
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
File: mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft (raw, json)
Hash identifier: NNZsHkqgYaHoSXkLepS5z+mPUW1TvFN31LF+ngbysVY=
Subject key identifier: BB:FC:D0:C4:6E:E5:3E:C8:B0:28:9F:63:AE:79:2F:D0:13:FF:A2:F2
Authority key identifier: 99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46
Certificate issuer: /CN=A915A797/serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
Manifest number: BF
Signing time: Thu 23 Jul 2026 08:54:04 +0000
Manifest this update: Thu 23 Jul 2026 08:54:04 +0000
Manifest next update: Thu 30 Jul 2026 08:54:04 +0000
Files and hashes: 1: mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl (hash: oaXhXayHgp1824dgWn61baw0sOZFr4iPYwpqTqlf53k=)
2: 1110B336733A11F0A50CB40BC4F9AE02.roa (hash: Bky8qK2Bolvx6AryWBaKtcOLwH8O2VIIKpjzNANFsIY=)
3: 77B72AD6944E11F0AE3B5D3BC4F9AE02.roa (hash: KtvTVjgCAWOcBuPKSwBd9An16OYSBYspJW9eNvVNuDM=)
4: 117FF3C2733A11F0A50CB40BC4F9AE02.roa (hash: eFMqMx1XcwIYfwPU0YRygEin11c4JG6O8A2+m4ByoGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl
rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A797, serialNumber=993B01BA413EE548F3FC7FCB09A33B9195966F46
Validity
Not Before: Jul 23 08:54:04 2026 GMT
Not After : Jul 30 08:54:04 2026 GMT
Subject: CN=6a61d6ac-5661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:b0:9d:08:81:72:69:7c:de:a6:f7:1c:df:
fa:4f:2b:ba:db:a4:61:45:75:eb:6b:5f:88:32:89:
18:08:e0:33:65:bd:d9:da:51:fb:25:37:23:86:cd:
68:70:5a:1e:8a:27:4f:a4:06:07:e4:49:a1:02:6a:
c2:e9:e7:1a:77:2e:23:76:5c:df:9b:2f:00:16:7e:
3f:46:55:c2:f4:e2:3c:00:40:3a:19:e3:89:2d:e8:
74:3d:9b:06:59:93:2e:ee:33:96:89:6a:94:09:10:
df:fe:2e:7c:97:e7:41:eb:a9:e1:d8:10:b2:4d:9c:
03:fc:c5:72:c3:2c:bd:2f:35:fa:fd:b0:29:9b:05:
99:a2:0b:78:d9:75:6c:a8:b6:d2:d6:75:f6:32:51:
6d:05:2f:a1:30:7f:89:f4:8a:ee:7f:ea:0f:84:a5:
62:eb:62:27:3e:31:8b:f7:85:11:75:39:e7:47:4d:
3e:8f:1b:69:b8:c4:b1:e9:43:72:ec:25:12:14:f8:
da:3e:d1:78:7b:df:30:01:3c:d6:d2:f1:f4:e9:7c:
bb:33:5f:7d:17:88:fb:de:51:de:fc:63:46:07:d2:
71:c6:af:08:cc:69:ce:0b:cc:85:fd:fa:30:dd:91:
83:c0:f3:ae:28:4a:74:5b:cd:d2:b0:97:0b:1e:c9:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:D0:C4:6E:E5:3E:C8:B0:28:9F:63:AE:79:2F:D0:13:FF:A2:F2
X509v3 Authority Key Identifier:
keyid:99:3B:01:BA:41:3E:E5:48:F3:FC:7F:CB:09:A3:3B:91:95:96:6F:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A797/766AC9B26E9211F0BBEB7C3AC4F9AE02/mTsBukE-5Ujz_H_LCaM7kZWWb0Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:81:34:7d:0a:b1:96:34:1a:82:e3:ed:0e:7b:de:31:ff:74:
a0:fc:15:dc:76:ce:7e:a9:c7:4c:cc:32:d9:a2:b6:e7:0b:b2:
eb:f0:62:bd:f5:34:c4:eb:9f:87:1d:0e:50:9d:67:11:ab:b9:
80:8c:6b:9f:6f:a8:b6:4f:6d:4b:65:3a:3a:78:05:84:ae:1f:
0b:25:ef:ca:bf:1e:ee:d9:18:59:4b:24:32:6d:da:91:07:1e:
d8:d9:f8:c1:b5:03:48:3e:4b:5a:08:d6:58:ad:c3:fe:72:22:
9d:05:09:93:54:6b:fd:ad:a4:02:1f:d1:e2:0b:04:4e:b6:1e:
5e:f1:bd:ac:13:67:c5:b2:bd:0b:d7:18:ba:68:cd:d1:00:e9:
8f:ad:7b:c6:65:02:c1:74:ef:25:3f:d9:81:6d:e9:ad:70:cd:
6a:de:b8:2a:06:a4:2b:a4:41:63:fa:72:7e:6b:84:22:72:a5:
3c:19:62:0e:1d:fb:a5:67:05:85:15:09:c8:2c:8e:0b:29:17:
81:df:87:15:c9:1d:df:41:3c:25:b4:a4:16:a8:57:b2:bf:1d:
6f:c2:f3:61:fb:ab:5b:dd:db:29:d9:4a:85:e2:4b:0b:bd:ff:
f2:cb:d8:25:e9:a1:ef:ca:8f:25:da:57:4d:ca:cc:38:61:e4:
7b:c2:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:25 2026 by rpki-client