
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json)
Hash identifier: qXXyrRrXjys6xSqTVaay+98ITw1zJgeNxblBy1Sh1NM=
Subject key identifier: E1:22:FE:90:12:4F:03:A4:AB:CB:74:F7:26:1C:74:84:97:F1:F6:EB
Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
Manifest number: F5
Signing time: Wed 25 Mar 2026 05:30:04 +0000
Manifest this update: Wed 25 Mar 2026 05:30:04 +0000
Manifest next update: Wed 01 Apr 2026 05:30:04 +0000
Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: jNWCHP0ekOOfWopnF0wNKVdo4sKY4tetN8KHF8XwD80=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Validity
Not Before: Mar 25 05:30:04 2026 GMT
Not After : Apr 1 05:30:04 2026 GMT
Subject: CN=69c372dc-7eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:e1:d5:0d:92:94:03:9d:18:b9:69:a9:a5:
12:b0:e5:26:c3:21:a2:57:2e:f6:5e:2d:81:21:62:
ea:88:68:91:36:38:12:70:8c:b0:8a:9f:e6:53:61:
6a:78:d3:83:4e:b0:de:64:ad:bb:d5:d2:bf:5a:44:
92:d4:ad:c1:31:45:c3:88:96:8e:49:aa:0a:2c:10:
88:37:d5:5d:1b:59:b8:81:ae:50:f6:6e:c7:c6:6d:
28:29:ee:fe:9c:89:94:49:d5:7e:91:99:b5:3f:54:
5e:c8:4b:6e:fa:9d:af:e3:cd:b8:6b:4a:9e:c5:c0:
e2:dd:4c:19:14:6a:a6:c9:94:69:94:20:74:2d:27:
85:92:2f:16:11:20:50:75:70:2a:d7:b6:d3:0f:c2:
46:93:20:66:00:41:72:03:a2:75:8e:23:25:c1:13:
7f:94:81:56:0c:c4:2c:2e:9d:1e:c2:8f:04:0d:fc:
b4:d8:06:a3:af:3d:5f:00:33:26:c1:7a:3a:e3:96:
8e:b0:94:19:ee:96:b5:96:07:6c:23:65:a7:27:97:
92:a7:f6:9a:d6:e2:33:fc:93:e0:1b:ca:b4:28:01:
2e:ca:cf:76:01:38:cf:a1:8e:6e:ff:fc:74:0e:2c:
0e:c1:60:f2:5c:bc:83:5d:fc:1f:6a:f9:68:22:52:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:22:FE:90:12:4F:03:A4:AB:CB:74:F7:26:1C:74:84:97:F1:F6:EB
X509v3 Authority Key Identifier:
keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:0d:1c:bf:fe:7c:68:eb:d0:43:57:94:1a:d9:95:28:cd:b7:
a3:e8:70:44:f5:0d:f6:17:5e:85:f1:65:63:4d:80:8c:31:f6:
a1:fa:c3:50:55:97:c6:cf:8c:69:10:1a:3d:7a:4f:be:ec:ae:
20:36:30:2f:28:5f:73:c9:93:75:a2:11:f7:9d:12:0a:db:43:
b4:b0:48:06:97:27:bc:d5:f3:21:da:08:33:d0:5f:d4:ee:c1:
a1:72:c3:55:eb:a5:f1:1b:e3:59:93:bc:78:9c:1b:7d:dd:0d:
1a:42:2a:c8:1e:fc:96:56:b1:e9:7a:ca:07:63:04:03:61:a9:
aa:24:e5:18:9d:d6:78:ec:cb:1b:f5:d1:27:d1:5d:d5:fc:57:
71:41:71:36:26:16:99:97:8f:db:39:c4:4a:cc:a3:33:1a:cf:
a8:e5:61:ed:c4:11:6e:03:27:e6:9e:0a:99:87:c7:81:ad:49:
4a:3c:1e:09:d6:b8:da:34:1b:d8:d9:56:12:49:2a:62:ba:44:
8d:9c:2e:a6:15:d0:53:73:ba:dd:3c:60:88:c0:f7:4a:06:51:
86:3b:94:f3:df:6f:f1:85:2b:98:f0:27:1a:77:b6:e2:c7:47:
6e:0e:11:d0:03:d1:c5:24:8c:ee:5d:d8:95:67:70:67:15:4a:
4b:cc:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:45 2026 by rpki-client