
$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier: /qC642WTni/pOA2DbGuiw/u5ONV/kIVBVVUv9qg55uU=
Subject key identifier: 38:7C:99:B3:3A:05:E7:EF:06:72:FB:06:30:DC:62:B5:73:A2:BD:D4
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number: C8
Signing time: Thu 23 Jul 2026 08:40:14 +0000
Manifest this update: Thu 23 Jul 2026 08:40:13 +0000
Manifest next update: Thu 30 Jul 2026 08:40:13 +0000
Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: C/1kncNwgwQXA8XvU3UCWluj17qKdmaypr5Y6bzX2Bo=)
2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Validity
Not Before: Jul 23 08:40:13 2026 GMT
Not After : Jul 30 08:40:13 2026 GMT
Subject: CN=6a61d36e-0010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:71:8f:6b:15:f2:2b:b6:ab:2c:a4:c3:f3:
5a:81:4d:ef:19:52:e9:1c:e5:86:4a:7a:50:37:a7:
06:fb:06:98:0c:fb:cd:23:79:4d:17:40:f6:b4:f9:
69:35:ac:4c:a1:53:7a:74:5f:aa:43:17:52:9e:0f:
a5:0c:a2:82:df:24:62:39:7e:13:bf:b2:a2:a5:e8:
d7:ea:be:3a:23:e3:b9:9f:2c:a9:2b:db:86:33:77:
1d:45:d4:60:a9:6c:ca:94:65:5f:10:dc:72:4d:99:
11:82:ca:ab:df:f9:79:b2:a7:79:51:7e:55:1a:23:
2c:a4:a1:e7:02:d7:62:0b:88:54:05:e9:52:a9:45:
21:09:9a:07:6f:cc:df:07:cd:4e:fc:f7:2b:b6:b9:
83:5a:5d:33:cf:5d:18:81:a8:47:29:60:b7:9d:e9:
23:3b:0c:29:85:be:fe:98:db:12:1c:e9:ee:fb:3a:
5f:73:b9:58:59:32:c2:74:ca:aa:26:d3:31:9d:7c:
2b:11:69:27:6c:22:0a:7e:19:e9:9d:38:f9:b3:6b:
54:a2:cd:b1:99:fd:44:64:9b:c2:f9:78:2f:05:22:
e4:f2:fe:6a:49:5c:2d:bd:a1:80:e4:83:81:6d:f9:
b8:f9:98:3b:90:38:b6:70:f0:32:c4:84:d4:20:ce:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7C:99:B3:3A:05:E7:EF:06:72:FB:06:30:DC:62:B5:73:A2:BD:D4
X509v3 Authority Key Identifier:
keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:9c:28:63:55:d2:23:0e:6e:49:05:e4:74:63:39:1c:c1:db:
ac:81:b3:83:c9:8c:5a:6d:c3:8d:6b:0e:13:ad:28:f4:ba:c1:
af:c5:5a:c6:2a:d5:7c:9c:9f:77:e7:41:da:42:8f:6a:3a:74:
72:fb:e4:ba:81:76:11:14:ff:7e:8c:73:8a:21:4d:0a:45:8d:
8e:32:93:0c:a6:28:b9:a5:3f:e7:11:ea:96:66:51:47:f6:64:
a5:10:94:5e:4b:36:b7:0d:40:5f:c9:c5:1f:f2:66:82:3f:6a:
6d:5d:2d:6d:9f:89:02:2c:f2:79:8d:e6:75:3a:29:38:83:55:
18:f5:da:32:58:fe:dc:73:0b:da:a4:99:79:48:3a:c3:85:4e:
de:96:d5:c3:e5:ae:39:08:8e:3f:44:8a:9c:fb:2d:a1:33:9d:
d4:a9:84:4f:ef:c3:cc:d6:d1:cc:d2:7f:ca:a1:4a:33:7c:fc:
f7:15:3c:90:b1:09:97:51:b6:de:00:6f:ee:4d:ef:bb:23:56:
4b:f0:cd:17:20:61:39:68:28:4e:40:d9:bf:89:60:b6:b2:d7:
8f:15:22:cf:54:df:af:86:ed:a5:2d:41:fa:28:f4:15:70:64:
4e:10:62:b9:bb:a5:ea:90:29:c2:b3:8b:3d:ae:64:6a:2a:5e:
01:32:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:01 2026 by rpki-client