
$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier: tMhwXmPVoPXNour0Qgti68YPJb4Slh4/kFmf+74cDbQ=
Subject key identifier: 2B:7E:AC:1A:A7:9A:78:5C:D6:3E:C7:93:4B:3D:0A:5B:8D:A1:C7:BD
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial: 2643
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number: 2628
Signing time: Sat 04 Apr 2026 15:38:58 +0000
Manifest this update: Sat 04 Apr 2026 15:38:58 +0000
Manifest next update: Sat 11 Apr 2026 15:38:58 +0000
Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: jDlWK4E6oak0zueP18D0/g3BqBny/D7qZveNQ0/zscI=)
2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: tyh4MT4qSJmExqCrFnw0c2r/E9gHBqGfx9yaFDJlbgg=)
3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 1o77dodqmGPYDz/5Mp6mcgiLtsSwLHvDTMCzJi40a1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9795 (0x2643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Validity
Not Before: Apr 4 15:38:58 2026 GMT
Not After : Apr 11 15:38:58 2026 GMT
Subject: CN=69d13092-2386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:3f:f7:9e:5d:9f:d0:19:69:8d:e5:e4:47:
67:e5:10:49:2b:87:10:e1:1e:2f:aa:a1:af:79:74:
ae:95:e7:d7:be:dc:a5:68:fd:5f:fe:bc:d0:89:33:
e9:35:ad:97:43:93:e7:b2:d4:65:e7:63:16:45:49:
7c:d6:b0:9d:2e:93:04:a4:86:27:bf:eb:6b:a4:d2:
1d:72:21:0b:6a:83:fe:4e:3d:01:0c:0b:de:68:b9:
20:30:53:b2:0e:11:e9:8c:18:6d:73:14:aa:52:a3:
74:fe:60:27:1d:99:f5:ef:bf:61:72:bc:93:50:10:
73:3a:bf:7d:6a:6d:59:09:6a:54:37:74:c4:03:5a:
3f:7f:3b:41:58:13:26:cf:15:f0:c1:7e:12:0f:fb:
20:82:51:ad:fc:83:0c:be:80:12:6d:ec:90:f1:95:
8c:3d:41:1d:80:59:17:7c:80:e5:bd:9c:d5:c5:ef:
56:89:c2:68:ba:74:7c:23:7e:93:a3:d2:d8:58:2e:
18:ea:56:c3:f9:c3:1f:29:30:37:35:3b:b6:42:b1:
34:a2:be:c4:a8:61:6c:62:2a:01:38:31:11:b8:33:
7d:36:d1:f8:9d:ae:79:e8:a4:2c:d8:4b:7a:b9:8e:
ab:dd:b2:6f:55:df:af:42:06:95:52:99:64:b8:0c:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7E:AC:1A:A7:9A:78:5C:D6:3E:C7:93:4B:3D:0A:5B:8D:A1:C7:BD
X509v3 Authority Key Identifier:
keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:a8:e9:3b:7a:4c:5b:dd:b7:e1:df:45:4b:ee:f8:e8:47:f0:
ba:ef:a9:bb:ec:02:94:7f:12:d0:0d:24:da:62:bf:97:00:35:
fb:f1:1f:0d:fb:c1:63:3b:ae:2a:15:5a:1d:71:a8:04:ef:25:
a8:0d:4b:78:6e:4b:c9:59:47:5f:ea:d5:e0:2d:36:3b:ac:03:
98:9f:69:25:52:71:6e:6f:26:0d:07:bb:5c:ac:0e:2e:16:da:
d6:63:83:97:b6:f4:77:b6:4b:1b:62:6c:c9:fe:bf:a0:d9:d0:
fb:47:65:04:36:f9:ef:9f:d9:3a:15:8c:bc:e5:b1:a5:b0:20:
3c:8d:59:d3:45:f3:3e:a3:7c:87:9b:cc:35:47:fe:cb:f2:79:
50:0a:93:19:86:27:64:88:88:94:29:08:fc:04:25:50:34:cf:
da:81:66:10:dc:ed:7d:c8:df:b9:27:3f:7b:e6:39:72:a6:93:
b8:fd:f7:c9:34:8d:a7:ee:65:3b:78:73:28:2e:7d:57:c9:f9:
5e:8e:66:d9:10:ef:29:d9:c0:98:a4:7e:a3:73:61:62:47:f8:
8e:cc:2f:b0:32:42:f9:78:4e:f8:00:e2:2f:c6:cb:ee:77:ca:
76:f2:44:81:e3:5a:40:13:e3:71:f2:97:f9:ff:97:95:9c:ec:
ba:25:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:31 2026 by rpki-client