
$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File: Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier: lfkAzusD3TfQ5frdhj1nMny3BKOvwMUJB24xP2Tibig=
Subject key identifier: E5:A2:21:11:17:58:0F:69:36:EA:A0:10:8A:3E:A6:A0:31:A5:D8:B6
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial: 2661
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number: 2646
Signing time: Tue 02 Jun 2026 15:42:38 +0000
Manifest this update: Tue 02 Jun 2026 15:42:38 +0000
Manifest next update: Tue 09 Jun 2026 15:42:38 +0000
Files and hashes: 1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: k0fGlhTb735JxgBFH63FRAWlZGTY96AHVLwSJKbTUH0=)
2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: tyh4MT4qSJmExqCrFnw0c2r/E9gHBqGfx9yaFDJlbgg=)
3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 1o77dodqmGPYDz/5Mp6mcgiLtsSwLHvDTMCzJi40a1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9825 (0x2661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Validity
Not Before: Jun 2 15:42:38 2026 GMT
Not After : Jun 9 15:42:38 2026 GMT
Subject: CN=6a1ef9ee-430e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:ec:39:a2:cd:02:a9:ce:a3:09:85:d7:24:
d2:96:57:ad:49:2f:d1:4c:0d:7c:52:bd:4b:ec:53:
7b:08:12:0d:9f:d4:e8:8d:56:5d:ca:f9:da:58:40:
9b:a2:95:a9:64:56:4c:5c:2c:a0:13:62:d2:dd:34:
d8:fe:cb:1a:dd:7b:25:55:0d:aa:6d:7c:88:f4:59:
93:8a:7c:eb:3b:23:ab:e1:6f:f0:db:93:b5:b9:21:
5d:a1:cc:c9:fb:95:71:4e:73:bc:f1:cb:9c:8e:d8:
65:6f:e4:43:e1:4b:92:e1:6f:80:03:9d:58:39:a9:
68:35:9e:5c:33:fc:ba:2e:a6:7a:23:6a:09:44:b0:
ac:a6:6d:88:d7:89:be:80:ec:d9:97:55:b3:5e:23:
62:3d:7c:12:f9:cd:23:c8:d1:5a:4e:47:50:bc:69:
1c:49:cc:2d:8c:d8:5a:7b:10:d6:8f:3c:11:f1:ad:
66:c8:9c:43:ae:c4:bc:bd:47:67:b3:14:1b:d8:f1:
de:12:e7:25:d8:41:d4:b3:68:ab:5f:32:2b:6f:64:
95:a2:a5:67:2e:83:6d:0f:f0:c4:88:fd:31:cd:1c:
a2:c9:ee:0d:af:d7:dd:d4:91:9c:70:84:cf:ab:64:
31:3c:99:62:b1:5a:b7:c1:2c:75:bc:81:a3:a9:6b:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A2:21:11:17:58:0F:69:36:EA:A0:10:8A:3E:A6:A0:31:A5:D8:B6
X509v3 Authority Key Identifier:
keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3b:9c:1e:ae:94:0c:e7:ed:97:6b:67:3d:22:88:7b:96:35:
8f:02:a6:65:3c:6b:a0:76:25:80:34:59:02:cb:09:15:db:5d:
e5:6d:f6:1f:2b:a7:6b:79:72:78:47:e7:67:9c:61:d8:74:eb:
2e:be:c7:29:fa:86:9d:eb:8d:cb:4e:a9:89:67:f2:73:f1:56:
20:eb:1f:38:d4:57:18:76:e6:3a:44:9e:1f:8d:2f:a5:49:13:
f9:d9:08:d7:0d:ac:79:b5:e1:50:66:38:ad:9a:45:87:44:be:
51:c0:be:e8:ab:fd:a0:d0:1d:01:14:2f:2b:f0:5e:a0:68:b4:
57:77:23:95:00:bc:c2:6e:bc:f6:1b:f8:06:30:03:ec:23:81:
c5:f7:b3:31:06:11:a8:ca:ea:5f:33:98:0a:35:11:c8:18:ac:
00:48:8e:20:0f:e0:ac:c9:e2:6a:26:31:d1:95:b7:76:f5:ce:
50:b1:8b:4b:36:b9:ea:b6:45:a8:20:4c:d4:57:1b:51:65:c3:
89:f4:13:70:4f:eb:79:bd:02:9b:07:4d:7e:8b:fb:d5:5c:87:
41:7b:61:eb:1a:9b:31:d2:e2:f4:a5:fe:05:5c:83:d7:f7:38:
bd:9e:5f:57:96:35:90:c3:6c:7e:a3:f9:1e:1d:7a:8a:e1:1a:
3e:a0:35:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4
NEE4NDY3N0QwHhcNMjYwNjAyMTU0MjM4WhcNMjYwNjA5MTU0MjM4WjAYMRYwFAYD
VQQDEw02YTFlZjllZS00MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6bsOaLNAqnOowmF1yTSlletSS/RTA18Ur1L7FN7CBINn9TojVZdyvnaWECb
opWpZFZMXCygE2LS3TTY/ssa3XslVQ2qbXyI9FmTinzrOyOr4W/w25O1uSFdoczJ
+5VxTnO88cucjthlb+RD4UuS4W+AA51YOaloNZ5cM/y6LqZ6I2oJRLCspm2I14m+
gOzZl1WzXiNiPXwS+c0jyNFaTkdQvGkcScwtjNhaexDWjzwR8a1myJxDrsS8vUdn
sxQb2PHeEucl2EHUs2irXzIrb2SVoqVnLoNtD/DEiP0xzRyiye4Nr9fd1JGccITP
q2QxPJlisVq3wSx1vIGjqWvf1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWiIREX
WA9pNuqgEIo+pqAxpdi2MB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz
MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl
T0poR0VQLWtmcGFFcUVaMzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtjucHq6UDOftl2tnPSKIe5Y1jwKmZTxroHYlgDRZAssJFdtd5W32Hyuna3ly
eEfnZ5xh2HTrLr7HKfqGneuNy06piWfyc/FWIOsfONRXGHbmOkSeH40vpUkT+dkI
1w2sebXhUGY4rZpFh0S+UcC+6Kv9oNAdARQvK/BeoGi0V3cjlQC8wm689hv4BjAD
7COBxfezMQYRqMrqXzOYCjURyBisAEiOIA/grMniaiYx0ZW3dvXOULGLSza56rZF
qCBM1FcbUWXDifQTcE/reb0CmwdNfov71VyHQXth6xqbMdLi9KX+BVyD1/c4vZ5f
V5Y1kMNsfqP5Hh16iuEaPqA1kQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:37:32 2026 by rpki-client