
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
File: Mqch0wW1KTmxanDu43n7nIIQmhI.mft (raw, json)
Hash identifier: WVEH7+fEOkgPk8qy/mMxHPF/ikKcJH66FoDBWUzIWPU=
Subject key identifier: C9:8C:FE:7A:56:BD:7A:CD:C0:83:2A:41:47:E2:A4:D7:46:FC:48:DC
Authority key identifier: 32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12
Certificate issuer: /CN=A912D71D/serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
Manifest number: FA
Signing time: Mon 21 Sep 2026 06:14:00 +0000
Manifest this update: Mon 21 Sep 2026 06:14:00 +0000
Manifest next update: Mon 28 Sep 2026 06:14:00 +0000
Files and hashes: 1: Mqch0wW1KTmxanDu43n7nIIQmhI.crl (hash: zwwubr1UcjULrBMoo3Wqa3yPgUKH8S32A9WfnGsb6NM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl
rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D71D, serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12
Validity
Not Before: Sep 21 06:14:00 2026 GMT
Not After : Sep 28 06:14:00 2026 GMT
Subject: CN=6ab0cb28-2a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:68:19:37:a5:08:d6:9d:f3:b4:b4:8e:7a:92:
7b:f0:84:dd:6b:d2:40:f4:5f:f1:1a:37:48:4e:8d:
31:6f:f9:96:99:dc:0a:65:4c:e2:2c:bc:a9:77:78:
3b:8e:f6:b4:b6:9d:14:30:90:e4:eb:79:dc:02:13:
a9:05:fc:28:fc:8c:10:f2:b6:ee:f3:de:6e:17:55:
b2:68:52:78:9f:3e:fb:80:df:4b:41:c1:38:e4:94:
d0:b8:07:4d:79:d8:00:9b:ff:08:6e:7b:c2:93:a1:
f6:c1:74:dc:5d:e8:55:79:ef:a1:9d:23:fe:95:c6:
c9:fd:d1:fa:1b:41:4c:c3:47:61:85:24:9d:a0:79:
de:52:3f:76:f4:62:93:0a:81:31:69:03:05:af:9b:
5d:c9:63:d2:03:8b:29:8b:70:df:f5:35:5d:19:87:
4c:ff:1b:88:24:f3:39:ef:56:cc:c3:fd:26:0d:65:
3e:cb:32:53:f8:71:34:8e:d3:d3:3d:ca:09:bc:e7:
6b:5b:e1:09:66:93:21:85:95:69:f6:43:14:46:f1:
c7:b8:94:57:14:3e:8d:ad:95:2e:d3:62:6f:85:3a:
62:45:64:d6:a5:2a:0c:45:3e:b6:de:50:65:36:9b:
62:20:6f:66:65:25:5c:5f:d6:b3:5c:c1:f1:15:98:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8C:FE:7A:56:BD:7A:CD:C0:83:2A:41:47:E2:A4:D7:46:FC:48:DC
X509v3 Authority Key Identifier:
keyid:32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:a8:a4:50:ba:bb:8e:72:6b:f5:ba:8e:57:f5:95:83:56:
d5:0a:9d:74:a8:6d:1d:3b:55:41:d4:98:f0:4d:80:73:e9:bb:
a7:0d:0e:71:81:8e:60:46:78:ad:da:d0:86:eb:5c:db:67:e4:
13:f1:99:b5:6b:7a:06:21:77:0f:3c:e7:0a:f1:ff:69:cf:f5:
36:b3:64:da:b1:d5:e4:11:e6:7d:2b:e1:6b:83:11:c7:ef:59:
2a:1b:00:4d:f6:d9:07:10:a4:76:43:55:6e:f3:04:01:13:1f:
a4:97:3e:82:c0:82:75:5c:fd:ff:e0:05:69:9d:58:67:02:72:
0e:41:b7:0d:94:bb:8a:85:18:20:1b:65:27:9c:fb:40:30:59:
74:96:f3:f0:39:0c:28:4f:f4:8b:ae:de:d9:fe:df:ad:6f:7d:
27:a1:da:1d:94:9a:84:26:5f:1a:40:8c:e7:29:79:f9:7f:00:
77:99:30:cf:3e:5a:40:be:f9:ba:ec:b7:d2:5d:fa:90:5f:87:
17:41:d0:d2:16:fb:ef:a9:46:6e:e1:f1:bc:d7:e1:b1:e6:24:
03:86:fe:28:93:2d:90:03:bd:a6:e1:ea:bb:b1:29:1f:e3:4e:
83:31:37:8e:fb:77:66:a9:bf:06:3a:ed:0d:1d:45:c3:13:83:
ca:48:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:03 2026 by rpki-client