
$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier: h73lpDjBwcRlQdDJqT0M+w2n5rUPC/fjhDNm5Srs/qU=
Subject key identifier: 25:98:09:5D:E8:0F:11:C1:01:49:5B:9C:FF:D9:1D:40:D6:A3:EE:21
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number: B4
Signing time: Sat 13 Jun 2026 07:10:46 +0000
Manifest this update: Sat 13 Jun 2026 07:10:45 +0000
Manifest next update: Sat 20 Jun 2026 07:10:45 +0000
Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: kALa+tHn9dJAr4PxLG6hgbL0ofK4AI2l2c5wLOnosQA=)
2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Validity
Not Before: Jun 13 07:10:45 2026 GMT
Not After : Jun 20 07:10:45 2026 GMT
Subject: CN=6a2d0275-f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:de:c8:f3:d7:b5:b3:50:75:37:4b:95:45:84:
5c:8a:8c:de:02:dc:3c:b7:1d:28:72:57:5f:ca:e6:
69:1a:34:37:bd:25:f7:4a:ab:12:83:bc:94:e0:2e:
1f:3a:c8:80:5f:0a:e7:ed:d8:cd:f2:af:b3:6a:ae:
5e:c1:ab:42:22:af:66:fc:bd:5f:56:a8:5f:1e:f1:
8c:fc:00:4c:21:0f:de:d1:fd:75:0e:cb:09:d8:bd:
02:40:5a:15:7d:bf:92:c9:1b:74:51:c2:c1:fa:c9:
22:29:a5:9f:e6:08:d0:da:bb:0d:0a:36:15:07:d9:
4b:79:ff:ab:a3:40:fb:c2:f7:01:81:90:59:ee:80:
4b:33:36:64:22:0f:72:13:e0:1b:3d:59:6c:97:da:
ae:be:fe:96:39:5b:f0:66:63:c5:84:a8:f9:34:dd:
e6:39:77:22:58:db:f0:eb:d1:6b:de:e9:f5:2c:b9:
74:76:0c:7c:6a:a6:ea:46:6e:e4:d5:7d:b2:b3:33:
ca:4f:44:60:e9:00:7c:36:d5:24:92:38:1f:c0:78:
43:3a:40:f2:63:e2:d3:44:0b:8d:20:8b:88:6a:2e:
a4:64:ef:3f:7d:f7:75:c0:c3:d5:2f:40:df:0c:09:
00:75:2c:c8:5d:f9:97:e6:21:a2:8f:db:dc:ae:93:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:98:09:5D:E8:0F:11:C1:01:49:5B:9C:FF:D9:1D:40:D6:A3:EE:21
X509v3 Authority Key Identifier:
keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6e:e2:5f:ea:11:51:50:be:49:f1:8a:ae:64:c8:5c:89:77:
d1:85:a2:12:b3:37:f3:51:b3:0b:bc:fe:d0:aa:2b:45:2d:29:
24:89:e3:67:6d:c4:bb:41:d7:64:6b:a4:02:d1:40:96:b5:00:
77:49:d9:9e:86:98:c2:54:83:4f:23:7f:ed:8f:39:ee:3e:47:
f4:31:b6:b9:a6:87:e7:68:27:84:87:c4:35:1e:ca:a3:a3:82:
88:e0:b6:87:36:21:cd:44:4e:61:73:30:d1:aa:17:eb:5a:14:
e9:23:b1:09:4b:54:94:24:e5:32:5f:0f:87:2c:86:aa:97:bb:
8c:26:0c:71:d8:3d:ef:41:77:39:c0:fb:b0:a3:45:4d:2e:d2:
f1:38:d6:8e:56:cd:65:07:f1:cf:4f:82:19:2c:ff:2a:67:52:
f9:98:70:71:eb:12:af:a7:a6:e5:e4:7b:3f:52:d7:ba:f1:c7:
d5:92:05:11:40:9b:0f:c3:a6:7e:52:49:ee:c9:bf:f0:16:4c:
ed:be:88:7b:53:8b:0d:92:6e:8e:45:cd:bb:6f:77:29:a1:aa:
42:03:ca:5f:82:54:17:f2:d7:97:2b:73:11:53:d8:ea:d3:2c:
c6:63:5f:e2:64:95:6b:af:b8:4f:a5:69:79:ee:b5:76:03:d6:
ba:58:12:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQzNEQxMTAvBgNVBAUTKDMwRDcxOUY5QzZEMzdFMkFDOUY0RDZENEIxRjdEOTc4
RUMyQTMyODkwHhcNMjYwNjEzMDcxMDQ1WhcNMjYwNjIwMDcxMDQ1WjAYMRYwFAYD
VQQDEw02YTJkMDI3NS1mOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA697I89e1s1B1N0uVRYRciozeAtw8tx0ocldfyuZpGjQ3vSX3SqsSg7yU4C4f
OsiAXwrn7djN8q+zaq5ewatCIq9m/L1fVqhfHvGM/ABMIQ/e0f11DssJ2L0CQFoV
fb+SyRt0UcLB+skiKaWf5gjQ2rsNCjYVB9lLef+ro0D7wvcBgZBZ7oBLMzZkIg9y
E+AbPVlsl9quvv6WOVvwZmPFhKj5NN3mOXciWNvw69Fr3un1LLl0dgx8aqbqRm7k
1X2yszPKT0Rg6QB8NtUkkjgfwHhDOkDyY+LTRAuNIIuIai6kZO8/ffd1wMPVL0Df
DAkAdSzIXfmX5iGij9vcrpPRtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWYCV3o
DxHBAUlbnP/ZHUDWo+4hMB8GA1UdIwQYMBaAFDDXGfnG034qyfTW1LH32XjsKjKJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM0RC9GQzIwOTEzODU4
REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZpcko5TmJVc2ZmWmVPd3FN
b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1vay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDM0RC9GQzIwOTEzODU4REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZp
cko5TmJVc2ZmWmVPd3FNb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAom7iX+oRUVC+SfGKrmTIXIl30YWiErM381GzC7z+0KorRS0pJInjZ23Eu0HX
ZGukAtFAlrUAd0nZnoaYwlSDTyN/7Y857j5H9DG2uaaH52gnhIfENR7Ko6OCiOC2
hzYhzUROYXMw0aoX61oU6SOxCUtUlCTlMl8PhyyGqpe7jCYMcdg970F3OcD7sKNF
TS7S8TjWjlbNZQfxz0+CGSz/KmdS+ZhwcesSr6em5eR7P1LXuvHH1ZIFEUCbD8Om
flJJ7sm/8BZM7b6Ie1OLDZJujkXNu293KaGqQgPKX4JUF/LXlytzEVPY6tMsxmNf
4mSVa6+4T6Vpee61dgPWulgSvw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:01 2026 by rpki-client