
$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft
File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json)
Hash identifier: c8E3ouIzg4yBzlwe0GfTpIlrykouJll+nLejUVngysg=
Subject key identifier: 3D:06:FA:87:D3:DA:68:70:3A:47:85:BD:CE:47:BE:DD:19:E7:79:4F
Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7
Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7
Certificate serial: 0451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft
Manifest number: 044B
Signing time: Mon 11 May 2026 00:18:41 +0000
Manifest this update: Mon 11 May 2026 00:18:41 +0000
Manifest next update: Mon 18 May 2026 00:18:41 +0000
Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: fzMCF6LNfWFlAAJLjSDauJO1Hn60Dr6acbr6myRmLHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl
rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7
Validity
Not Before: May 11 00:18:41 2026 GMT
Not After : May 18 00:18:41 2026 GMT
Subject: CN=6a012061-082c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:b3:ed:91:c0:14:86:83:18:76:7f:ba:9e:
c3:65:fc:3b:4a:ab:ba:fc:a4:73:f6:c4:86:0c:53:
59:26:c4:1c:17:fb:10:56:24:ed:bb:47:7e:eb:78:
d5:43:eb:ba:7a:13:73:8d:f5:92:4e:94:97:c6:7a:
45:5a:7e:f1:70:02:8b:b6:db:14:09:c6:93:c8:99:
41:b8:be:b6:87:3e:66:07:d4:3f:36:00:42:91:b2:
d1:a5:a1:24:b3:d1:99:4e:68:a8:fd:b8:2e:f2:9c:
30:19:56:22:80:7a:c9:4d:60:97:53:a8:61:48:5d:
c9:f5:fc:ab:3b:b1:ce:38:f3:17:49:d1:ec:2c:67:
51:c5:ee:ab:9d:65:1f:a9:04:01:e0:1e:e5:c4:48:
df:9b:0b:58:62:d5:06:24:20:88:2e:ef:73:ec:7c:
f5:13:e0:ac:05:70:c8:f2:a7:93:9b:16:1f:d1:8f:
37:0e:68:bc:90:b3:ad:f2:8d:d9:76:29:37:35:14:
98:a7:06:fb:69:91:58:5a:b0:08:b6:53:cd:2c:28:
4f:b4:f2:e4:53:d0:d9:a0:9e:9a:54:3d:d2:85:d4:
7f:e7:d3:b4:31:41:1f:a1:5c:20:e5:af:15:ea:a4:
f2:c7:7c:65:b3:de:d5:c9:f2:bc:25:0f:96:af:8f:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:06:FA:87:D3:DA:68:70:3A:47:85:BD:CE:47:BE:DD:19:E7:79:4F
X509v3 Authority Key Identifier:
keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:a1:10:1c:b9:a7:67:c7:5d:f4:c7:39:05:27:ae:86:9a:d7:
51:e5:ee:79:a4:9e:eb:23:9d:74:5a:d6:56:47:4c:11:98:21:
00:69:47:b2:2d:93:77:6c:31:9d:86:e8:1f:c3:d1:b9:5e:b4:
d9:8a:37:69:42:44:2d:df:69:c0:db:8e:e0:0f:b5:9e:17:9a:
28:4b:ab:fe:06:36:eb:08:6b:4c:2e:7f:17:f8:89:14:8b:62:
50:db:5d:cf:e1:4e:ec:68:17:cc:8c:d5:65:59:65:dc:8a:e5:
e7:6b:bd:e3:2f:a7:d8:7e:87:7a:d4:24:1e:0d:7f:75:0b:8b:
37:d2:e2:0c:52:78:cd:bb:3d:ee:fe:d7:35:63:39:45:0e:90:
7c:53:96:15:b3:ea:a4:28:35:2a:27:40:07:71:e2:b9:cf:69:
d3:83:17:60:07:5a:31:f5:bd:e2:e1:70:00:f1:b9:7c:bb:0a:
10:80:84:d1:a4:0f:b5:bd:df:88:c4:8a:6f:01:df:f8:6e:c5:
78:b9:ce:92:3f:8e:72:e7:d5:68:da:3a:7d:0d:ae:e2:07:a6:
b6:33:af:c7:b0:9e:de:5b:9e:bd:4b:0d:ca:dc:6b:17:1a:67:
60:e7:1a:d5:8f:b7:48:e1:b0:72:6b:ef:71:6c:5f:b9:93:f5:
72:9a:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:40 2026 by rpki-client