
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier: swGLyPJR83R5zvH+coJ6aUV/ZbSlUwyFOgBbzELnPwI=
Subject key identifier: A2:6C:0E:53:96:45:FC:45:69:0A:CB:24:AA:81:0F:42:2D:A0:0E:73
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number: E7
Signing time: Mon 21 Sep 2026 06:28:10 +0000
Manifest this update: Mon 21 Sep 2026 06:28:10 +0000
Manifest next update: Mon 28 Sep 2026 06:28:10 +0000
Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: lvjjKntRboX7A/tqmYURGvfJxmSQYUnOWEf7bmjlxOo=)
2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Validity
Not Before: Sep 21 06:28:10 2026 GMT
Not After : Sep 28 06:28:10 2026 GMT
Subject: CN=6ab0ce7a-7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:9a:fe:4c:6a:cd:79:3d:26:a2:66:f5:c6:
f7:5d:81:8f:31:b5:5c:e8:16:cf:60:42:bf:b4:71:
1f:89:4f:de:ba:70:0b:c4:fa:f9:98:2b:12:e8:6c:
da:36:26:ae:d0:69:b1:db:78:43:28:dd:04:66:9a:
37:ae:cd:57:9e:30:0b:04:21:7c:80:09:5a:19:a7:
b5:a5:dd:b3:ab:46:27:60:b1:9a:3d:12:53:8b:ad:
b3:44:6d:f8:16:0a:77:e4:5a:a8:a2:c7:e2:b9:a2:
21:ea:db:74:34:c8:d9:a5:55:34:c0:9d:f9:24:a2:
99:29:83:d5:0a:a5:52:c4:cf:54:e6:17:3f:70:da:
47:34:e8:06:3c:42:a7:1b:9c:ae:ad:28:b1:c8:0e:
ab:32:6a:d0:a9:6f:aa:3b:67:52:58:37:02:88:bc:
36:74:14:d8:4e:54:c4:a6:05:29:86:98:98:89:7c:
da:0b:f5:b5:b8:2d:92:f4:1e:4d:aa:23:c1:38:3b:
d6:ac:18:1c:42:bb:d1:7f:16:e4:04:ed:14:dd:cd:
59:07:02:d5:49:c1:a0:51:dc:c9:d2:dd:ac:cd:78:
08:b3:75:95:34:c6:d8:12:93:af:95:0b:98:ed:91:
e8:ce:fc:82:68:88:bc:9b:de:9c:17:d7:d7:f8:f8:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:0E:53:96:45:FC:45:69:0A:CB:24:AA:81:0F:42:2D:A0:0E:73
X509v3 Authority Key Identifier:
keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b7:6e:2b:2a:90:03:9e:20:92:a2:a9:74:26:77:39:62:22:
30:d7:c3:3c:6f:2b:f5:32:a7:ed:e2:81:d3:6b:18:c3:67:99:
bc:76:77:13:d6:f2:d6:3a:73:3b:13:19:e1:6f:1c:fe:05:28:
d3:7e:36:cf:54:a1:57:e4:6c:5d:3e:d2:0c:e3:1a:30:f4:f5:
87:8d:32:d9:34:d5:62:03:49:69:d4:26:2a:73:a8:fd:be:c0:
92:19:89:f3:26:c4:38:5b:e6:73:25:50:45:e3:55:e2:8c:1a:
5c:38:92:9f:87:a0:00:f1:da:25:81:72:e3:e7:26:99:cd:d2:
42:cd:4c:d0:3e:f7:1c:c8:80:a9:6c:80:c0:05:5c:5b:3c:55:
80:7d:76:f3:3f:c6:ec:05:c1:70:22:41:e2:b3:67:97:b7:2e:
87:ed:c9:76:3d:2c:37:7a:c3:b2:e2:b1:5e:f6:04:ba:93:57:
32:3d:54:66:63:eb:8b:5a:66:e9:3b:8f:80:a4:4a:7e:d4:68:
b5:15:e5:32:e3:27:5b:5c:c7:75:bd:8c:75:d4:83:36:49:42:
b8:4a:93:6d:f1:9b:8f:8a:97:70:7f:11:74:34:c8:d8:18:18:
dc:4c:e5:51:8c:86:9f:75:55:67:00:98:57:fc:7f:15:d7:76:
bf:f4:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:24:03 2026 by rpki-client