
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
File: RMphSwVTVBAIPvurGi2xsgNiaLo.mft (raw, json)
Hash identifier: NEi6ZpJ3UmWogxxXcWw6wv6aJ8lVQvsGVb+1rmvtQms=
Subject key identifier: D7:8F:1D:98:13:A8:C7:92:CE:C1:5E:08:12:5F:FB:B7:0D:9E:89:58
Authority key identifier: 44:CA:61:4B:05:53:54:10:08:3E:FB:AB:1A:2D:B1:B2:03:62:68:BA
Certificate issuer: /CN=A915D062/serialNumber=44CA614B05535410083EFBAB1A2DB1B2036268BA
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
Manifest number: 36
Signing time: Fri 27 Mar 2026 08:09:40 +0000
Manifest this update: Fri 27 Mar 2026 08:09:39 +0000
Manifest next update: Fri 03 Apr 2026 08:09:39 +0000
Files and hashes: 1: RMphSwVTVBAIPvurGi2xsgNiaLo.crl (hash: zvg1J6mlH2kpvmMOaeoOjxbdLNy/C0idkPPld8ePN+Q=)
2: 71321E44DB9A11F0BFEA763F67D3641D.roa (hash: vBgzrqdeu3EkuqUjV7KPEH2F3wb3MYhbBZTXUDf9gBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.crl
rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 08:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D062, serialNumber=44CA614B05535410083EFBAB1A2DB1B2036268BA
Validity
Not Before: Mar 27 08:09:39 2026 GMT
Not After : Apr 3 08:09:39 2026 GMT
Subject: CN=69c63b44-06b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:bd:b1:7c:32:29:47:e5:8c:a1:f5:43:f7:
45:ef:ef:2e:50:5f:d0:e0:54:da:4c:32:ab:7c:cd:
dc:23:fd:3a:c4:7f:95:c3:f9:a2:a0:81:3a:5d:78:
5e:9e:a5:16:e3:8d:d9:02:6f:55:11:65:11:19:24:
ba:5e:54:ec:e5:3e:f4:1e:1a:69:93:5b:98:03:fe:
83:93:78:0d:be:d8:1b:5a:cd:e8:f9:de:9f:4c:75:
f5:d4:b3:25:16:19:2e:ee:90:6c:7a:f0:b6:ce:02:
47:20:c8:e4:8d:43:20:d4:83:aa:97:cf:a0:f2:b3:
c2:49:4b:1c:02:3a:6c:d2:3e:b6:27:3f:66:53:02:
d7:9d:94:b2:aa:31:07:b6:88:dc:ed:a2:48:76:5d:
2b:8e:43:f2:0f:ed:38:1e:38:e0:0a:84:19:f9:73:
ff:95:ac:4a:be:1b:c8:cf:04:8d:3c:84:f9:d4:b6:
f1:8d:1f:91:55:eb:63:66:a2:d2:1e:d2:72:27:81:
aa:a3:4c:88:36:0c:7d:ce:50:fd:29:d2:1b:6a:3f:
8d:c9:0d:ee:a2:02:98:4a:d3:81:72:2d:97:3a:64:
54:03:21:28:33:83:3b:61:4f:ed:cd:74:9e:4d:ee:
df:30:75:24:0d:25:99:26:04:09:02:08:20:0f:39:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8F:1D:98:13:A8:C7:92:CE:C1:5E:08:12:5F:FB:B7:0D:9E:89:58
X509v3 Authority Key Identifier:
keyid:44:CA:61:4B:05:53:54:10:08:3E:FB:AB:1A:2D:B1:B2:03:62:68:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1e:b1:5d:99:1f:a5:11:b9:94:6b:c9:7d:4c:eb:c0:13:eb:
bc:b7:d8:fb:26:82:aa:25:e7:2f:f6:e6:3b:ad:a0:1f:da:27:
68:97:89:f2:46:55:2c:6b:3b:8b:9d:77:a3:4e:cc:ef:c0:53:
4e:ed:b0:e9:9f:fe:b9:03:58:5a:30:8e:07:5e:67:20:10:dc:
b9:a6:b7:85:cd:91:9e:10:94:7e:3f:e3:0f:50:06:fe:e8:f1:
ac:4c:fe:3f:97:8b:77:80:10:e6:ac:fd:1f:45:f9:5a:05:89:
c8:cb:6b:9d:5e:1d:8e:60:09:6a:1b:6e:79:28:69:48:54:6a:
cf:a1:ff:b1:5f:19:4b:71:29:e9:24:49:26:01:f5:57:8c:0d:
28:7d:f2:d6:78:2e:c7:9d:36:e7:2a:51:29:7d:e6:b7:96:7c:
7b:fe:e0:fc:c1:c5:35:f4:ee:59:d8:4a:19:d7:c1:68:b0:bd:
20:ad:83:f7:a9:87:2b:cc:2e:99:90:bd:65:d1:9b:1b:88:df:
df:0c:67:e2:88:b2:fa:18:6c:0d:eb:b6:71:a0:db:39:12:57:
c2:53:83:c1:b2:8d:9c:97:31:e6:d1:1e:92:33:c0:1a:ee:bc:
6f:3a:d0:eb:9d:4c:b5:97:da:78:20:84:91:4c:f5:76:42:a0:
3c:37:cf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:43:32 2026 by rpki-client