
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier: QGQfzg1t55mQM/VO2LJN+eH7wxAbD/CqZGV2wqPjZ30=
Subject key identifier: 0D:B0:BB:AB:03:BE:98:46:BA:4F:58:B9:4E:1A:90:87:FA:A1:95:71
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial: 047E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number: 0470
Signing time: Fri 17 Apr 2026 00:01:14 +0000
Manifest this update: Fri 17 Apr 2026 00:01:13 +0000
Manifest next update: Fri 24 Apr 2026 00:01:13 +0000
Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: MhxAAiHMGtxuVDvxkDVauEyANPU6MHZwXFyRJlGU4r4=)
2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: wJwYPO+fwG1DzfXIB7tLWx4w4Z7LBKlhdGTpVmUtFJk=)
3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: S9wcoj+b296y5ZY0Qh+LyMtLbA5mAbavBiIMN9qcung=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Validity
Not Before: Apr 17 00:01:13 2026 GMT
Not After : Apr 24 00:01:13 2026 GMT
Subject: CN=69e17849-7fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:12:13:63:44:e5:51:d1:7a:b2:7e:94:90:
24:2d:0d:e7:5e:5c:cc:b0:a5:67:2e:35:55:a6:35:
2c:09:2b:79:de:84:39:0d:69:7e:71:d3:78:9f:9b:
2b:96:73:f3:db:47:4d:6d:d1:ac:5c:cb:ae:9e:dc:
f0:9f:2a:ed:63:3d:06:09:f4:ce:db:cc:b4:de:22:
66:0c:34:08:4a:e1:51:cd:87:d1:1d:75:28:4a:47:
43:9c:e5:e1:a2:84:b0:8d:10:f6:32:dc:09:83:fd:
c8:e5:30:f8:cb:84:9e:84:33:34:64:b6:5e:8a:ad:
b6:2f:88:6d:3f:ad:b5:25:82:29:00:db:08:34:6b:
f4:aa:9f:d1:58:ac:da:4f:22:d9:ef:cb:a4:0a:92:
5d:22:37:17:8f:71:0f:c2:2e:17:32:11:c5:d1:9a:
3b:2e:71:87:d8:a9:d5:da:83:09:0b:c5:fe:6b:2b:
e2:ae:67:91:27:8b:06:81:00:50:65:11:83:92:2a:
af:8d:3b:54:c5:bc:9b:1c:d2:3a:b1:5e:6d:fd:0c:
48:ab:aa:dd:cd:6e:77:1d:51:cc:b7:4a:39:ac:96:
87:84:43:f4:43:2e:fb:c2:d8:33:0a:01:80:04:c7:
0d:e9:39:52:76:89:05:c4:d2:dc:25:46:dc:bb:2d:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B0:BB:AB:03:BE:98:46:BA:4F:58:B9:4E:1A:90:87:FA:A1:95:71
X509v3 Authority Key Identifier:
keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0e:06:39:92:85:83:87:95:fa:9c:fb:87:56:f4:0d:a6:f7:
aa:df:00:73:09:c8:1e:ad:d3:0b:53:d6:14:3a:2d:5c:be:26:
1a:fe:ce:47:52:9e:3f:ad:8c:81:79:08:b1:61:e1:10:4d:ea:
6f:ff:3d:18:ac:9d:0c:77:58:88:c7:d9:19:39:f5:e2:38:3d:
f5:81:af:fa:35:cb:e6:aa:60:19:3f:1e:73:e8:2d:c3:48:9f:
da:ee:3f:a8:7c:95:76:54:8e:7b:8f:4b:ba:23:95:57:43:62:
20:61:1c:00:6f:9a:0c:18:03:f1:48:08:c4:e2:f3:b5:55:2b:
4f:a1:51:ef:87:27:e2:3f:7b:0f:48:e9:ee:de:a5:05:b9:5e:
fe:90:e6:93:ff:36:e5:2d:82:4b:82:35:08:cf:3a:1c:eb:6a:
ee:ad:02:b1:3b:26:a0:fd:5c:73:9e:11:b6:15:a8:00:71:9c:
a4:b0:fd:ac:14:27:7a:cc:50:7d:c5:ff:e9:73:7e:f4:93:16:
5d:d2:be:90:6d:85:f9:61:27:2b:c0:b0:61:02:04:22:d5:fa:
34:e3:ee:a1:b0:b2:fb:a4:db:8b:09:4a:65:62:28:fa:d5:95:
e3:44:c2:02:14:48:ee:87:bb:fd:28:57:99:89:4d:f1:d3:96:
a6:7c:25:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0MjkxMTAvBgNVBAUTKDk4OTMxOUY1NkE3QUUyNDIwOEQxMzYyNERENjlEOEU0
MDkxQjdDMjQwHhcNMjYwNDE3MDAwMTEzWhcNMjYwNDI0MDAwMTEzWjAYMRYwFAYD
VQQDEw02OWUxNzg0OS03ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0v8SE2NE5VHRerJ+lJAkLQ3nXlzMsKVnLjVVpjUsCSt53oQ5DWl+cdN4n5sr
lnPz20dNbdGsXMuuntzwnyrtYz0GCfTO28y03iJmDDQISuFRzYfRHXUoSkdDnOXh
ooSwjRD2MtwJg/3I5TD4y4SehDM0ZLZeiq22L4htP621JYIpANsINGv0qp/RWKza
TyLZ78ukCpJdIjcXj3EPwi4XMhHF0Zo7LnGH2KnV2oMJC8X+ayvirmeRJ4sGgQBQ
ZRGDkiqvjTtUxbybHNI6sV5t/QxIq6rdzW53HVHMt0o5rJaHhEP0Qy77wtgzCgGA
BMcN6TlSdokFxNLcJUbcuy0DOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2wu6sD
vphGuk9YuU4akIf6oZVxMB8GA1UdIwQYMBaAFJiTGfVqeuJCCNE2JN1p2OQJG3wk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQyOS9FODBGRkI0ODhB
MzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRrSUkwVFlrM1duWTVBa2Jm
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21KTVo5V3A2NGtJSTBUWWszV25ZNUFrYmZDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjQyOS9FODBGRkI0ODhBMzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRr
SUkwVFlrM1duWTVBa2JmQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArQ4GOZKFg4eV+pz7h1b0Dab3qt8AcwnIHq3TC1PWFDotXL4mGv7OR1KeP62M
gXkIsWHhEE3qb/89GKydDHdYiMfZGTn14jg99YGv+jXL5qpgGT8ec+gtw0if2u4/
qHyVdlSOe49LuiOVV0NiIGEcAG+aDBgD8UgIxOLztVUrT6FR74cn4j97D0jp7t6l
Bble/pDmk/825S2CS4I1CM86HOtq7q0CsTsmoP1cc54RthWoAHGcpLD9rBQnesxQ
fcX/6XN+9JMWXdK+kG2F+WEnK8CwYQIEItX6NOPuobCy+6TbiwlKZWIo+tWV40TC
AhRI7oe7/ShXmYlN8dOWpnwlbg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:16 2026 by rpki-client