
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier: 4vvtn1SU/AT1JRPj1sl/64MjhlIA3ffzYwArnEvruSo=
Subject key identifier: 08:2B:1A:63:DF:2D:5C:3F:7E:7E:FC:C3:6F:3C:A6:B5:B9:21:60:86
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial: 0C00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number: 0BE2
Signing time: Tue 12 May 2026 18:58:28 +0000
Manifest this update: Tue 12 May 2026 18:58:27 +0000
Manifest next update: Tue 19 May 2026 18:58:27 +0000
Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: QRNSplnKlmIwHZUdiewhiLN2XolaA9iN3i0xnexoAeI=)
2: 90FE23B83D5011F1860BF56AA6833773.roa (hash: XUvqr+C7+uQgBL9ktwJt5Z6F/YsCiQrJ061Wa1rTzxI=)
3: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3072 (0xc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Validity
Not Before: May 12 18:58:27 2026 GMT
Not After : May 19 18:58:27 2026 GMT
Subject: CN=6a037853-0529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:e7:0c:4a:dc:50:c0:57:ff:2a:3a:7b:1c:
a1:dc:04:de:68:9e:a5:7e:25:43:4b:2d:63:fa:80:
70:6e:4d:34:2a:d9:d3:9b:8b:a6:41:7b:05:f5:e4:
63:91:bd:8f:ee:29:cc:bf:97:3c:2a:6f:8c:2a:b5:
48:6f:fb:71:86:7d:bb:87:ec:0d:67:71:88:06:c1:
1c:ee:42:fb:13:18:7b:b2:f3:f0:b2:e5:b6:36:a9:
6b:73:59:f3:fe:c3:1d:50:c9:3b:af:fa:be:02:54:
63:6f:f9:c5:e6:fa:1f:ba:25:6c:c3:18:70:20:c1:
06:1c:31:16:d7:08:16:2c:69:94:01:52:2d:c2:9e:
14:db:65:6c:df:43:c6:63:87:0d:41:a6:be:3b:29:
f0:7e:c0:37:ef:69:80:f1:03:91:d1:4b:ba:42:78:
2b:71:4b:fc:2b:3e:ee:c8:ff:e2:a3:d3:db:ec:c0:
33:fe:a3:7f:15:55:d3:9b:f5:f0:60:c6:b8:e2:12:
28:01:f5:05:0d:2e:ec:d8:70:75:ef:28:0c:eb:d0:
b8:53:08:a3:c4:a5:f1:5e:e4:32:65:d2:35:3c:06:
ea:44:b4:f9:51:f2:80:6c:19:bb:40:31:43:bb:b9:
6c:e5:45:0e:5c:86:e1:1d:43:81:4a:62:39:25:ac:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2B:1A:63:DF:2D:5C:3F:7E:7E:FC:C3:6F:3C:A6:B5:B9:21:60:86
X509v3 Authority Key Identifier:
keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7b:4c:b1:7f:df:81:4c:be:10:88:4e:6c:03:5a:73:ba:0d:
27:c1:70:b5:06:09:d0:f9:d5:15:59:4c:64:8b:8d:eb:60:35:
47:12:c6:f3:81:55:73:bd:35:4f:8a:dc:61:ba:36:4b:7e:cb:
89:e6:41:83:3c:b2:c1:32:85:c4:29:35:20:96:67:70:a6:6c:
5c:4e:30:7d:5f:74:35:61:3a:b0:6a:c6:1a:5c:7e:94:6c:1a:
34:0a:0d:72:c6:61:40:45:69:5b:f6:4b:69:8b:1c:3d:46:66:
7a:dc:9b:51:b7:f8:f4:12:a8:7c:32:30:df:c6:5f:09:c3:21:
b2:60:cd:5e:4f:e5:2c:dd:d7:46:d2:f0:c4:75:a6:22:df:00:
8f:be:8c:e8:59:bc:29:f6:b4:a0:6d:0b:c2:fb:13:74:ad:5c:
05:be:93:ca:43:21:72:a7:3f:9d:5e:2a:82:08:38:da:20:32:
92:be:ec:2b:2f:e8:a1:24:58:69:4c:23:dd:f4:88:7d:7d:79:
f0:21:19:e6:d8:2e:98:74:61:fa:11:af:d8:f7:cd:e4:73:8a:
99:5b:6a:3b:de:71:e3:7a:52:3c:da:69:26:0c:92:1b:c7:55:
a4:69:c7:b2:64:35:26:d8:4c:11:3f:9c:56:9f:77:01:41:97:
a3:d1:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:18 2026 by rpki-client