
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier: H/dJiCBZLTOMCKXlWn3bXtW98wV64MVTUBhJ4A3/Sxg=
Subject key identifier: FA:4E:8D:64:BD:A9:CB:CC:DF:55:50:85:89:C7:21:9A:C5:9A:08:94
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 124B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number: 0DD3
Signing time: Wed 22 Jul 2026 20:36:33 +0000
Manifest this update: Wed 22 Jul 2026 20:36:32 +0000
Manifest next update: Wed 29 Jul 2026 20:36:32 +0000
Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: 6Lnn0vGerEqJ4rmXu36iWZmZ+Dd/lCS5HkGuucJxtbM=)
2: B0F927B62E5111F1BD10F65598833773.roa (hash: lEC4h0C/BlWeoQezEUq/wosvOp1Bq3k86rCVxSiaJ7c=)
3: A173B894112711F0845DF16FC4F9AE02.roa (hash: PZTxpjB636ZwcR/b+ew6RaaC+tAKodGrZdfamhS9xkI=)
4: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: WOG/JDnTMbLnKggPICFOEZMrJLYgxzH3vajEoHzJKiM=)
5: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: leKyUuCIlZ14TjNCgY53HEbyQblwhhLPh9MB2YSGjFw=)
6: 9415082C580911F1AF5AA0C49D833773.roa (hash: ZXqZlUpuR0qiSlcSWwYD4VZZKGXWPn1lkEN6cYxmbW0=)
7: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: bNrxB+4vYm1vYBbu7foU1nk5+0scTY3fNESf2+DiIQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4683 (0x124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Jul 22 20:36:32 2026 GMT
Not After : Jul 29 20:36:32 2026 GMT
Subject: CN=6a6129d1-593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:3c:d8:74:db:c8:4d:0d:20:5f:98:f0:2b:
95:db:2d:63:47:55:c4:0d:19:55:45:1c:77:cf:d8:
b9:fb:ad:40:68:2d:6b:fa:69:01:e3:ba:2b:0b:f5:
ca:81:d9:7a:a3:c1:98:55:05:6f:ce:41:51:9b:a7:
42:02:4c:28:84:9e:5b:8e:b5:5f:a4:8b:3b:bc:33:
76:ee:70:4c:61:7e:b7:83:10:aa:80:23:e6:16:49:
07:3a:46:40:8e:12:e0:a3:1a:03:27:b3:f4:33:21:
40:69:54:8a:f2:ee:af:f4:4a:88:8f:f6:7d:53:9b:
78:eb:2c:8c:f8:db:95:15:d5:fb:02:52:a7:4b:53:
ab:13:ec:7c:15:a3:48:6f:68:02:13:b5:60:eb:59:
c4:0c:25:db:00:e9:7b:b3:e7:00:55:c2:b2:f5:2f:
dc:86:a5:f9:b4:ea:d7:e7:1b:02:02:de:75:1d:fa:
18:1d:ab:43:59:b0:33:c5:b3:d8:43:1f:32:e2:01:
86:38:b9:bf:f1:c8:c5:07:27:76:ae:b5:91:dc:d3:
c8:4f:3a:35:45:68:28:72:9d:28:e4:52:59:8d:73:
3b:4f:17:a6:16:1c:5b:66:c9:c1:89:aa:6a:f8:a8:
64:3d:79:6f:b5:a8:85:e0:1f:e0:cf:df:2f:04:84:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:8D:64:BD:A9:CB:CC:DF:55:50:85:89:C7:21:9A:C5:9A:08:94
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:11:64:68:4e:b7:88:47:48:a7:50:09:39:0b:88:76:d8:
80:7f:a7:ce:25:d6:45:eb:ad:7f:93:b3:9b:85:0b:34:63:0a:
9c:c9:55:5f:99:bd:73:b6:6a:c3:66:f9:19:f8:5c:53:89:ae:
ad:06:93:7e:5c:a4:04:de:c3:eb:e6:a7:ac:d8:c8:a0:62:1b:
5d:19:04:c8:0c:fa:ee:50:e5:f4:02:2a:6f:72:61:91:39:ba:
39:83:4b:37:94:12:48:a0:45:f0:2a:3f:88:0c:ad:4b:8b:20:
d7:87:c7:9a:69:49:83:62:98:cc:64:a7:c9:cc:36:73:80:0c:
8e:12:45:35:da:56:94:c5:19:17:69:96:14:f8:83:fd:6e:49:
de:2c:0d:6f:eb:d6:bd:ed:dd:29:c8:3c:dc:1c:0e:49:1b:5b:
e8:b6:99:be:69:92:7f:a3:0e:39:b3:73:d7:da:b1:fb:84:55:
cb:32:f9:90:23:5b:80:6b:6f:3f:2b:a7:61:58:ae:d4:b0:5b:
7c:f4:93:bb:9d:80:99:8f:30:85:fd:09:c3:65:53:0e:6a:ef:
2c:37:40:26:1f:d4:16:8a:c0:1b:05:90:22:44:a4:00:ae:93:
cf:41:1f:10:4e:11:99:97:36:37:10:6f:08:31:1e:74:28:7d:
7a:89:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:47 2026 by rpki-client