
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json)
Hash identifier: PvDW/leulidfMBymqDqoxsftI6kk39Ekfzk6SodkMtI=
Subject key identifier: F2:2E:0A:8B:A4:C2:D9:23:05:0B:29:F3:CC:84:99:BD:F6:E5:EC:2B
Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Certificate serial: 08F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
Manifest number: 08D9
Signing time: Thu 08 Oct 2026 20:39:10 +0000
Manifest this update: Thu 08 Oct 2026 20:39:09 +0000
Manifest next update: Thu 15 Oct 2026 20:39:09 +0000
Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: JqH6NUCmNUyVra+NIas2LfG821S0Ld4KnvXFsvKYrCU=)
2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 2Maf3v2VZsNOpIAQqqccO19G1/PtM5yi2MTvmVK+OA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Validity
Not Before: Oct 8 20:39:09 2026 GMT
Not After : Oct 15 20:39:09 2026 GMT
Subject: CN=6ac7ff6e-566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:97:56:b1:5a:86:61:4b:65:28:e1:0f:9b:8b:
44:e6:10:6a:ab:93:e9:ff:6b:cc:11:42:7f:2f:65:
ef:08:64:16:02:ca:7b:3e:b3:1a:47:db:9e:b2:9d:
ef:8d:22:7d:a5:f5:eb:e4:8f:44:01:89:19:44:01:
70:26:4b:e0:cc:d4:59:40:c4:f5:bb:0b:13:22:17:
c2:ab:62:37:46:73:75:3a:6d:4f:df:11:34:d1:da:
9e:84:e5:a1:dd:9b:c0:dd:6a:e3:a4:fc:a8:13:96:
a6:5c:37:fd:d3:16:35:0a:39:4e:4b:2c:ca:33:b9:
48:c8:15:8c:bd:0c:e3:63:be:10:ad:fb:99:7f:48:
27:68:f9:f3:bb:eb:c2:84:7b:da:18:92:4a:f7:80:
4d:97:53:69:4c:87:44:1e:d8:2c:68:69:2c:97:68:
2d:67:3c:bf:d9:3c:09:88:22:e5:e8:5c:8f:4f:07:
cd:61:17:29:dc:90:b6:0e:7d:c7:1e:d0:a0:72:db:
ae:d5:05:58:08:e0:66:31:26:45:f1:86:d5:05:c0:
bd:a5:ff:fb:e2:bb:05:b7:8a:29:0e:f4:d6:b7:c0:
86:0e:90:f0:65:8d:4c:ef:9b:d4:77:63:6f:72:d4:
1e:d4:91:52:d3:3f:fa:a8:7d:1c:78:5c:cc:62:10:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:0A:8B:A4:C2:D9:23:05:0B:29:F3:CC:84:99:BD:F6:E5:EC:2B
X509v3 Authority Key Identifier:
keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b5:af:1e:13:7f:d0:5a:14:fa:60:1b:c6:00:f7:02:cf:77:
60:95:48:ca:b0:77:1e:e8:c8:36:ec:aa:ca:35:d2:14:fe:38:
65:da:15:64:88:1f:a2:5b:fa:0c:bc:86:6a:d5:71:ad:71:17:
f5:c8:fd:72:75:8b:db:d3:9d:8d:2e:36:99:ac:93:aa:85:e5:
2c:0e:f3:b3:8e:c2:e9:ff:6e:ea:30:ef:43:5a:d7:9d:4a:50:
14:eb:31:af:c4:f3:e1:06:7d:f9:c3:73:74:c0:ad:dd:32:56:
4c:a6:16:96:9e:d4:be:af:94:e4:1e:a4:32:ad:60:83:98:59:
ca:9d:63:f7:fb:32:6a:b4:65:02:43:c0:f4:cf:08:c1:82:1a:
d5:26:a3:25:35:aa:eb:dd:fb:60:f8:09:18:5a:ef:36:75:0d:
c8:45:97:a9:2e:db:c7:a0:1a:c4:bb:1b:f7:17:db:19:4a:35:
28:9f:71:93:aa:74:29:0e:c7:e3:6d:84:cd:13:71:33:7b:26:
91:d0:d7:d9:60:ea:b8:a8:7c:c4:f9:3a:9c:93:b8:90:df:49:
32:4a:4d:70:84:fb:5f:8f:e4:28:87:19:9c:ea:cb:8c:49:60:
a5:5c:02:7a:17:4d:02:df:21:8f:7e:66:0f:f5:21:a4:f9:26:
5b:40:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:53:15 2026 by rpki-client