
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier: 4Z3FRdSqONAzQVKolRAknEmJRN7tgp5Ct3pBeOdUJ98=
Subject key identifier: E0:71:C2:4E:07:1A:A1:B9:37:98:57:D4:DC:2A:38:2F:76:9B:9B:1C
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 127A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number: 0DFC
Signing time: Sun 20 Sep 2026 20:00:36 +0000
Manifest this update: Sun 20 Sep 2026 20:00:35 +0000
Manifest next update: Sun 27 Sep 2026 20:00:35 +0000
Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: uD2LNRjfDlaGK4yVBYcW0Cw2j+w5HiHv4U/DjSZ5rnc=)
2: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: leKyUuCIlZ14TjNCgY53HEbyQblwhhLPh9MB2YSGjFw=)
3: 9415082C580911F1AF5AA0C49D833773.roa (hash: ZXqZlUpuR0qiSlcSWwYD4VZZKGXWPn1lkEN6cYxmbW0=)
4: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: WOG/JDnTMbLnKggPICFOEZMrJLYgxzH3vajEoHzJKiM=)
5: A173B894112711F0845DF16FC4F9AE02.roa (hash: PZTxpjB636ZwcR/b+ew6RaaC+tAKodGrZdfamhS9xkI=)
6: B0F927B62E5111F1BD10F65598833773.roa (hash: lEC4h0C/BlWeoQezEUq/wosvOp1Bq3k86rCVxSiaJ7c=)
7: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: bNrxB+4vYm1vYBbu7foU1nk5+0scTY3fNESf2+DiIQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4730 (0x127a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Sep 20 20:00:35 2026 GMT
Not After : Sep 27 20:00:35 2026 GMT
Subject: CN=6ab03b64-9f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:eb:6f:47:71:c9:e4:c3:13:10:83:a5:ab:
3b:f7:d5:97:2f:a5:ee:3f:7e:eb:55:8a:4d:0e:04:
28:44:c4:08:32:6f:73:5c:1f:50:27:4b:2b:b9:ae:
20:e7:be:00:6c:e7:2e:5c:c4:87:20:66:27:06:af:
0a:ae:98:7b:bd:ae:f4:6f:3b:e7:f8:32:1d:77:de:
9d:ab:4d:f5:75:9e:ca:a6:a3:e5:bf:67:eb:61:72:
ec:16:2d:a6:1d:04:a0:b0:83:5b:9d:9d:b2:fc:aa:
dc:8e:8c:bb:47:a0:e4:5a:e9:71:c0:cd:8e:10:2e:
9a:a0:02:4a:d5:48:8a:ff:b5:4b:39:0c:cf:97:11:
0a:59:c2:63:26:aa:92:87:fd:8b:ae:c6:96:c0:3d:
c8:a7:14:74:cb:36:ac:c7:94:2a:22:5e:0e:7b:ee:
61:5c:ec:ec:2d:3b:3d:c6:22:14:93:13:e1:f4:13:
5a:e3:1d:61:a0:67:9a:ef:85:4e:74:af:0c:11:ab:
10:c9:44:5f:5d:8c:c3:55:8f:54:f2:ba:6f:ae:d4:
ee:40:0e:3a:82:2e:a9:4a:c2:35:1f:9b:be:79:07:
84:57:bc:ec:88:82:8a:83:2d:41:fc:5b:6f:65:0e:
b1:df:07:79:d3:9d:bb:c6:5d:cd:69:b8:2a:f9:c5:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:C2:4E:07:1A:A1:B9:37:98:57:D4:DC:2A:38:2F:76:9B:9B:1C
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:a8:64:ae:a8:3b:ec:cc:ed:cd:55:fe:b6:71:aa:c4:37:08:
f8:7b:8b:8c:f3:a8:82:75:b9:0b:66:b4:aa:a5:d4:8b:cb:cf:
c2:25:39:9d:84:29:c9:76:c7:c5:9a:71:1f:5c:36:81:52:2c:
ea:63:47:a5:97:46:91:3c:41:70:40:10:13:33:ca:21:97:26:
0e:6c:93:2b:c4:e1:f5:b9:58:58:f1:6b:aa:f8:79:66:d8:5e:
73:ba:58:23:68:00:49:36:e0:fe:74:3f:e7:24:ee:e4:c7:45:
3f:cc:9f:31:a3:c4:e7:6b:c9:aa:cc:27:c0:f6:d6:c3:f6:9a:
c5:12:e5:0f:ac:71:4d:85:08:fc:95:da:80:46:5f:cf:6b:93:
72:e9:5a:3e:4e:b9:f9:63:5f:71:e0:34:97:c7:f5:97:5e:3b:
8b:11:c4:4a:4a:c4:04:97:dc:d9:4d:a4:13:8e:3f:43:29:01:
8d:09:60:b0:fb:77:42:82:28:d8:e8:69:1f:5c:19:95:e9:52:
e3:2c:5e:f0:df:6c:94:b4:44:4f:39:af:b6:1b:47:c3:11:2d:
83:9b:0a:12:51:d2:5b:05:d4:24:8d:1e:5e:14:8c:21:e7:94:
97:f3:c5:39:f8:7f:b7:07:bc:3d:b4:9d:4a:d7:df:eb:02:62:
2d:72:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:00:11 2026 by rpki-client