
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier: fFY2QPLVc2Y1OZXQ7Z9KnzZnMf4KWCBSYINulEejwm8=
Subject key identifier: 7D:AC:4A:D9:D4:89:6F:1F:36:D5:5C:4C:E1:EB:44:2F:BB:57:D7:4B
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 1137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number: 10E6
Signing time: Mon 28 Sep 2026 17:26:30 +0000
Manifest this update: Mon 28 Sep 2026 17:26:29 +0000
Manifest next update: Mon 05 Oct 2026 17:26:29 +0000
Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: UQdr2Hgpq61EOlQ7r+pRSgbdt+feawrLPlI/MSEXpRc=)
2: C1313974CD3611F0AF85B537C4F9AE02.roa (hash: tAogpPNnp8t118nb+CaaJXwXD5RiVxazMRc6z7dCh0Q=)
3: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: il/kmW0rv4WkXUzYTcnISQd0Jgpc6E05Nk8GNzFNspg=)
4: 390C84E8CD3811F09B08A83DC4F9AE02.roa (hash: ONdY2CZEUdO0aLtdVqoMR3OFB/28D3pRcCa7aGvaDQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4407 (0x1137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: Sep 28 17:26:29 2026 GMT
Not After : Oct 5 17:26:29 2026 GMT
Subject: CN=6abaa346-4c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:ab:33:fd:59:bf:97:5f:f3:d2:e3:42:ae:
9d:56:7c:6e:ce:a8:ae:6a:ad:32:0c:d1:15:e4:09:
5d:43:ef:e0:24:3b:57:99:30:21:de:10:55:8b:31:
73:fa:5a:c5:d6:ff:50:86:a1:5d:47:d3:d9:8a:fe:
53:47:73:44:fd:12:ac:da:66:94:bc:76:79:08:f1:
31:13:57:88:e8:f6:e1:f7:e6:9c:ad:a4:ac:98:90:
80:ab:5a:98:da:f9:1f:48:ff:fb:9a:8d:1c:86:66:
01:e4:39:fe:a7:69:44:fb:4b:0a:10:4d:ee:77:14:
fc:ad:bc:07:bf:15:79:22:84:72:d4:05:3a:95:88:
1f:29:b6:f0:63:06:4a:8b:58:95:fd:32:af:f3:ee:
94:42:b8:9e:78:9f:d9:47:54:a0:92:75:25:5c:d9:
da:6d:29:50:10:7f:3f:b7:32:b4:61:30:b3:30:80:
63:61:c4:b4:80:41:58:ec:dc:76:08:f9:d1:82:3f:
35:b5:cf:cf:50:35:80:03:e1:c2:d4:03:73:e1:9a:
5a:29:80:09:c9:50:9c:da:98:c0:6f:d6:62:1f:2f:
c2:f0:bb:92:40:1d:82:40:8a:90:15:ae:ce:38:f5:
cb:28:59:de:64:f0:e6:f9:04:50:06:4e:7f:82:14:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:4A:D9:D4:89:6F:1F:36:D5:5C:4C:E1:EB:44:2F:BB:57:D7:4B
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d4:f4:5a:a8:f6:97:f9:6d:bc:c4:e8:b0:92:a6:bb:c2:8a:
bb:29:d6:ad:a4:c2:e3:95:f1:1b:59:94:38:5b:d5:60:99:09:
d5:19:77:f9:fc:5e:b8:28:6f:3f:4f:bb:f6:08:67:9d:12:be:
d7:10:15:6e:c2:90:b3:c3:f4:d2:54:b8:b5:33:02:2b:b2:04:
d2:0d:ee:42:af:dd:62:39:67:bd:01:1b:bc:25:e3:dc:50:7f:
7c:2c:dc:22:50:c4:f8:8a:63:5f:10:bb:59:74:a5:c2:b7:7d:
4a:df:70:af:46:e3:81:2a:9e:c2:e4:c9:29:a2:19:b5:58:3a:
ea:16:ff:45:d2:fd:18:6c:77:03:04:70:1e:2b:63:57:bd:4f:
0c:f9:32:3b:06:05:5f:3e:d8:82:52:01:64:9b:06:d5:76:e5:
3e:35:49:c4:57:4f:13:fc:c8:0d:eb:29:46:b2:21:85:c8:b9:
8f:a0:23:b7:65:bb:66:b9:ed:ea:24:a9:1b:21:ff:3c:6a:65:
10:a6:1e:fd:f0:33:c8:dc:e7:83:5b:9f:03:57:af:5d:02:e0:
c9:36:e2:3f:01:1f:59:4b:72:ee:b2:d5:76:c9:b9:43:18:6c:
df:c3:8e:b6:70:c4:9d:f0:1e:33:2e:f3:1f:96:56:9a:be:9c:
99:7e:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:23:05 2026 by rpki-client