
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json)
Hash identifier: KZUvLVXiYfKY/UzbNZUi884TU7p9Kv2oICdpd806mzc=
Subject key identifier: 17:B1:31:D0:C1:9D:64:51:E4:EE:E1:48:FC:24:C4:0F:DA:59:BA:DA
Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
Manifest number: 0101
Signing time: Fri 17 Apr 2026 05:50:58 +0000
Manifest this update: Fri 17 Apr 2026 05:50:58 +0000
Manifest next update: Fri 24 Apr 2026 05:50:58 +0000
Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: uHedQBgv9H/6bmfyKQHrx70FPsccuCZudGywvTWi7Do=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Validity
Not Before: Apr 17 05:50:58 2026 GMT
Not After : Apr 24 05:50:58 2026 GMT
Subject: CN=69e1ca42-9438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:71:13:67:7a:68:c5:86:b8:f4:89:09:c4:
f2:52:61:3e:3a:e2:70:84:e0:10:1b:49:76:f3:b6:
57:88:20:f7:c4:57:c3:7a:9b:88:95:3c:5f:dc:5e:
8a:b9:4a:4a:4a:7c:9f:32:5f:42:6a:ea:15:e6:36:
e8:22:27:32:59:d5:c0:4c:77:c3:99:9a:4a:a7:3e:
5f:d8:f1:5a:78:8e:88:d4:a6:7e:1f:12:e8:29:e3:
fa:32:3d:46:42:7e:43:07:a2:92:5a:7e:82:61:68:
61:d1:1b:29:26:1f:73:f0:fa:a1:c5:3c:86:88:70:
a2:b5:4a:be:f1:66:49:6b:cb:07:f2:0b:49:f8:6c:
05:03:f3:83:4a:1f:e1:47:dd:6b:ac:fc:3c:de:8e:
54:f9:c7:44:41:5b:48:be:c6:21:f0:49:fd:7b:35:
9b:24:b9:e5:ac:20:7e:5c:84:6c:67:a5:2e:a6:03:
6c:85:c7:26:5b:16:46:fc:4e:47:8e:bb:f8:e4:22:
81:19:ce:e2:bf:df:cb:3c:f8:a4:d7:e2:6a:18:fc:
a6:33:d2:44:cb:d8:b0:3a:d5:39:2c:71:04:37:f1:
e7:ea:a6:b3:1c:41:3d:a0:90:53:5d:09:cd:70:4b:
3a:b5:8a:1a:a0:83:16:b3:5e:fd:92:3b:38:ab:e1:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:31:D0:C1:9D:64:51:E4:EE:E1:48:FC:24:C4:0F:DA:59:BA:DA
X509v3 Authority Key Identifier:
keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:11:65:6f:b8:48:c5:a7:91:31:57:56:08:5d:ce:d5:98:96:
2d:e1:88:31:55:19:fe:2e:79:7a:76:8e:38:47:3f:39:5e:be:
03:73:21:c6:8a:05:b3:39:a4:aa:cc:66:f4:f8:a2:35:92:de:
98:54:70:df:c0:1a:50:ef:d1:65:19:c2:d4:a9:e0:7e:d6:ce:
b3:cf:0a:5d:43:78:77:af:f7:ab:99:56:a4:23:77:e1:10:05:
a6:fd:5f:68:1e:c1:a8:d6:6c:70:98:c4:40:b0:0b:f2:76:67:
bc:9a:29:81:97:6b:34:09:f2:25:70:72:75:2e:76:d5:aa:32:
d3:eb:52:11:d5:4c:2b:48:77:f3:4b:a9:ef:cc:3b:c2:6d:2d:
5d:33:82:0f:2d:d7:d6:d9:58:1d:4f:df:76:e7:8d:2a:5b:e5:
7f:9c:b7:ee:8a:5a:1e:f0:4b:29:46:79:30:2c:2f:b6:98:51:
7d:45:48:e6:6c:40:49:91:02:20:19:74:f2:b5:c5:f5:13:d2:
09:a7:bf:15:f2:d2:8f:8c:c9:b8:ad:4a:19:d0:1c:e1:4a:ef:
ad:7e:bc:3f:6c:a9:36:7e:8c:d3:4a:b8:3c:5f:b5:aa:5f:13:
70:8e:10:f9:3a:ae:b2:ac:26:9b:d1:ad:5b:31:3e:f7:5e:16:
ab:10:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:32 2026 by rpki-client