
$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json)
Hash identifier: ynshbQ0Hx3JcXj6MosdDgn1BO6rJ3r8AbRsNFBee1rw=
Subject key identifier: 3A:F1:6B:F9:2D:3B:95:9E:23:08:05:82:3B:DC:29:14:33:3A:39:78
Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
Manifest number: 81
Signing time: Tue 03 Mar 2026 07:19:15 +0000
Manifest this update: Tue 03 Mar 2026 07:19:15 +0000
Manifest next update: Tue 10 Mar 2026 07:19:15 +0000
Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: W84rNW7gpOIuD/UsOJaO+wm5G+A0jeP3yHO670/2F8Q=)
2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289
Validity
Not Before: Mar 3 07:19:15 2026 GMT
Not After : Mar 10 07:19:15 2026 GMT
Subject: CN=69a68b73-fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:83:0d:ed:82:7f:21:d0:aa:af:10:0d:02:58:
b3:da:7e:9d:0d:80:d7:a6:28:3b:c3:a0:e4:99:de:
42:75:8c:27:de:d7:d4:77:5b:85:59:dd:97:23:1c:
7e:fd:c3:dc:5a:30:b9:f3:21:8a:1d:c3:44:cf:93:
e3:0a:85:86:e7:22:89:52:80:4f:25:6d:32:01:dd:
8c:be:46:e4:d3:94:bc:70:8e:01:3f:77:70:c2:01:
35:7b:8a:82:de:7a:aa:87:e9:09:b3:f8:24:b6:07:
cd:a8:eb:62:38:41:7a:a8:25:de:0f:c1:5c:78:88:
75:ac:b9:d4:f2:35:fc:1e:e2:a0:07:df:43:db:e1:
22:94:f6:cf:72:d5:03:f2:37:17:e9:66:37:45:1d:
49:23:3d:3d:03:d7:ff:f6:39:c7:5c:d1:46:13:89:
41:0e:4d:55:d2:9d:24:5a:4d:fe:18:3f:e6:c6:33:
a4:4c:1b:5b:ed:ca:80:7d:15:bf:a8:31:e0:01:87:
b6:45:cc:69:23:64:c4:ab:60:53:3d:f4:a9:5a:cc:
52:4f:7c:27:d5:b5:1e:21:30:61:ce:50:ae:2a:de:
e3:67:ac:17:53:40:1b:7e:34:6c:a3:f4:4d:79:67:
07:bc:ab:09:14:1a:be:b4:96:8e:b4:9b:1c:29:c6:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F1:6B:F9:2D:3B:95:9E:23:08:05:82:3B:DC:29:14:33:3A:39:78
X509v3 Authority Key Identifier:
keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c1:22:df:f0:f6:cb:40:72:1a:6c:8d:71:de:6e:e0:a6:28:
11:ac:c2:cf:1b:7b:a6:4d:73:bb:26:26:ac:6e:3c:f3:34:98:
29:04:02:9e:9a:80:8e:8b:ae:e3:07:0a:5a:cd:5b:fb:4b:36:
9e:83:53:b6:ad:71:81:63:5e:6b:11:8c:da:fa:33:14:ec:ef:
26:ed:4a:00:20:ce:4b:7f:8c:75:ef:ef:c3:09:50:af:9f:77:
a6:32:e1:bd:83:1f:e3:56:91:eb:a2:6a:45:f4:b9:60:4b:d0:
2f:6a:94:88:2d:18:8e:09:3e:51:83:4a:62:05:35:40:40:a1:
bc:0b:a7:54:25:5f:29:6a:36:73:8a:ee:d7:12:c9:32:13:fa:
1c:ff:3c:2b:01:3b:83:d2:0c:3d:25:ff:be:77:8f:09:32:c8:
51:3c:06:2d:4a:2b:9a:13:2e:7b:e2:7d:b7:29:e1:4d:4b:fe:
dc:9f:95:05:9d:ad:1b:46:73:84:bf:be:c1:15:40:fa:8d:be:
82:ab:4c:0d:a9:97:c2:79:d7:ba:79:a7:b9:e8:f7:98:27:aa:
69:0c:cc:ed:be:e9:00:04:fb:2f:c7:f4:27:27:42:0e:b1:10:
51:93:04:92:8e:44:a1:d1:e4:c3:6c:d7:59:b7:95:10:61:f7:
1b:42:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:19:22 2026 by rpki-client