
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier: qJJegweY3O8SHgWJe7yxm0LzkGVlhrCZtIrmLqFdtPU=
Subject key identifier: 88:81:DF:68:4B:93:B7:57:B4:03:9B:1C:01:9D:B7:B3:76:ED:5E:0C
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial: 08CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number: 08BC
Signing time: Sat 26 Sep 2026 20:44:27 +0000
Manifest this update: Sat 26 Sep 2026 20:44:27 +0000
Manifest next update: Sat 03 Oct 2026 20:44:27 +0000
Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: q2X+gsjc4DwiQNtbqDUw0sViUADUxCgm5vtlt8AivC0=)
2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: 7lILAk4gsWPIDZdA1SJEcAGVilUIsUdUMv+Kcbhfelo=)
3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: e6YP5hoyPP9E+431/sCsWnlZVdwuRyAJ8acWlo4Re+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Validity
Not Before: Sep 26 20:44:27 2026 GMT
Not After : Oct 3 20:44:27 2026 GMT
Subject: CN=6ab82eab-346d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:8e:75:d3:72:30:b5:c2:be:b0:74:84:9e:
f5:83:52:a5:d0:02:bb:24:d2:3c:bc:78:db:36:1c:
9e:94:2a:4c:59:10:8b:8a:fd:0f:9d:23:b1:63:03:
b5:c1:c1:6c:d6:9c:db:11:3d:ee:dd:33:56:a1:45:
3a:2d:a6:2f:62:37:f9:1a:5b:11:95:20:85:57:9a:
f0:17:dd:96:bc:37:d5:7d:e8:b7:0a:44:6c:19:a9:
36:46:8e:e8:8e:54:60:49:eb:5f:98:80:fd:6b:48:
9b:a3:a6:3b:78:29:2e:e6:e6:0a:ec:c3:69:0e:e8:
c3:4d:b3:c0:62:56:f5:93:70:a8:6b:92:0f:03:90:
d1:70:e7:88:52:fa:86:64:cc:89:f4:c5:af:8f:ca:
d7:10:9c:95:4d:42:e5:96:c0:d6:2e:4b:8d:a8:54:
0c:5c:b0:a8:14:de:c2:73:35:b8:ba:3a:14:ea:e2:
67:4e:55:4a:18:c0:9a:cd:c5:85:c2:b2:62:81:85:
6e:59:00:dc:dd:b5:d0:a1:dd:56:da:ec:fe:47:f9:
df:f3:f5:f0:65:a6:68:dc:1d:b8:b4:c3:7a:d8:69:
36:2b:cb:a2:06:0c:5a:28:42:42:e0:84:49:d9:3a:
67:0f:db:65:c3:4f:98:11:a1:bb:da:b4:11:8d:3f:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:DF:68:4B:93:B7:57:B4:03:9B:1C:01:9D:B7:B3:76:ED:5E:0C
X509v3 Authority Key Identifier:
keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:eb:a7:6d:fd:e7:cd:73:4e:6e:78:c1:c9:b3:b1:74:3d:b6:
10:fb:fc:78:fd:72:51:93:33:b7:6a:6a:76:b7:78:bb:ec:07:
3c:2f:1b:04:c7:b2:c8:4d:40:18:eb:18:33:5b:ec:2a:e1:9c:
c6:1a:b1:99:e3:6d:74:a4:e4:d0:07:a1:a6:2e:8a:31:c4:b1:
a2:bf:43:d3:9b:82:59:a4:fa:ea:b0:26:a0:e8:cb:91:81:53:
88:f7:85:94:b0:42:e5:af:76:5a:28:66:f4:e8:8a:9e:60:b2:
49:e4:ea:6a:3d:f1:f2:b9:76:41:7d:0e:c7:42:71:a7:29:96:
05:a2:be:16:e9:8f:bf:93:b6:e4:ed:12:0e:ef:00:46:4c:3c:
c6:ee:2f:99:7b:cb:da:07:0f:6b:52:e5:fb:88:c3:1f:01:04:
bf:db:12:0d:c9:b9:6f:97:10:a1:0a:7d:8e:20:83:10:d8:08:
1d:c6:b1:54:b9:c5:71:6d:19:21:4b:68:7d:87:68:8f:c0:dd:
aa:b1:58:ed:4e:0b:0f:0a:10:d5:0e:a0:18:d6:05:45:d5:a3:
92:2c:86:84:36:af:9e:b5:b8:2b:38:e2:13:63:15:1d:a6:31:
28:b6:42:74:f8:18:7f:95:48:b1:e5:a7:e5:b8:04:eb:00:e9:
d5:72:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:55 2026 by rpki-client