
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
File: mpXY8Mq1144dbKm5o7JX446MfVs.mft (raw, json)
Hash identifier: dLT7zalvVWzsE1ZTIc4O+wZvz+Ro6hDMCzlaqwdP2y0=
Subject key identifier: 11:7E:C0:DB:F0:50:F0:7C:03:08:05:5A:4A:E1:35:E7:F3:F5:CA:1E
Authority key identifier: 9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
Certificate issuer: /CN=A915CF84/serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
Manifest number: 6A
Signing time: Mon 09 Nov 2026 08:02:27 +0000
Manifest this update: Mon 09 Nov 2026 08:02:26 +0000
Manifest next update: Mon 16 Nov 2026 08:02:26 +0000
Files and hashes: 1: mpXY8Mq1144dbKm5o7JX446MfVs.crl (hash: /6MWoO9cKtONu8VvCBRDzAIKZ4SVHB0+DqmQnncfbU0=)
2: E0D625A23C6A11F183CD979F90833773.roa (hash: qj9IQ2Y4YzDmdOE6yQMu07d0ie+83o7yGutlXtdHDIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl
rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 08:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CF84, serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
Validity
Not Before: Nov 9 08:02:26 2026 GMT
Not After : Nov 16 08:02:26 2026 GMT
Subject: CN=6af17e12-5fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:ea:2e:b2:8e:03:27:a6:f0:97:c5:ae:7b:
b4:d0:06:fe:5f:81:00:84:18:8f:ab:ba:d2:f8:4c:
d2:48:d0:cb:0f:5c:f1:a1:25:6e:d8:74:48:19:8b:
15:58:34:dc:d4:d1:b6:23:0b:e9:b9:5b:dd:96:82:
b2:35:95:2c:a3:92:c0:c2:ba:6e:f9:86:fe:18:96:
86:b2:0e:4d:31:2f:0a:b4:57:fb:b3:53:26:6f:d4:
f0:b8:df:66:63:cf:f6:39:6f:a7:39:a4:d0:a1:1e:
4d:25:af:52:e6:40:9f:ff:c6:ae:7c:3b:b0:74:56:
3e:87:ea:d3:0d:67:0d:51:1d:5e:8d:76:dc:10:a8:
de:5a:67:63:9c:d3:44:bb:c9:d3:d3:ec:95:9d:2f:
aa:8c:7f:14:5d:b3:c3:aa:04:12:0d:3e:6c:68:1c:
ac:0e:ae:50:c8:f8:82:29:88:1e:a0:91:96:a5:98:
bd:1a:a5:65:01:61:b2:ba:af:3c:b4:bc:d4:e5:10:
5e:90:0d:dc:fa:f8:28:e2:d9:00:07:4b:cd:a1:95:
d2:f0:ae:cd:96:19:74:8a:75:20:0f:1c:ca:81:4b:
b6:61:9a:09:fb:da:82:9e:89:60:1f:d7:0d:12:6d:
d1:7e:89:c5:64:92:fa:ce:30:9d:a6:c1:82:e2:a5:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7E:C0:DB:F0:50:F0:7C:03:08:05:5A:4A:E1:35:E7:F3:F5:CA:1E
X509v3 Authority Key Identifier:
keyid:9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:ea:1c:6e:75:e1:e1:fb:ad:9d:83:2d:48:16:8f:d8:fd:46:
3a:95:af:3f:c3:8a:f6:d1:81:63:83:46:36:2c:75:35:25:ae:
cf:17:5b:52:f9:87:7b:d2:30:82:99:0d:a6:8d:14:f0:5a:70:
68:50:a2:4a:fc:9e:f2:4f:df:32:e2:50:96:94:04:5e:87:b0:
b7:3e:dc:2a:9c:fc:1e:b8:02:ad:0f:5c:73:a9:4d:3d:38:a2:
80:fb:b0:e9:50:c3:a9:27:52:f9:a2:14:f6:ae:d8:ce:4b:b7:
90:21:d2:aa:18:e4:c8:8f:20:01:68:4d:fd:68:95:33:dd:ca:
31:ce:25:72:40:4a:b6:62:16:72:9e:8c:bb:b0:a8:0d:e4:bc:
fd:30:77:39:6f:bd:bc:16:35:6b:32:ea:71:c3:6d:68:13:aa:
60:bc:ed:00:f2:00:ce:59:f6:4d:a3:41:e1:e3:62:b9:92:e0:
bf:fd:aa:8c:58:ed:f1:ee:b9:fb:d5:9d:9d:d2:f6:a4:63:48:
59:83:9d:f9:7a:e8:8a:6a:ce:ba:f7:99:cf:9e:24:dc:a1:79:
54:6b:6b:07:b8:0f:2f:8a:e6:a6:32:ef:26:02:50:a8:2d:ac:
3c:f4:27:c7:d8:bf:27:2a:c5:8a:6a:54:b7:82:63:1a:ee:91:
34:0e:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:45:33 2026 by rpki-client