
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json)
Hash identifier: 1JksTxIHI3BKRg6CAuxLdr1XWvM17x4PU2hXtPmkGmk=
Subject key identifier: F5:5D:F7:F4:06:F7:99:FF:6B:CC:E1:AE:64:37:20:6A:23:4F:8C:27
Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
Manifest number: E8
Signing time: Sun 01 Mar 2026 07:33:13 +0000
Manifest this update: Sun 01 Mar 2026 07:33:12 +0000
Manifest next update: Sun 08 Mar 2026 07:33:12 +0000
Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: qvWR7zLD89/vAJ8uKulZ3HZSf4BoUXlNNGO4lFVSmok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Validity
Not Before: Mar 1 07:33:12 2026 GMT
Not After : Mar 8 07:33:12 2026 GMT
Subject: CN=69a3ebb9-a420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:ce:75:bd:bd:e8:b8:81:cd:df:a4:62:cc:
fd:90:b4:e9:e9:40:c2:ea:0a:ad:eb:59:73:64:26:
2a:0f:c3:b7:ee:39:bd:58:c7:bf:8a:4a:e9:83:80:
a8:ab:db:c9:e8:9c:fa:13:68:96:34:66:23:6b:53:
0f:ab:ed:a0:05:da:92:7a:fa:a6:22:4a:dc:76:75:
db:90:39:16:98:8f:53:f1:21:49:47:a5:d9:74:66:
73:05:20:dd:e5:e4:cd:34:ea:a4:2a:08:77:89:0c:
25:36:f6:04:14:9e:61:0c:ec:d5:d4:0d:29:f0:ef:
c7:98:b3:87:35:b3:32:c5:49:f9:67:db:73:ff:a8:
30:8c:19:0c:a6:15:65:66:d3:50:17:eb:c4:70:f5:
64:05:9e:4e:4c:13:7c:7e:93:99:c3:53:ff:be:d0:
f5:b2:a0:08:5e:43:d5:99:8e:b0:78:de:66:bb:1a:
bb:14:c8:04:93:0b:94:e0:55:5e:bf:79:e2:a2:88:
23:84:35:35:24:44:b6:ee:97:5c:f5:69:f8:62:0e:
95:ce:6a:ac:6c:50:b0:98:00:85:e7:05:fb:0b:20:
c3:b9:2c:16:9d:ad:44:76:06:06:5e:7c:a5:08:b6:
85:9d:1b:5f:09:68:70:9a:e5:11:bc:aa:9d:49:2e:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:F7:F4:06:F7:99:FF:6B:CC:E1:AE:64:37:20:6A:23:4F:8C:27
X509v3 Authority Key Identifier:
keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:00:93:a3:2e:f6:c0:1a:c8:0a:07:bc:f5:29:e8:59:0c:a1:
6e:fa:c8:da:be:0a:98:5b:02:bc:41:86:88:7e:a2:bd:57:ac:
22:34:dc:46:c4:f5:b5:18:ee:65:26:4e:e0:41:14:0e:aa:18:
e5:dd:56:cd:9b:27:5b:23:f8:61:a4:50:b5:2c:63:c7:02:26:
d4:ac:b8:c0:a5:94:88:cd:d2:33:a3:a4:50:8a:8d:29:77:ba:
9e:16:78:0a:fe:21:68:d9:9b:7d:0f:08:c4:35:39:e4:29:4e:
e9:8a:0d:80:71:1a:05:9d:fb:29:fc:e5:63:1b:56:77:9b:30:
e9:57:30:e7:57:10:f9:57:18:20:fd:d0:60:c0:69:0c:b8:f4:
07:0e:ee:3f:1e:22:28:85:6e:23:2e:d2:8c:d6:86:dc:90:21:
6f:ec:c1:b6:42:8a:c4:ce:1a:c5:ec:22:da:f8:4d:48:a9:16:
c1:63:f2:6e:c1:ee:f2:0b:93:ed:b7:73:d0:bc:85:20:73:f9:
f8:06:29:e9:71:6c:0b:1a:84:01:3f:39:a8:02:41:83:cd:f3:
d5:88:6b:82:9c:bc:69:60:84:f7:e6:4f:15:19:6b:2f:6d:32:
d9:45:37:16:4a:3b:f8:83:ca:83:ff:5c:a7:7f:bc:36:f1:bf:
74:42:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:21 2026 by rpki-client