
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier: qJLvAUC5SEPfem/qme5l15kyCU8P3/mkxK7G9vgzCKU=
Subject key identifier: B6:B2:39:E9:9E:CD:7D:52:26:AC:AB:EB:14:82:18:93:FB:E1:3A:73
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial: 08A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number: 089A
Signing time: Wed 22 Jul 2026 21:14:07 +0000
Manifest this update: Wed 22 Jul 2026 21:14:07 +0000
Manifest next update: Wed 29 Jul 2026 21:14:07 +0000
Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: SHQlhU36agGMSGSYcUoqxfBIEIXtmg1FKzYgzKHnbVY=)
2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: 7lILAk4gsWPIDZdA1SJEcAGVilUIsUdUMv+Kcbhfelo=)
3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: e6YP5hoyPP9E+431/sCsWnlZVdwuRyAJ8acWlo4Re+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217 (0x8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Validity
Not Before: Jul 22 21:14:07 2026 GMT
Not After : Jul 29 21:14:07 2026 GMT
Subject: CN=6a61329f-2fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:c3:8b:2d:cb:23:7c:65:14:c1:f3:fa:13:
71:2d:c0:11:d7:04:27:ae:57:de:c2:f9:a0:b1:6c:
6d:bc:6c:f3:de:c1:54:c1:42:eb:de:bb:57:94:60:
57:a8:e3:51:a3:62:b7:c9:21:b6:25:0b:e1:6b:48:
e4:ba:a5:47:7f:19:b8:b7:80:ee:55:4c:5c:83:62:
86:c3:27:9e:58:88:42:d2:c1:5c:e5:31:66:7d:fc:
a9:ef:57:08:b0:4e:c9:35:08:bf:24:33:a3:8d:45:
4b:67:05:32:6c:01:21:26:7d:19:0d:f3:1a:6d:b6:
af:5e:52:33:85:9f:b7:f5:ef:8c:54:1f:81:54:f6:
9e:f1:7d:59:27:a6:bc:7c:12:e4:91:b2:00:42:55:
62:8f:32:e8:f2:79:3c:cd:4d:76:7b:78:c2:29:fc:
62:83:f4:df:e4:5d:06:d8:ab:15:a6:d7:7f:30:4e:
18:28:e0:b9:c0:cf:9d:54:ea:cc:21:d3:0f:bd:f8:
04:14:80:31:d7:dd:90:78:ed:9a:0b:b9:d1:c4:42:
b2:cf:fc:0e:20:6c:8a:b2:1a:41:1c:4a:22:69:c6:
74:0e:aa:55:62:94:77:eb:94:fd:5a:71:0b:a8:2b:
06:38:af:01:6c:ba:33:22:79:16:ab:41:90:d4:90:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:39:E9:9E:CD:7D:52:26:AC:AB:EB:14:82:18:93:FB:E1:3A:73
X509v3 Authority Key Identifier:
keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:27:dc:b5:a9:5f:c7:5a:ed:49:d2:a4:cf:56:95:41:2d:90:
94:ef:47:88:5d:e1:14:e7:bb:9e:b2:ab:6b:f0:aa:25:ef:f1:
44:6e:bb:37:f9:fa:07:64:0d:8f:30:8d:bc:23:87:f5:c8:fb:
8e:51:1b:f3:57:e2:31:c7:a8:f8:3a:40:51:10:84:03:11:d4:
f8:f1:b2:55:19:e2:7d:ec:15:bc:5d:94:9e:95:f0:e5:5c:44:
00:94:ff:cb:1b:76:9a:c6:1f:46:a5:27:8c:1c:fa:3a:74:f7:
af:c5:33:6b:4e:86:de:1d:6e:92:75:b2:10:02:10:5c:48:32:
1e:10:8b:4e:7e:0f:6f:18:ea:93:b4:c0:7d:79:c8:c9:d5:e0:
77:4c:6a:c0:e6:b7:53:75:b9:52:db:1c:74:e4:86:5e:8b:06:
32:9a:a4:f3:6d:bd:ab:70:84:c0:45:b2:a5:06:e2:11:84:a4:
88:bd:9b:5c:0e:9e:21:5d:7e:d4:28:1a:76:dc:36:fd:20:77:
f9:1a:6d:24:fe:3b:6c:6f:02:c4:8c:3d:48:e5:e7:20:4a:25:
4b:88:67:81:d8:a6:a6:6e:04:9c:62:c7:bf:f9:52:51:75:d5:
3f:7c:50:b8:d7:a8:d0:38:50:01:dc:fe:4c:e8:f8:ef:dd:1f:
74:73:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:45 2026 by rpki-client