
$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier: wBfpg4gWZJ3KI/c06quNj8fEcsW3hsFRvKYhU+cAPmU=
Subject key identifier: 7B:52:82:13:BB:CE:44:A5:35:AB:DF:96:EE:4F:33:80:01:1B:BF:70
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial: 267D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number: 2662
Signing time: Tue 28 Jul 2026 15:47:30 +0000
Manifest this update: Tue 28 Jul 2026 15:47:30 +0000
Manifest next update: Tue 04 Aug 2026 15:47:30 +0000
Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: Ynb4Tb4llwxrK7LzLK9Dm4eLXYkHIDkWleoJXTPc3ao=)
2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: tyh4MT4qSJmExqCrFnw0c2r/E9gHBqGfx9yaFDJlbgg=)
3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 1o77dodqmGPYDz/5Mp6mcgiLtsSwLHvDTMCzJi40a1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9853 (0x267d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Validity
Not Before: Jul 28 15:47:30 2026 GMT
Not After : Aug 4 15:47:30 2026 GMT
Subject: CN=6a68cf12-08e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:04:66:59:cc:67:47:84:d3:e9:e9:a8:65:
96:b7:6b:2c:b0:fd:e5:83:26:7d:95:01:9d:49:c0:
25:06:d3:53:6c:ed:56:c2:bc:3c:53:68:14:88:e4:
fe:46:75:21:3e:24:c4:74:e3:03:14:47:28:83:9d:
2e:c3:d8:38:df:e0:12:e4:ce:06:63:33:84:28:b9:
99:ec:a9:6f:2d:b0:a9:1a:a7:a5:6d:7c:f7:b4:29:
05:86:1f:ab:b4:5d:12:e1:53:b8:a1:44:5e:29:b2:
b5:0a:13:7e:25:41:a9:f3:06:8a:22:66:14:56:e1:
2f:31:be:6e:90:24:a7:a2:55:26:29:63:ea:c6:82:
83:f0:f8:45:4c:6f:99:37:f7:56:ec:ca:6b:6f:95:
c9:79:a2:3a:26:7a:b1:b8:93:ab:ff:2f:31:64:1f:
b5:74:98:40:80:68:6b:dc:8a:ff:f6:59:97:aa:d9:
68:50:c5:7a:c7:e5:a1:a3:51:5a:1e:b7:5c:c3:51:
3b:ee:97:5f:b5:27:91:ce:df:77:f1:48:54:ad:5e:
ee:1c:7c:c2:f7:c3:5a:ae:f2:8e:2d:ff:a1:06:df:
13:64:8a:49:66:a2:21:8f:41:df:54:b6:73:7a:7c:
dc:12:a1:2b:3c:c7:6c:43:ae:e0:dd:30:a7:34:8a:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:82:13:BB:CE:44:A5:35:AB:DF:96:EE:4F:33:80:01:1B:BF:70
X509v3 Authority Key Identifier:
keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:fe:bb:42:c0:2c:59:12:ab:0b:82:1f:38:51:78:79:cf:46:
e4:af:99:67:f8:82:ee:2d:b9:0a:01:bb:09:2d:6c:d2:0e:7b:
28:2f:e8:36:b5:5e:dc:9b:4c:1f:6a:8f:84:72:2b:a6:51:e1:
cd:2b:6e:59:c8:36:a0:06:4e:c2:cc:83:12:d4:52:80:5d:62:
bf:e3:c8:e7:9f:d8:7a:b1:43:83:d6:1f:8c:e5:25:a4:79:f0:
b0:40:9c:2e:8c:61:3f:5e:ef:fb:a5:70:00:9f:22:ec:8e:23:
24:0e:6b:ba:02:3f:10:bb:5a:19:87:e7:e1:23:8a:4b:d6:c2:
84:b0:40:f9:ad:c8:b7:f6:e9:87:d8:8b:1e:0a:de:c6:a8:62:
3f:ac:0f:4a:d9:33:35:f5:1a:3c:31:7c:ae:6c:99:47:69:60:
06:5c:8f:9c:31:15:26:ff:3b:8b:b7:2a:81:62:f6:67:60:3c:
ce:13:7c:43:86:d4:5c:50:3d:c0:c4:10:58:91:7b:2e:aa:35:
67:47:bd:4e:a9:e2:ed:45:2f:a9:c8:29:1c:14:75:fc:ee:60:
59:aa:e5:49:4d:ae:25:e2:ff:42:76:aa:a9:b2:a6:41:b6:83:
18:9b:01:6b:7c:3f:49:47:d0:82:8b:b8:f4:8f:7f:a2:c9:4b:
3b:7f:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:51 2026 by rpki-client