
$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier: kFfioUKnfWyWKbUhHCOds5gxTwteVFHvFq3SoTNXTCI=
Subject key identifier: 6D:49:20:63:AC:79:AC:D4:0B:EA:6A:24:7E:C2:8F:6E:9B:65:61:11
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial: 2631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number: 2616
Signing time: Mon 02 Mar 2026 00:10:25 +0000
Manifest this update: Mon 02 Mar 2026 00:10:24 +0000
Manifest next update: Mon 09 Mar 2026 00:10:24 +0000
Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: dUU2LYtULgbRUE/GXVcnMYcti3iCknYvWmXaDpUTqOM=)
2: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 1o77dodqmGPYDz/5Mp6mcgiLtsSwLHvDTMCzJi40a1k=)
3: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: tyh4MT4qSJmExqCrFnw0c2r/E9gHBqGfx9yaFDJlbgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9777 (0x2631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Validity
Not Before: Mar 2 00:10:24 2026 GMT
Not After : Mar 9 00:10:24 2026 GMT
Subject: CN=69a4d571-0147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:b5:70:fe:07:bf:f6:38:dc:23:19:d5:b2:
da:76:34:d1:0b:e4:22:f7:79:6b:34:9a:b5:96:d2:
3c:a2:24:0f:d7:29:b6:5f:20:95:2a:f3:0a:99:d1:
c2:81:af:77:45:ad:1d:fe:84:49:fb:77:cc:0e:05:
22:8e:52:b5:ce:8c:d0:0a:9c:0b:42:42:59:9d:da:
97:68:cd:d0:7e:8e:a9:55:59:7e:9f:4a:42:be:1b:
1c:bf:4e:45:b9:b0:66:12:c7:da:0e:0b:ca:cc:7c:
d3:d8:9e:fb:c0:a9:8f:d2:d0:38:15:0f:a8:9b:7f:
4f:21:8e:37:98:45:df:50:ea:cd:8f:9a:6a:db:c3:
ba:10:44:71:4f:1e:08:6b:37:54:4c:62:63:ad:aa:
03:c8:00:ae:71:14:8c:b0:b4:0a:9c:02:08:7c:9e:
56:ab:1b:19:bf:ca:4f:f6:f3:e1:8e:65:67:b4:a2:
40:f5:90:a3:5a:90:0f:7f:9d:6f:00:4e:71:61:4f:
a6:9a:5a:5e:cc:a7:fa:6c:67:36:d6:03:6a:93:24:
f6:8d:c5:a7:54:43:8e:01:0a:26:c1:d3:4d:08:54:
74:b8:1b:35:91:58:81:aa:ea:f5:4f:63:e6:d9:2c:
bd:8a:57:02:27:b7:f4:33:75:0d:32:6b:28:1b:e0:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:49:20:63:AC:79:AC:D4:0B:EA:6A:24:7E:C2:8F:6E:9B:65:61:11
X509v3 Authority Key Identifier:
keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:aa:ad:46:88:6c:ed:58:72:b1:0a:55:f4:5e:2b:e3:74:80:
00:7c:69:09:87:05:b0:d9:42:0e:4e:ca:99:75:05:c2:c9:54:
35:94:fe:d4:e4:63:8d:f0:03:fe:d3:da:0a:a3:3c:1c:2c:9a:
3c:d7:02:f9:98:05:f4:20:11:c2:7a:c3:86:69:12:49:2d:f8:
2a:20:21:bb:3e:a6:5c:59:79:7b:3c:25:d2:02:d6:73:e8:e5:
18:e1:87:64:29:2c:b0:c1:b4:f1:c8:68:12:4a:cd:4d:53:02:
69:bd:e8:e0:59:9a:2b:e1:21:2e:3c:eb:d8:1d:fb:7a:44:24:
0b:83:df:1f:f3:31:34:dc:8e:32:29:22:25:19:26:6b:7f:94:
2e:7f:60:6c:90:26:2b:64:a5:06:b5:7d:09:19:a8:59:95:0d:
c6:f0:c3:94:37:f8:48:1e:8c:ef:0e:2b:a2:aa:52:c1:57:7a:
97:47:c6:bd:71:f0:f2:37:20:4b:bc:cf:cd:21:e1:8b:86:39:
08:87:87:e0:ad:a8:b2:fb:b8:63:e1:e5:d6:56:52:ea:97:6c:
e3:18:6c:ac:80:10:f4:84:e6:a0:d0:6e:72:ba:ca:9d:97:53:
b2:04:61:c3:65:f0:d1:c4:2e:4a:20:8a:5f:22:92:7b:c7:6e:
21:93:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:29 2026 by rpki-client