
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier: P3cLFG+EOFWuX4zaD9ykNLZu5or5fdm2wQnskUTJ+sE=
Subject key identifier: 5C:10:ED:B0:3C:C7:6D:21:CF:E2:87:69:D5:B7:19:BD:52:6B:27:1E
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 1135
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number: 10E4
Signing time: Thu 24 Sep 2026 17:20:10 +0000
Manifest this update: Thu 24 Sep 2026 17:20:09 +0000
Manifest next update: Thu 01 Oct 2026 17:20:09 +0000
Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: eBBT4le5ga+NGoDn9iouRJLRQH7eLtggchw5+FHRWI0=)
2: 390C84E8CD3811F09B08A83DC4F9AE02.roa (hash: ONdY2CZEUdO0aLtdVqoMR3OFB/28D3pRcCa7aGvaDQ4=)
3: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: il/kmW0rv4WkXUzYTcnISQd0Jgpc6E05Nk8GNzFNspg=)
4: C1313974CD3611F0AF85B537C4F9AE02.roa (hash: tAogpPNnp8t118nb+CaaJXwXD5RiVxazMRc6z7dCh0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4405 (0x1135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: Sep 24 17:20:09 2026 GMT
Not After : Oct 1 17:20:09 2026 GMT
Subject: CN=6ab55bca-f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:61:f9:e8:6b:24:83:3a:32:b8:51:b9:9d:
af:5e:c1:8d:6a:b5:9b:05:00:31:e0:08:d2:b3:19:
aa:62:ca:55:39:a5:cf:20:2b:93:89:49:ee:c1:f9:
67:02:4c:11:3b:39:67:b5:e2:57:ea:38:b7:07:bb:
e0:3f:25:8e:c4:d3:2e:04:27:e7:42:93:00:c2:17:
72:21:60:19:e1:95:5f:c8:93:fe:20:66:26:cf:e0:
d7:35:65:f3:e4:26:d3:e3:46:0d:65:f0:2a:ed:8d:
18:a7:5f:b7:92:7b:69:12:4a:8a:fa:90:96:97:5b:
56:2c:e8:6d:6b:7f:55:b5:74:0d:bb:b9:82:d1:4d:
b0:fe:1e:50:a8:3b:d9:6c:d3:af:43:bc:68:33:d1:
b2:e1:dd:c6:2d:09:87:82:42:e6:8e:73:4c:43:fd:
55:61:62:3d:9a:c9:e1:0e:2e:0a:b9:4b:6f:6d:6c:
65:51:41:bc:ff:29:7d:d2:7f:e1:15:58:d9:ac:15:
9e:57:32:3b:e6:27:51:56:f5:ce:c7:d8:30:1d:2e:
de:b4:45:3d:1d:23:84:e2:30:c0:04:9d:7c:86:91:
b8:3f:a5:43:a5:a7:e9:f0:77:0b:5e:07:71:4e:40:
8c:f7:df:e7:08:de:bd:58:50:bd:d5:8e:9f:63:17:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:10:ED:B0:3C:C7:6D:21:CF:E2:87:69:D5:B7:19:BD:52:6B:27:1E
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fb:ba:75:55:47:01:be:09:82:51:95:4c:28:49:7b:a3:c0:
2b:14:f5:b6:90:17:f7:5b:ef:dc:ac:a9:32:00:b1:c5:ed:c0:
43:c8:cf:c5:63:ff:f3:13:1b:43:35:91:89:ea:22:45:cd:e6:
0d:29:fa:97:64:0b:26:85:49:34:a6:67:53:d8:44:56:4a:2e:
ee:9b:4b:7f:33:73:67:7b:c9:de:69:08:9f:d5:3c:e2:9f:f5:
89:c0:58:07:8d:e2:80:e8:d8:a0:6f:c1:94:6f:d2:6c:fc:e9:
0e:16:8f:20:d3:8e:c0:ce:6c:de:02:9c:5d:65:2f:f7:26:ae:
aa:f5:62:15:d4:39:9c:99:c7:4b:97:89:0b:ee:b4:50:83:83:
e7:26:4b:54:36:79:8e:ae:45:62:39:fc:c1:26:5f:71:55:80:
14:1d:da:90:df:5d:a9:d0:a2:5e:2b:4e:75:29:98:a7:8d:3b:
f9:25:28:64:64:aa:14:b0:58:9f:63:14:43:32:48:ea:fd:24:
3f:c2:59:63:e9:0f:6a:81:c1:3e:6e:bf:27:5f:cd:2e:67:67:
0a:58:aa:f2:87:65:85:4c:50:76:04:f1:c8:29:b0:d4:61:3f:
d0:86:8b:ed:19:2f:8b:71:34:03:d4:bd:3a:df:38:6f:42:46:
26:ea:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:13:41 2026 by rpki-client