
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier: +2/QVlTC5HYNLzCDZC2SL8LepWO/S3gWW2VpFWbsb8g=
Subject key identifier: CC:9D:DD:06:B9:EA:0E:A9:7F:CE:EB:DC:D8:31:1E:A2:57:B7:31:80
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer: /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial: 04B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number: 04A3
Signing time: Mon 27 Jul 2026 00:57:46 +0000
Manifest this update: Mon 27 Jul 2026 00:57:46 +0000
Manifest next update: Mon 03 Aug 2026 00:57:46 +0000
Files and hashes: 1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: UcxSwGtIU+mKb1Eit5IpLkoIWsTICMjkHhTA1xlzVWo=)
2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: wJwYPO+fwG1DzfXIB7tLWx4w4Z7LBKlhdGTpVmUtFJk=)
3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: S9wcoj+b296y5ZY0Qh+LyMtLbA5mAbavBiIMN9qcung=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1201 (0x4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Validity
Not Before: Jul 27 00:57:46 2026 GMT
Not After : Aug 3 00:57:46 2026 GMT
Subject: CN=6a66ad0a-74cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0b:3e:43:a6:34:d1:76:44:c2:fc:a6:e9:fd:
e3:aa:ef:09:37:1f:81:5b:56:a4:3a:55:1f:e6:6a:
3d:d8:a7:db:c9:35:72:a6:72:99:39:88:6e:f9:e3:
ee:09:07:33:33:0a:1d:41:93:7f:8e:77:e4:c9:b6:
29:2f:4b:8f:0e:6f:2b:4a:89:b1:a7:0d:c6:f1:d8:
d8:58:91:24:08:a6:03:2f:7c:f1:d5:b1:1a:d4:b3:
81:9a:e5:54:a5:9c:09:6c:3d:2e:73:8d:64:59:c0:
f5:3d:c3:07:b5:1c:9e:0d:4c:2e:5e:dd:17:f6:d3:
41:dc:5f:8c:d2:77:cd:04:91:2a:36:84:7b:7f:e1:
95:9d:6d:72:22:df:b1:2d:6d:f2:d6:68:96:7c:34:
d7:5d:77:7d:3e:16:73:e0:d2:d0:b3:9a:92:4b:fc:
43:81:a9:08:20:57:a8:b1:a4:44:76:5f:6c:7c:4b:
aa:d0:b6:22:8b:d2:80:20:40:77:2c:36:00:ef:b8:
ae:59:26:19:50:b6:14:11:d0:a0:c6:b6:74:89:7a:
9d:99:a0:7e:3c:c5:b2:2c:e1:9d:58:83:6b:ce:0a:
fa:a2:36:28:ae:60:b0:83:f4:b3:a9:b9:e6:ea:50:
3a:28:b9:0a:f9:02:b1:7c:98:68:6b:f4:a6:6c:6e:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:DD:06:B9:EA:0E:A9:7F:CE:EB:DC:D8:31:1E:A2:57:B7:31:80
X509v3 Authority Key Identifier:
keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3c:7e:64:aa:86:60:f9:a0:85:6e:aa:1e:ad:45:b2:ec:8f:
c1:14:58:b5:ee:5f:4e:c9:24:9c:c5:8a:d1:97:cf:08:c2:bf:
52:75:d4:df:0b:e0:5c:b0:14:d6:01:b1:0d:a0:7e:4e:c8:bd:
69:9c:e4:6a:94:72:7d:00:da:e8:0a:a8:98:e3:9a:dd:12:9a:
97:d9:87:4a:53:e3:c6:f2:ab:7d:91:90:bd:9b:05:76:55:48:
85:c3:ed:b1:d5:af:49:90:30:a0:29:67:be:fd:43:fc:e0:15:
26:47:19:df:33:58:6f:87:e3:3d:c7:e8:5c:16:6a:7b:51:68:
93:9c:c9:21:69:d2:22:91:27:9a:8d:c8:35:19:40:74:99:51:
66:81:a2:7d:16:81:22:6a:bc:ea:c1:b5:c8:99:1f:23:e7:61:
fe:5a:d6:83:e8:24:86:19:7b:97:99:78:f2:f2:a4:ee:8e:a5:
58:d3:c6:a0:36:47:83:0f:b7:3d:4f:e4:84:49:ef:aa:f8:4f:
b9:4c:9b:e1:77:0c:c3:54:2c:d5:1c:7d:c2:24:99:88:d2:1a:
7e:5f:20:3c:5b:78:6a:cb:3f:80:0e:41:9f:f9:a5:f9:0b:4e:
9f:6a:ce:14:a9:f3:a2:5a:26:7f:dd:c0:65:50:f6:42:9c:91:
12:aa:af:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0MjkxMTAvBgNVBAUTKDk4OTMxOUY1NkE3QUUyNDIwOEQxMzYyNERENjlEOEU0
MDkxQjdDMjQwHhcNMjYwNzI3MDA1NzQ2WhcNMjYwODAzMDA1NzQ2WjAYMRYwFAYD
VQQDEw02YTY2YWQwYS03NGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+gs+Q6Y00XZEwvym6f3jqu8JNx+BW1akOlUf5mo92KfbyTVypnKZOYhu+ePu
CQczMwodQZN/jnfkybYpL0uPDm8rSomxpw3G8djYWJEkCKYDL3zx1bEa1LOBmuVU
pZwJbD0uc41kWcD1PcMHtRyeDUwuXt0X9tNB3F+M0nfNBJEqNoR7f+GVnW1yIt+x
LW3y1miWfDTXXXd9PhZz4NLQs5qSS/xDgakIIFeosaREdl9sfEuq0LYii9KAIEB3
LDYA77iuWSYZULYUEdCgxrZ0iXqdmaB+PMWyLOGdWINrzgr6ojYormCwg/Szqbnm
6lA6KLkK+QKxfJhoa/SmbG4EkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMyd3Qa5
6g6pf87r3NgxHqJXtzGAMB8GA1UdIwQYMBaAFJiTGfVqeuJCCNE2JN1p2OQJG3wk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQyOS9FODBGRkI0ODhB
MzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRrSUkwVFlrM1duWTVBa2Jm
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21KTVo5V3A2NGtJSTBUWWszV25ZNUFrYmZDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjQyOS9FODBGRkI0ODhBMzIxMUVDQjA4RDkwMEFDNEY5QUUwMi9tSk1aOVdwNjRr
SUkwVFlrM1duWTVBa2JmQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApjx+ZKqGYPmghW6qHq1FsuyPwRRYte5fTskknMWK0ZfPCMK/UnXU3wvgXLAU
1gGxDaB+Tsi9aZzkapRyfQDa6AqomOOa3RKal9mHSlPjxvKrfZGQvZsFdlVIhcPt
sdWvSZAwoClnvv1D/OAVJkcZ3zNYb4fjPcfoXBZqe1Fok5zJIWnSIpEnmo3INRlA
dJlRZoGifRaBImq86sG1yJkfI+dh/lrWg+gkhhl7l5l48vKk7o6lWNPGoDZHgw+3
PU/khEnvqvhPuUyb4XcMw1Qs1Rx9wiSZiNIafl8gPFt4ass/gA5Bn/ml+QtOn2rO
FKnzolomf93AZVD2QpyREqqv3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:48 2026 by rpki-client