
$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
File: MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json)
Hash identifier: U+1mRteVmZheybInWxuiQoaDbPrsOHS2tUjLRBVKVCs=
Subject key identifier: 35:CA:95:29:1A:AF:F7:97:F5:C5:90:CC:DE:48:85:5B:57:C2:36:93
Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
Manifest number: 018B
Signing time: Mon 27 Jul 2026 06:54:37 +0000
Manifest this update: Mon 27 Jul 2026 06:54:36 +0000
Manifest next update: Mon 03 Aug 2026 06:54:36 +0000
Files and hashes: 1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: AoxhoIsYpU+LEDiq1jRT64NCZnQILKRt0izHN3b189I=)
2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: jIrHOyH1QDZvv2If2z5/HwQNB+UGwuoFURWKMIbprA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Validity
Not Before: Jul 27 06:54:36 2026 GMT
Not After : Aug 3 06:54:36 2026 GMT
Subject: CN=6a6700ad-dd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:f0:c3:38:b4:d9:1f:42:cb:7a:e8:e0:0b:
4e:27:09:25:aa:34:59:22:18:02:36:5a:a5:75:c9:
d9:5b:f1:bf:d8:21:a6:ce:e0:bd:d2:66:09:7a:52:
2c:76:7a:54:43:08:21:48:3a:65:af:f1:52:4f:be:
5e:cd:dd:27:e7:bf:c6:38:77:20:9a:d3:65:5b:02:
fe:5d:ed:57:97:e6:6c:3d:c0:5a:83:36:b9:3b:2c:
74:96:5e:84:80:67:16:70:f1:a3:03:4c:47:de:1e:
e9:ed:8e:4a:c9:77:be:f5:07:35:1b:4e:54:d9:bd:
6e:6f:c9:52:91:a2:58:94:ce:e5:42:ad:00:02:8e:
60:33:51:db:d8:6d:6e:a9:d2:fc:5f:8c:f2:d4:49:
6c:34:c3:98:b0:b5:4d:47:54:11:8a:e6:6f:09:17:
a3:de:9a:a3:1c:34:7f:7d:48:a7:ef:07:e6:4c:84:
74:bc:e1:a5:58:9c:f3:ca:62:71:2f:f1:5e:f1:33:
d2:58:04:be:74:1e:06:c1:e9:12:86:5d:3b:bc:15:
33:29:3b:81:15:79:12:4b:1f:21:60:bf:92:63:b7:
fa:d7:7a:3b:f6:b7:b0:79:b1:f1:c1:9e:60:e6:ff:
48:be:73:72:96:55:27:28:b6:03:63:9a:d2:6c:22:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:95:29:1A:AF:F7:97:F5:C5:90:CC:DE:48:85:5B:57:C2:36:93
X509v3 Authority Key Identifier:
keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ad:ee:d8:fe:e5:00:68:29:13:8a:9d:54:70:63:2a:8a:83:
86:1a:d4:b8:ca:1b:29:ca:f3:95:f3:ce:0a:9d:e3:69:0e:94:
c8:81:b4:c1:31:16:72:13:ad:18:89:c8:ef:fe:ec:1a:36:3f:
13:53:b8:13:a0:15:2d:29:1b:19:5f:1e:c7:e6:dd:b5:86:cb:
a6:5b:ae:da:1c:33:60:4d:8a:6d:ab:7f:79:43:d4:c2:2a:59:
34:f3:85:d2:d1:5b:35:a6:9e:51:8b:8a:9d:76:e0:97:19:8e:
1a:71:8c:30:48:ca:67:87:f4:33:8c:f7:91:d1:54:37:0b:2d:
e1:28:6b:35:d2:06:7e:eb:44:68:ae:ba:64:86:6f:54:f7:a6:
88:cc:1d:d8:f3:b0:78:ff:2f:be:32:0b:ad:84:a9:47:bd:d2:
21:9c:2b:70:43:1f:1f:30:81:b3:0c:21:59:ad:ff:bd:72:3a:
b8:db:37:85:bb:ff:a0:c3:a3:ee:fc:4e:a7:86:9f:76:f7:9c:
ea:00:b6:47:56:e8:85:73:6c:8a:69:ff:e3:5e:54:a3:ee:4e:
cd:d5:92:2c:d6:ca:56:f4:92:45:fb:c4:ee:68:4f:48:59:20:
5f:4b:fa:f9:c9:19:38:7d:d5:6e:b3:a7:21:3e:66:4f:62:81:
2b:65:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:44 2026 by rpki-client