
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier: lVAtig7RxhJgybB5/QK2tsNL0aqWG8qZiqn3K8N9Sz0=
Subject key identifier: C0:32:25:25:EB:BB:8E:C1:0D:4A:33:9C:1C:14:D0:EA:45:89:36:4C
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 10C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number: 107C
Signing time: Tue 24 Mar 2026 17:18:54 +0000
Manifest this update: Tue 24 Mar 2026 17:18:54 +0000
Manifest next update: Tue 31 Mar 2026 17:18:54 +0000
Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: Kkk0UyvWhx6d44pG9cniy+HeSAItJF8SnHrWSbSUKcE=)
2: C1313974CD3611F0AF85B537C4F9AE02.roa (hash: f/A+LWguMXATEHJn4eJ0wJBZMEAJgXqjwqrEzSCq8pw=)
3: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: Bo9mMfItw30ptBSl3m5ksiJ4OhOSabDm7crZIRA9Lfs=)
4: 390C84E8CD3811F09B08A83DC4F9AE02.roa (hash: AiSldAMJ7Peh5Ix5vWF81oIDs571bEQr597s6F8mkzA=)
5: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: /USZdM8VJ9sT9L45v5Gqc1fErXfnCBLr53kJcQkQOiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4294 (0x10c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: Mar 24 17:18:54 2026 GMT
Not After : Mar 31 17:18:54 2026 GMT
Subject: CN=69c2c77e-df06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:78:10:14:82:c9:71:2f:b9:5f:8c:2f:b0:
3f:a7:85:29:3e:cf:c1:b8:e3:27:bb:60:18:08:f3:
a2:e4:fe:e1:55:50:4f:49:6f:e6:13:cd:7c:d8:fc:
4c:a3:dd:83:75:c0:59:63:f2:b3:a1:fb:1f:b2:2e:
f1:1b:6e:5f:b8:07:61:55:b1:e9:3e:2d:ed:d0:f9:
32:a0:4c:00:19:64:53:c9:31:1f:9d:37:b7:73:bd:
0a:51:80:2a:ea:55:3e:b7:8c:6d:42:07:87:72:7a:
26:2a:82:a5:b2:f4:85:e5:5c:73:b9:63:55:34:fa:
e6:10:ca:58:33:90:d5:0d:eb:6a:f6:20:93:5c:f2:
15:de:8a:6a:46:c8:a0:40:26:f5:21:04:fa:e2:8f:
13:c5:23:4c:23:2f:5c:48:76:83:1c:fc:2a:d5:ef:
f1:7a:81:63:de:85:33:f5:5e:36:ff:07:d1:3d:af:
72:93:1f:b9:df:57:3b:90:74:ca:75:56:0b:01:d6:
62:69:45:03:15:dc:6c:b2:14:53:f8:39:f6:f0:33:
31:61:2f:11:7d:b4:22:1b:71:4c:28:31:8e:53:e0:
b9:59:d8:1e:1f:42:8d:b0:c9:06:1f:a0:fb:c7:72:
18:36:c1:3b:1a:e7:2c:39:91:60:49:2e:e4:04:14:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:25:25:EB:BB:8E:C1:0D:4A:33:9C:1C:14:D0:EA:45:89:36:4C
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:16:36:61:da:1d:f8:2c:63:43:20:c7:9c:3d:67:88:ef:28:
eb:25:fe:c3:56:8c:a6:6c:d8:08:b4:7d:10:e3:3e:52:0b:01:
55:3b:95:d1:9e:8b:14:78:f3:fc:76:17:8e:03:64:ec:7d:68:
f0:89:c8:db:82:dd:39:41:bc:2e:3e:41:70:38:ce:c7:16:ff:
31:23:37:36:1c:21:73:c8:f8:82:37:99:72:25:f7:8f:dd:05:
71:65:ed:58:8e:bf:ab:02:d7:4f:f6:26:ec:00:f7:a6:71:d8:
3e:cc:60:d1:46:e1:c8:96:9c:75:ca:c5:bd:d6:9c:fd:3e:99:
d9:3d:d6:04:b4:e5:82:bb:5b:3a:ea:e9:66:4e:b9:30:59:03:
45:16:de:4d:3f:eb:33:0c:70:1c:d4:97:4b:34:4b:f1:dd:20:
a4:98:e8:40:0f:36:95:d1:ea:8c:f2:78:1b:eb:64:dc:45:d1:
10:26:42:5b:e0:ee:57:e0:30:3b:de:e7:b8:a8:3f:68:5d:6e:
c5:bb:db:e9:89:df:2c:8b:1b:39:a1:73:29:a2:ed:ad:37:81:
bb:47:a9:7d:7e:76:9e:eb:e7:6e:32:eb:fd:0f:45:ca:59:4d:
5c:ca:71:2a:24:83:ea:a0:ae:bd:35:98:48:94:27:3a:85:7a:
46:ae:56:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB
NjBDQjlBMzIwHhcNMjYwMzI0MTcxODU0WhcNMjYwMzMxMTcxODU0WjAYMRYwFAYD
VQQDEw02OWMyYzc3ZS1kZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwId4EBSCyXEvuV+ML7A/p4UpPs/BuOMnu2AYCPOi5P7hVVBPSW/mE8182PxM
o92DdcBZY/Kzofsfsi7xG25fuAdhVbHpPi3t0PkyoEwAGWRTyTEfnTe3c70KUYAq
6lU+t4xtQgeHcnomKoKlsvSF5VxzuWNVNPrmEMpYM5DVDetq9iCTXPIV3opqRsig
QCb1IQT64o8TxSNMIy9cSHaDHPwq1e/xeoFj3oUz9V42/wfRPa9ykx+531c7kHTK
dVYLAdZiaUUDFdxsshRT+Dn28DMxYS8RfbQiG3FMKDGOU+C5WdgeH0KNsMkGH6D7
x3IYNsE7GucsOZFgSS7kBBSAMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAyJSXr
u47BDUoznBwU0OpFiTZMMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD
RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzQzMi8yRENBQkE2ODVDRjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIx
RkppbF9LVThoZHFtRExtakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0xY2Ydod+CxjQyDHnD1niO8o6yX+w1aMpmzYCLR9EOM+UgsBVTuV0Z6LFHjz
/HYXjgNk7H1o8InI24LdOUG8Lj5BcDjOxxb/MSM3Nhwhc8j4gjeZciX3j90FcWXt
WI6/qwLXT/Ym7AD3pnHYPsxg0UbhyJacdcrFvdac/T6Z2T3WBLTlgrtbOurpZk65
MFkDRRbeTT/rMwxwHNSXSzRL8d0gpJjoQA82ldHqjPJ4G+tk3EXRECZCW+DuV+Aw
O97nuKg/aF1uxbvb6YnfLIsbOaFzKaLtrTeBu0epfX52nuvnbjLr/Q9FyllNXMpx
KiSD6qCuvTWYSJQnOoV6Rq5Weg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:10 2026 by rpki-client