
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
File: MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json)
Hash identifier: VpbF1hAnmL5zX21hL/wW/tWczfNEKhUeia5wGxXJcsI=
Subject key identifier: BE:46:6C:A9:A6:E9:E2:AF:52:E8:1F:DE:0A:13:B0:64:8D:A6:08:11
Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
Manifest number: 0187
Signing time: Thu 23 Jul 2026 05:55:06 +0000
Manifest this update: Thu 23 Jul 2026 05:55:06 +0000
Manifest next update: Thu 30 Jul 2026 05:55:06 +0000
Files and hashes: 1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: sGPk8ApZQ+2S+eakwmRLF/gJenNVIDQBiyGfm+3qAjY=)
2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: VkwFL/OI8A+B6vWC8BoIWVksESaaV5yZy0BJNLEHdwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Validity
Not Before: Jul 23 05:55:06 2026 GMT
Not After : Jul 30 05:55:06 2026 GMT
Subject: CN=6a61acba-457f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:1d:b9:61:97:65:ee:f9:fd:18:66:e4:13:
e7:a1:c2:74:0b:10:9b:58:a1:06:cc:bf:c7:0f:2b:
0a:dd:10:d1:a6:97:3b:17:3c:19:ae:3c:d0:be:18:
8d:b5:2e:b3:a0:44:40:90:2e:03:ae:02:65:45:92:
e0:fe:2e:27:d5:2c:01:1a:8c:08:2b:87:48:4b:79:
d9:16:ad:8c:04:95:74:79:8c:e3:aa:2f:68:3d:80:
2e:6b:f4:f4:b7:a2:4e:fe:43:d1:97:dd:fd:a9:40:
a7:ec:f1:50:c6:d2:39:9a:d9:37:d7:b7:d8:9f:e8:
27:c8:de:41:5c:fc:62:5b:d5:1f:2f:5f:37:79:f0:
2e:d9:a5:ba:a0:f7:7f:50:32:2b:71:63:a9:3c:57:
6b:23:d5:3f:bd:cb:cc:b0:d4:43:4d:23:5e:fe:2c:
02:74:81:a6:5c:49:30:44:6d:93:e9:9b:58:77:e3:
b0:8d:3c:03:46:9f:7c:4a:87:28:df:cb:4e:89:1a:
97:37:3f:d7:cf:3c:09:11:06:ed:0d:29:eb:66:f3:
0b:dd:04:73:74:e4:1b:45:b0:d9:9e:cb:7f:24:e3:
51:81:8a:23:0e:1f:38:19:55:ef:d2:ae:29:ff:53:
e6:e3:62:15:6e:df:01:4b:50:21:24:90:a7:c3:3d:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:6C:A9:A6:E9:E2:AF:52:E8:1F:DE:0A:13:B0:64:8D:A6:08:11
X509v3 Authority Key Identifier:
keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:07:a6:7f:a6:f6:32:fe:fe:0b:98:62:ae:3d:76:5d:6a:bd:
bb:53:39:7a:4b:32:c5:b4:e8:e5:88:34:42:41:08:97:6a:85:
62:45:31:81:36:4f:fb:63:d6:c4:2b:1b:64:1b:31:12:7a:d6:
df:87:3c:15:0f:7d:b1:ee:e6:a2:20:4c:e6:f0:0b:48:43:b8:
29:6b:cf:ee:43:1f:fe:1c:3e:2f:cb:ad:2c:28:99:82:23:61:
9d:d1:a2:fa:39:41:c0:41:99:e2:e9:76:09:82:b7:6b:26:67:
37:17:b7:24:44:c9:cd:24:cb:6e:20:81:e3:ac:de:cc:fc:2c:
37:70:1f:42:f3:07:88:eb:7f:98:a4:e5:ca:10:47:0a:e5:4d:
72:98:e6:8d:33:7f:35:a4:e2:25:b9:aa:9c:75:9a:b6:c1:92:
83:84:a7:3e:32:94:52:53:86:21:61:8b:5a:aa:41:b5:99:bc:
f3:db:ba:70:8c:4d:da:eb:86:23:0e:c4:1c:e3:d7:c1:11:e4:
d2:e6:f7:8d:55:d3:fa:5c:e7:6d:6c:4a:9c:81:f7:80:94:5c:
7e:35:6a:2b:ee:3b:66:78:41:68:5b:05:18:de:98:c5:ad:d2:
99:1e:32:7d:13:0e:d6:ce:50:68:45:9f:02:f2:5e:06:e1:b5:
c9:51:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:47 2026 by rpki-client