
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json)
Hash identifier: MDow5pEqtpYE26fvtsz7ABoy1oBueziDFiRotc37jr8=
Subject key identifier: 24:05:A0:69:B6:E8:95:E6:19:03:AD:A0:27:95:28:B3:9A:8C:1D:F8
Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
Manifest number: 0153
Signing time: Sun 27 Sep 2026 05:40:28 +0000
Manifest this update: Sun 27 Sep 2026 05:40:28 +0000
Manifest next update: Sun 04 Oct 2026 05:40:28 +0000
Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: hYvobZs8g0wib3PItBH6jHbO9suD2Y3NiTjEqVUTV6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Validity
Not Before: Sep 27 05:40:28 2026 GMT
Not After : Oct 4 05:40:28 2026 GMT
Subject: CN=6ab8ac4c-648a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:5d:d6:08:22:2e:2d:45:a7:c6:86:ab:85:
da:7b:e2:8e:24:79:91:c2:15:d3:d5:21:25:f9:ab:
69:06:6a:4c:ab:87:a8:24:32:91:68:51:de:e3:50:
e8:e7:81:2c:74:a5:84:46:ee:f8:02:ad:4e:c5:9d:
2b:6c:af:b0:57:3b:74:58:e3:ec:13:a5:97:c6:1f:
fd:c8:b6:68:04:40:80:33:a7:4e:79:de:46:5c:7d:
f3:a8:de:1b:08:59:62:4c:47:18:22:ae:2d:3d:0b:
c2:00:66:b7:71:d5:9c:2c:39:da:2a:45:03:6e:06:
d3:4b:21:7f:6f:00:bd:37:c9:a3:c6:56:65:48:ab:
fa:15:50:fd:9c:17:17:02:18:0d:54:35:15:0a:76:
34:18:bc:29:52:e2:76:ee:a4:44:09:12:1e:47:91:
26:1d:57:37:ac:ee:2c:9e:60:e3:b8:8f:70:9f:ae:
1c:13:dc:c2:ac:fe:8d:80:d8:7e:9d:28:e3:fb:32:
d0:68:b8:61:f5:67:fa:01:aa:6d:70:75:f8:46:33:
73:3c:f1:22:40:c9:3b:80:84:60:16:49:bd:52:b0:
b7:41:6f:2a:b9:da:0b:98:c1:25:d0:be:54:ca:78:
32:d3:b6:99:8d:b6:27:b2:41:ad:2d:2c:d5:fd:43:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:05:A0:69:B6:E8:95:E6:19:03:AD:A0:27:95:28:B3:9A:8C:1D:F8
X509v3 Authority Key Identifier:
keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d1:9c:dd:63:4b:e0:fc:cc:0a:4e:ac:ff:3c:27:b8:7c:1b:
1e:34:94:93:97:59:86:57:f2:0d:d4:db:1e:59:60:4c:27:d7:
61:55:f9:ab:1f:99:f4:4a:83:73:bb:fb:21:43:e0:e8:c9:e8:
0c:b1:de:3d:3b:4f:0d:02:01:64:bd:67:bb:9b:db:04:a8:aa:
c6:69:d9:21:46:76:79:92:7a:47:06:18:b9:37:75:ea:2c:b6:
34:47:e0:db:42:ac:dc:84:52:57:1d:fd:2a:a2:31:20:d4:a3:
69:ce:25:ad:ac:61:ad:57:b1:05:c9:24:22:26:eb:bf:0d:4c:
97:ef:c1:85:5a:4c:00:fd:83:b5:10:d5:e1:4b:c1:f8:48:2f:
cc:6e:db:94:c8:a1:51:e0:2b:80:c4:e7:c4:f7:92:3c:a4:63:
f0:d3:9b:2a:4a:b8:f7:2b:61:20:20:dc:f0:0a:9b:03:8c:82:
fd:cc:59:fe:e9:6f:e2:41:ed:08:29:78:91:c3:55:7d:ba:30:
db:93:a0:fe:f5:fa:13:dd:d2:3f:5c:79:9d:34:50:70:3e:96:
a9:f2:df:ba:6b:a2:5c:28:19:ea:d0:4e:47:fb:d9:d1:20:ff:
71:4a:5b:b8:a0:88:b3:77:e1:b3:38:87:6f:4d:ed:3a:51:92:
bb:b4:ac:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzQzcxMTAvBgNVBAUTKDMyNzNCRjc0Q0ZEMzdEQzJCMDgwQUE0RjFBRDlFRDVF
RDYzRTYzMjAwHhcNMjYwOTI3MDU0MDI4WhcNMjYxMDA0MDU0MDI4WjAYMRYwFAYD
VQQDEw02YWI4YWM0Yy02NDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjSJd1ggiLi1Fp8aGq4Xae+KOJHmRwhXT1SEl+atpBmpMq4eoJDKRaFHe41Do
54EsdKWERu74Aq1OxZ0rbK+wVzt0WOPsE6WXxh/9yLZoBECAM6dOed5GXH3zqN4b
CFliTEcYIq4tPQvCAGa3cdWcLDnaKkUDbgbTSyF/bwC9N8mjxlZlSKv6FVD9nBcX
AhgNVDUVCnY0GLwpUuJ27qRECRIeR5EmHVc3rO4snmDjuI9wn64cE9zCrP6NgNh+
nSjj+zLQaLhh9Wf6AaptcHX4RjNzPPEiQMk7gIRgFkm9UrC3QW8qudoLmMEl0L5U
yngy07aZjbYnskGtLSzV/UMPGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQFoGm2
6JXmGQOtoCeVKLOajB34MB8GA1UdIwQYMBaAFDJzv3TP033CsICqTxrZ7V7WPmMg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84RTYwOEE4QUIy
NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1fVGZjS3dnS3BQR3RudFh0WS1Z
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01uT19kTV9UZmNLd2dLcFBHdG50WHRZLVl5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTNDNy84RTYwOEE4QUIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1fVGZj
S3dnS3BQR3RudFh0WS1ZeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAotGc3WNL4PzMCk6s/zwnuHwbHjSUk5dZhlfyDdTbHllgTCfXYVX5qx+Z9EqD
c7v7IUPg6MnoDLHePTtPDQIBZL1nu5vbBKiqxmnZIUZ2eZJ6RwYYuTd16iy2NEfg
20Ks3IRSVx39KqIxINSjac4lraxhrVexBckkIibrvw1Ml+/BhVpMAP2DtRDV4UvB
+EgvzG7blMihUeArgMTnxPeSPKRj8NObKkq49ythICDc8AqbA4yC/cxZ/ulv4kHt
CCl4kcNVfbow25Og/vX6E93SP1x5nTRQcD6WqfLfumuiXCgZ6tBOR/vZ0SD/cUpb
uKCIs3fhsziHb03tOlGSu7Ssnw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:19:29 2026 by rpki-client