
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier: q0S5OQX+xkHQ/59c77s42da0+bFO8VMrykELtjf2gyE=
Subject key identifier: 99:96:28:E7:62:BA:D8:AE:1D:50:3D:AC:AA:33:95:9B:F8:D6:34:B8
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number: 0218
Signing time: Thu 23 Jul 2026 04:11:20 +0000
Manifest this update: Thu 23 Jul 2026 04:11:19 +0000
Manifest next update: Thu 30 Jul 2026 04:11:19 +0000
Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: WAIF61zW9aYRj2GPJx8/48fMzvVWgWUZbXCC6xVA7Sg=)
2: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 1RzsjB3B/c1zgVm8/5Sg1Xe89XFvfc6vQnq4tvEitnY=)
3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 8JV502SLk8QbZyaGCPLTxSnSD1WOF++tIWExjZSLMdQ=)
4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: 6VryhfiIF2VBEa3XnAENzfKNyDYTfUs9xynBu6kvnA4=)
5: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU=)
6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: Pt4/aeZJmmxaKw58FeByKfcr60LvOJZSjrmtvVkGyg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Validity
Not Before: Jul 23 04:11:19 2026 GMT
Not After : Jul 30 04:11:19 2026 GMT
Subject: CN=6a619468-d689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:e0:43:08:fe:1d:88:06:ab:62:2a:f5:ed:
df:2c:19:cc:cd:84:57:e7:2b:61:3d:f5:6c:3a:4f:
4f:d7:f0:b2:05:63:1f:ba:2b:7e:52:fa:cc:5a:8b:
82:b0:3b:b6:13:67:24:9a:c9:8e:76:ca:00:58:7e:
a1:06:54:1b:d1:a4:f3:ec:79:af:0d:7b:00:95:18:
1e:31:15:70:63:29:08:d6:d0:3c:ff:e8:f9:0d:63:
1d:a6:bc:aa:5c:22:c3:2e:cd:15:80:20:74:0c:b1:
22:f6:8a:5d:72:70:f7:0d:37:51:27:2e:7a:6b:2d:
8b:f0:8e:4a:d3:5c:2e:a8:20:d7:c7:b4:b2:c9:9b:
89:bc:20:fb:51:36:f0:f9:37:cb:81:9b:44:05:7d:
5d:8e:43:55:99:43:90:f4:9b:ca:b9:f3:2b:e2:77:
74:6b:8c:7b:71:86:b5:d8:86:8d:3e:3b:d0:3e:bd:
05:0b:d5:39:dd:10:13:41:c1:16:6a:a1:7a:1a:06:
9d:12:24:56:3f:29:6f:ce:03:6b:f9:c4:83:8b:91:
d5:96:8f:49:02:c7:3f:56:65:cb:05:59:d2:1e:c4:
13:72:ff:39:27:62:a1:a2:9c:9e:8c:d9:02:d9:f2:
37:80:07:91:9f:cd:b7:46:19:8e:04:db:cb:2c:76:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:28:E7:62:BA:D8:AE:1D:50:3D:AC:AA:33:95:9B:F8:D6:34:B8
X509v3 Authority Key Identifier:
keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:fb:4e:8a:0a:4d:f7:11:dd:0b:89:04:ef:ee:fd:85:17:3f:
ec:f8:0c:c3:96:ab:dd:a6:31:e9:00:42:b5:be:cd:93:71:13:
15:c7:f8:67:3e:80:23:80:2d:af:43:dd:66:e1:c7:c8:2f:9e:
5f:60:70:37:66:40:81:64:b3:1c:23:f7:ca:3b:9e:1a:3e:7c:
1a:31:59:63:c8:0e:a1:bb:ef:c8:5e:0b:da:9f:1e:ea:b6:82:
9c:00:50:38:5f:ef:4e:ce:59:8c:6a:f7:c4:d4:6c:6c:0c:b4:
1c:98:a3:d0:a1:60:73:c9:8f:f7:f9:9f:11:20:f4:c3:16:d2:
42:63:9f:e3:0b:26:db:54:75:d1:52:e0:01:a9:ca:45:1f:e3:
8a:d6:b8:7e:55:ba:7d:4d:08:a9:f1:34:0a:b0:37:82:72:ab:
3b:e2:54:b6:b0:83:80:60:b9:39:1a:c7:81:dc:6c:0e:a0:80:
6c:05:34:de:4a:ed:75:34:4c:45:81:ad:d4:c2:3a:22:d0:13:
5b:eb:a5:f0:d1:9a:b3:da:28:e6:a7:05:2e:5a:f4:42:ee:45:
a5:f0:b7:94:52:77:bd:d6:be:35:96:24:cd:95:8d:54:7e:4b:
7d:c7:46:2b:81:a5:d7:96:f4:00:04:71:4d:2c:54:cb:55:ca:
0e:58:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:38 2026 by rpki-client