
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier: HP4eMLGcGghJDD1Hvwg5uYU28BIuYgAxdUNG19O3XZw=
Subject key identifier: 40:3B:E0:94:7B:6C:76:2B:D1:F6:C9:4F:6F:71:F6:FE:2D:6C:C9:B7
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 1283
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number: 0E05
Signing time: Tue 06 Oct 2026 20:11:30 +0000
Manifest this update: Tue 06 Oct 2026 20:11:29 +0000
Manifest next update: Tue 13 Oct 2026 20:11:29 +0000
Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: nqMbf0q1FeYQyheAKPzF3Wik33mvLmxZDzbibPYKVgk=)
2: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: leKyUuCIlZ14TjNCgY53HEbyQblwhhLPh9MB2YSGjFw=)
3: B0F927B62E5111F1BD10F65598833773.roa (hash: lEC4h0C/BlWeoQezEUq/wosvOp1Bq3k86rCVxSiaJ7c=)
4: A173B894112711F0845DF16FC4F9AE02.roa (hash: PZTxpjB636ZwcR/b+ew6RaaC+tAKodGrZdfamhS9xkI=)
5: 9415082C580911F1AF5AA0C49D833773.roa (hash: ZXqZlUpuR0qiSlcSWwYD4VZZKGXWPn1lkEN6cYxmbW0=)
6: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: bNrxB+4vYm1vYBbu7foU1nk5+0scTY3fNESf2+DiIQA=)
7: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: WOG/JDnTMbLnKggPICFOEZMrJLYgxzH3vajEoHzJKiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4739 (0x1283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Oct 6 20:11:29 2026 GMT
Not After : Oct 13 20:11:29 2026 GMT
Subject: CN=6ac555f2-214a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:7f:3e:16:a6:b5:23:36:2c:5d:b4:0f:38:
82:70:6f:94:5f:a8:f7:8d:e9:2b:cd:7e:66:b6:d7:
07:ab:5d:7c:7a:7a:93:d3:93:86:32:15:29:a6:3c:
ac:d1:d0:b4:76:6a:62:b9:aa:fc:82:af:ce:49:4b:
c8:c8:f2:0f:52:e5:6b:28:b6:6f:64:55:36:b9:47:
ec:df:a9:32:10:f5:0c:6d:a0:69:63:8a:19:39:89:
e5:10:3a:67:19:f3:6b:66:5a:d4:4b:10:ed:e7:f0:
dc:4b:d8:6e:9a:88:e9:d5:e9:c2:04:f6:5b:aa:7f:
15:da:9c:45:05:15:13:2a:9a:68:40:ea:76:90:5b:
56:10:06:5f:72:fe:e9:6a:89:a9:5e:d7:6f:c5:ff:
99:ce:16:ac:6d:7e:7e:1b:5c:3f:31:68:6f:11:e3:
67:3b:46:80:92:e8:43:30:99:28:fd:7c:a8:5c:f6:
eb:80:00:23:4b:c8:c2:93:93:05:f8:7f:dd:1d:01:
77:0c:03:f3:a9:66:f4:45:3e:3f:2f:8b:02:79:18:
c0:f5:56:f1:a4:c9:eb:38:8e:7f:e8:d1:ac:10:42:
58:0a:01:dd:e8:5c:28:55:32:84:5c:bf:c2:b9:e0:
66:8d:b8:c6:37:39:62:f2:85:4f:5c:c7:74:d2:43:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:E0:94:7B:6C:76:2B:D1:F6:C9:4F:6F:71:F6:FE:2D:6C:C9:B7
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:a7:0c:4a:09:36:b4:19:9d:5f:7d:e7:aa:c8:6e:9a:02:
7c:48:21:08:ad:79:07:5f:72:d4:6f:fd:0b:e1:62:0a:50:46:
a5:fc:79:14:01:31:bb:b3:32:2f:55:35:9a:99:df:8a:27:c4:
83:f5:8c:89:a9:4b:39:fe:b3:b1:a6:04:75:15:a5:62:48:1d:
73:f6:c8:03:36:3f:a2:66:a3:46:1b:13:6d:5e:9e:44:de:15:
46:00:6b:cc:2b:c4:cb:62:9b:7e:4d:e1:5e:e5:41:0d:34:60:
2b:33:e1:22:d4:70:5f:32:ec:f8:49:e7:37:86:56:7e:fe:0a:
c8:0b:53:bc:35:1d:39:78:b5:da:ad:32:ff:c4:c6:6c:4b:29:
f6:6b:1f:15:72:9e:1c:36:b8:1c:55:3f:0f:9c:e7:23:8d:d6:
62:fe:97:0e:df:91:32:69:17:35:03:14:e7:a2:75:74:dc:42:
e3:42:8f:b7:03:4a:9d:86:78:fb:b7:80:aa:bc:2e:43:72:16:
7a:68:61:f9:2f:40:4f:a3:1f:08:33:2d:a4:c4:8d:87:5f:08:
7e:30:46:e7:88:3a:ca:39:64:a3:40:db:f2:7d:06:91:34:08:
a0:7e:9f:79:76:85:24:1d:7a:22:c0:92:2c:c7:e8:c9:bc:80:
0c:40:d7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:04:46 2026 by rpki-client