
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json)
Hash identifier: brFoOKXj8CheJwLe0YJOd9NMh8knMffBRu/EKqCANvE=
Subject key identifier: 00:D3:52:FC:2F:34:93:31:36:EE:2E:0E:7C:A6:4A:64:26:CB:FB:69
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial: 12ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
Manifest number: 12E3
Signing time: Wed 22 Jul 2026 17:09:08 +0000
Manifest this update: Wed 22 Jul 2026 17:09:08 +0000
Manifest next update: Wed 29 Jul 2026 17:09:08 +0000
Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: gwibvoL80V8793YPTBw0Teki/gv8MQCEV/kM87QGHjI=)
2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: M8bvGDd0ZBYR9yE/jwui6k77lrbOCgZ6YWG7elpbG8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4845 (0x12ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Validity
Not Before: Jul 22 17:09:08 2026 GMT
Not After : Jul 29 17:09:08 2026 GMT
Subject: CN=6a60f934-a0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:bc:e9:8e:82:cf:16:f3:9d:87:f4:5c:1b:
b6:a2:a3:48:60:d9:5a:fa:82:94:26:a1:a5:0d:09:
bc:dd:b7:e8:90:08:6a:5f:92:9e:c0:0a:e6:ea:b0:
70:eb:4b:66:82:dd:5c:8b:70:0b:ba:ff:d3:7a:35:
da:e4:1e:44:78:12:6c:86:96:a9:e5:e2:21:91:ff:
f9:d2:ff:3b:f9:94:15:a3:85:44:c3:7b:9e:ec:3f:
b2:da:a2:5d:b1:74:9c:c4:a8:2d:1b:e3:6b:f6:e6:
22:fb:3a:65:5e:b1:d0:7d:c2:c4:31:8a:dc:a9:af:
6c:66:90:b5:e1:94:39:88:a5:26:32:5f:20:1c:1f:
62:25:b9:f5:99:78:47:84:76:69:d1:08:0f:d9:7a:
0e:7f:cc:e6:a2:05:f0:3f:ed:12:6e:78:2f:6e:8c:
0f:0b:97:4f:54:3a:56:fe:a0:12:9a:0e:be:b8:60:
6d:33:46:e9:2b:9f:6d:a8:11:fd:57:5d:0c:10:9d:
fb:5e:c6:45:b0:7c:52:69:cb:e3:8a:05:f1:45:1d:
6e:c1:aa:1e:87:21:9a:c0:f8:5d:35:53:83:46:f5:
b5:fe:2e:97:72:b4:23:23:3d:4d:b8:f8:29:50:3a:
9d:88:d1:b1:22:8e:26:fc:dd:ab:14:25:f3:11:c8:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D3:52:FC:2F:34:93:31:36:EE:2E:0E:7C:A6:4A:64:26:CB:FB:69
X509v3 Authority Key Identifier:
keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ff:60:3f:72:c5:63:53:49:dc:91:a6:27:fb:f5:9f:d2:c8:
8c:98:2f:98:55:9f:36:86:6c:ed:9f:16:79:d0:29:70:c8:ef:
0b:de:64:97:af:45:9e:b4:8e:e9:91:3d:43:c4:43:de:81:c8:
ae:21:de:a3:b0:e2:dc:67:26:8f:d7:0b:0e:de:26:4b:e9:72:
30:ec:b7:21:17:32:b0:24:14:83:46:63:dd:26:1d:45:28:d1:
bf:35:76:53:da:97:ab:17:96:43:28:83:d7:ec:fb:dc:c0:0f:
32:24:4f:c5:3a:10:20:b7:ed:c5:67:6d:9f:0e:5c:dc:13:99:
c2:e3:f4:03:9b:76:d6:95:d2:b6:f4:8a:c9:21:40:c2:5f:ba:
bc:16:44:3c:c2:3d:84:ac:b8:e3:36:ce:bc:c8:73:37:f6:0e:
6d:e6:ba:40:b9:94:1f:da:1b:22:72:99:6e:0b:30:b8:74:8a:
9e:2f:2f:0a:6c:75:2b:93:99:eb:da:9e:43:ca:9b:73:e0:13:
d2:fe:d6:9c:c1:c6:67:e7:fe:3e:5d:5f:ec:5c:7c:c4:fc:a1:
e1:40:82:d8:80:13:9c:65:78:be:12:c5:c9:7c:a9:45:4a:11:
7a:18:f4:eb:f9:ee:9f:4c:48:bf:d1:44:75:c5:96:70:2e:5f:
47:1b:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:29 2026 by rpki-client