
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier: EM9HUMOAS+J5C0fTVDCAYnTjB4Q9g/qGX+OwHgejxXk=
Subject key identifier: 44:84:F0:61:3E:8D:66:20:38:80:CD:5B:69:36:45:56:38:B3:3E:42
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 1237
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number: 0DBF
Signing time: Fri 12 Jun 2026 20:13:38 +0000
Manifest this update: Fri 12 Jun 2026 20:13:37 +0000
Manifest next update: Fri 19 Jun 2026 20:13:37 +0000
Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: zZUnnsVFaxFoGblw2439AGmnUP6kQ0gI5cCnSF8kja4=)
2: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: WOG/JDnTMbLnKggPICFOEZMrJLYgxzH3vajEoHzJKiM=)
3: A173B894112711F0845DF16FC4F9AE02.roa (hash: PZTxpjB636ZwcR/b+ew6RaaC+tAKodGrZdfamhS9xkI=)
4: 9415082C580911F1AF5AA0C49D833773.roa (hash: ZXqZlUpuR0qiSlcSWwYD4VZZKGXWPn1lkEN6cYxmbW0=)
5: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: bNrxB+4vYm1vYBbu7foU1nk5+0scTY3fNESf2+DiIQA=)
6: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: leKyUuCIlZ14TjNCgY53HEbyQblwhhLPh9MB2YSGjFw=)
7: B0F927B62E5111F1BD10F65598833773.roa (hash: lEC4h0C/BlWeoQezEUq/wosvOp1Bq3k86rCVxSiaJ7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4663 (0x1237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Jun 12 20:13:37 2026 GMT
Not After : Jun 19 20:13:37 2026 GMT
Subject: CN=6a2c6872-4b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:f8:a9:4d:aa:47:49:3d:a5:14:fc:b0:5a:
0b:72:57:37:35:af:dc:8e:fc:b9:82:40:f2:d9:37:
ba:58:8e:16:ff:84:45:98:be:a0:ec:54:f3:3c:cd:
5f:e9:92:cb:3a:a4:06:9f:d6:1d:c1:b5:9b:cc:47:
00:a3:e5:eb:c2:5b:f1:24:80:c1:04:3b:16:2d:ad:
f7:39:69:a3:e5:b8:4e:0f:c6:79:6e:80:6e:0c:e0:
fd:c8:28:54:54:1d:be:60:aa:49:2d:66:83:aa:a0:
9e:89:db:f6:df:93:3f:0a:6e:90:58:51:f0:5d:89:
bb:c6:52:13:03:77:22:4d:3d:f4:e7:3c:dc:64:45:
1d:cb:50:4f:67:05:7c:60:17:cf:63:86:8e:ff:41:
71:fd:e8:84:92:df:34:80:c1:a0:60:93:4b:c1:97:
b7:3a:99:d0:4d:0c:1e:0d:d4:ce:b0:72:3b:26:c1:
1e:1d:9a:5d:5e:ec:09:5e:ac:06:c9:45:de:f6:58:
ca:6e:7f:a5:52:db:46:22:2e:f3:19:2c:15:9e:96:
67:2f:af:eb:38:a2:1c:fb:22:78:b0:0c:5b:e1:dd:
fd:26:8d:24:b4:0c:5d:a0:a9:bd:af:6c:b5:1a:cc:
68:b5:80:87:bb:4b:66:97:b1:93:ed:5b:05:a5:84:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:F0:61:3E:8D:66:20:38:80:CD:5B:69:36:45:56:38:B3:3E:42
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:5f:39:03:64:55:2d:72:a3:3b:df:2f:57:55:99:10:0a:65:
42:a7:5c:db:28:e5:fe:9d:74:3e:0f:fd:65:e7:73:52:83:b4:
af:21:49:90:7b:6a:5f:52:de:dc:51:62:d6:90:af:d5:96:d3:
70:53:f4:db:0c:53:1d:2f:bd:a6:91:2e:5b:45:3c:e7:ec:27:
37:44:24:59:c3:41:e0:6b:92:a0:1a:5b:7c:e2:25:45:9b:5b:
41:5f:6c:28:b9:6b:fa:51:5f:d1:43:1a:89:3f:1e:ab:b7:3e:
51:16:20:3f:c5:0f:da:b4:b2:55:cd:15:ac:93:5a:38:80:d9:
21:13:aa:5b:7f:8d:31:e7:fa:3f:61:a4:8d:c1:6a:37:53:e0:
0f:28:3a:52:59:db:12:af:19:33:ed:13:4c:c0:3f:6f:d3:63:
3e:76:d5:38:e4:1e:31:7d:c2:f5:0f:06:04:ed:92:09:c3:ae:
31:68:79:da:bd:c8:70:87:8f:0d:5b:da:19:00:a0:0c:1f:f2:
5a:52:1e:1b:2f:fa:38:66:74:96:8c:67:2a:c0:6a:54:17:2c:
08:98:8d:76:c1:4b:b3:d4:45:0d:c3:ba:cc:b2:da:46:d6:95:
3d:fa:59:91:7c:86:4e:71:cd:aa:3b:7c:50:f6:56:65:23:0a:
b7:00:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:40:27 2026 by rpki-client