifest next update: Fri 25 Sep 2026 23:47:06 +0000
Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: e2tFgTMfr+4ypU1w+uUbC7eKD+Qb0j+8ltoqwCCKE10=)
2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: 58r0vtdt/oV3rGoChr48NFwAppp4ue8CY8DLnIFlHCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Validity
Not Before: Sep 18 23:47:06 2026 GMT
Not After : Sep 25 23:47:06 2026 GMT
Subject: CN=6aadcd7a-726a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:44:6f:84:cc:c7:ae:b1:bc:5f:f3:4f:18:
f7:e8:f5:28:c3:22:55:97:57:0c:d1:6b:b4:4d:5b:
22:47:76:23:09:c0:71:02:1a:60:a1:a6:5d:d6:e0:
59:64:33:fb:31:76:49:5a:c6:cb:67:71:a3:ca:b0:
72:99:43:92:b1:6c:9d:dd:07:a4:80:74:2a:b2:13:
d5:90:db:af:91:71:2f:cf:19:56:27:d8:e7:0c:5c:
ef:f7:e4:27:dc:71:b1:2d:49:63:cf:89:69:b9:7c:
b6:34:5a:6e:cc:ff:e9:c3:92:87:5d:45:c0:49:86:
ae:65:86:6f:2e:88:17:68:8e:15:96:69:9c:35:ae:
44:3f:4c:0b:f6:b6:7b:3c:ed:12:b4:49:75:36:8a:
93:13:a4:7d:f0:a1:a6:af:58:83:dc:d3:21:75:6d:
a2:18:4b:a4:01:d6:21:ab:40:3f:b8:a3:72:17:ca:
cf:e9:8a:7a:65:b9:1a:4b:b5:52:26:e9:d4:7b:83:
ff:09:46:76:8a:6b:96:f9:f3:33:19:68:27:59:66:
76:76:18:20:88:1e:b0:2d:75:41:43:ca:21:7e:99:
ad:14:a3:0e:5a:20:ce:db:9b:a3:f5:8a:f3:a2:1b:
32:dc:6f:17:87:bb:83:29:a4:ab:dd:29:41:e2:4a:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:B0:2D:32:AA:57:95:A2:8F:33:C4:BA:85:75:8B:56:47:D6:70
X509v3 Authority Key Identifier:
keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:18:c7:26:b4:b5:f6:a0:84:32:6f:3d:3b:b3:fd:08:ef:
bf:66:6e:e5:b6:cb:a3:0d:26:d6:af:20:4f:f5:7d:ff:0b:f5:
92:ca:92:5e:7a:4f:b0:df:b3:e7:2b:ba:b4:1a:bb:2c:b2:d0:
39:8d:ca:c7:62:79:fd:b1:c0:12:be:23:64:9a:ca:5e:68:b7:
2b:01:c4:7f:6e:4e:7a:a0:be:93:ed:8c:b7:b6:a8:03:03:a8:
f4:fc:70:71:0b:45:f1:5c:ca:ac:9b:c3:58:1e:83:92:e9:39:
c7:53:6b:f1:76:11:38:55:ec:27:7f:c0:25:7b:e2:34:95:98:
78:a8:7b:2c:ba:3b:06:b3:14:54:a0:84:73:1e:ea:27:64:c2:
b8:94:fc:9e:a5:4f:5a:8f:36:1a:c8:81:e0:c6:c5:bd:ef:f9:
b7:aa:7c:f0:66:67:7e:2f:10:cd:1c:8f:58:86:de:35:eb:ec:
41:20:2b:fb:28:07:bb:c0:6a:51:62:9f:ce:a0:6f:e9:d3:0a:
0b:2a:c4:76:d5:9d:9a:55:d4:3a:ef:a8:41:7d:42:3a:90:73:
9c:8b:58:f6:d6:53:4c:11:5c:3a:aa:97:93:aa:6c:20:f9:98:
db:27:99:60:bd:66:e0:a0:cb:2a:a6:3f:25:22:55:5f:24:4b:
bc:58:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:24:47 2026 by rpki-client