
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
File: MjQC2m9aUgggITsu3L_s7DrJEEU.mft (raw, json)
Hash identifier: PZLf1itzqBIA3u0bF/CY2PMhK4pIKi9NgZ+Gml9mX0Q=
Subject key identifier: 4E:A4:58:20:E2:4C:3C:D3:30:86:20:97:3A:6B:35:9C:24:60:D7:14
Authority key identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
Certificate issuer: /CN=A913059E/serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
Manifest number: A4
Signing time: Fri 25 Sep 2026 05:35:30 +0000
Manifest this update: Fri 25 Sep 2026 05:35:29 +0000
Manifest next update: Fri 02 Oct 2026 05:35:29 +0000
Files and hashes: 1: MjQC2m9aUgggITsu3L_s7DrJEEU.crl (hash: 5kHmxlVSOFZ6ah7PFFBg8RHh0w2jRg9n4Jhdg/Qpq2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913059E, serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Validity
Not Before: Sep 25 05:35:29 2026 GMT
Not After : Oct 2 05:35:29 2026 GMT
Subject: CN=6ab60822-daa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:d2:6d:7a:17:60:eb:3c:5e:48:31:d7:e5:
1e:07:e4:12:7c:40:d9:ab:fa:0b:63:0c:90:ad:f4:
06:4b:c0:f1:1a:79:3e:ae:fa:10:e3:34:61:7b:9b:
5e:51:d3:29:3a:89:f2:3c:93:14:22:18:95:59:f3:
c1:87:5c:81:ee:c9:f8:96:eb:7c:e1:86:5e:ec:35:
27:a2:0f:fa:4e:67:fc:52:84:68:87:84:db:29:e8:
b3:d0:bd:6f:9b:f9:6e:26:dd:66:c3:26:bb:0b:fc:
f0:26:2f:be:0e:94:15:d7:2c:c9:15:5a:16:ce:fe:
d2:47:01:b0:43:f1:c4:df:38:8d:73:f6:52:92:27:
0a:2b:c9:ee:60:b5:e3:be:6e:9a:68:82:b0:a2:74:
0c:2d:4c:d0:54:92:be:fa:a3:a8:53:07:1e:2f:df:
b0:fb:69:08:92:a6:88:23:de:f4:3d:8c:bb:9f:df:
05:3c:87:7e:56:ce:19:b2:58:af:34:97:b8:30:f8:
32:b3:fe:9c:0c:68:a2:9f:2f:57:6d:32:72:79:de:
37:4d:eb:23:de:32:a9:8b:62:62:59:3a:e3:a4:c9:
dc:09:52:17:62:5c:79:64:6f:3a:b3:8e:db:b9:1a:
c1:ce:3c:5e:fa:a0:8f:bc:cb:ed:48:1c:f7:e3:d7:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A4:58:20:E2:4C:3C:D3:30:86:20:97:3A:6B:35:9C:24:60:D7:14
X509v3 Authority Key Identifier:
keyid:32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:73:fd:15:8b:c7:7d:6d:e9:4b:cc:2f:c7:08:a5:e7:0f:1c:
3d:4a:7b:b4:c0:ce:d5:de:c7:bb:7a:a0:d6:6b:a8:70:a9:d5:
83:63:0b:77:d7:63:d7:be:29:25:b6:9d:aa:01:47:a7:37:17:
25:4f:4d:ab:01:23:ae:0f:4d:a0:62:7c:8f:8e:60:cf:cc:13:
66:c9:73:3e:18:e8:1d:ad:ca:1e:fb:1d:9c:a3:4d:3d:f9:ab:
52:b3:af:d7:29:73:ec:e4:ef:aa:9a:39:2a:9f:b3:e2:01:c6:
de:d8:7c:21:bb:74:13:1c:00:eb:9b:97:a6:53:85:f9:32:ad:
65:0b:7b:00:d7:10:22:77:61:47:88:81:63:93:59:3e:42:13:
98:7e:f5:7a:9c:0d:b8:57:3c:f2:a0:cc:04:4b:46:60:d5:db:
e3:fb:d2:4d:ba:b5:c6:32:3f:f8:d7:30:a3:64:00:00:c4:eb:
61:85:43:de:6f:11:95:40:33:dd:71:90:28:44:f1:a4:89:ce:
c3:3e:eb:8c:78:60:39:ea:88:63:07:05:81:ce:f8:dd:23:0b:
d6:a4:30:84:26:4d:d5:25:d4:5d:08:4c:64:18:de:e2:bf:5c:
2a:2a:ad:98:63:38:83:8a:a2:c2:1c:31:81:bb:d7:21:a9:e4:
c4:d3:cc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:59:00 2026 by rpki-client