
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier: vIHHSjeQfHW7W8K+UN16U2VCawLN3mSjlSpWyFbVcIk=
Subject key identifier: 3F:3F:17:01:5D:07:94:DC:2A:C0:19:84:57:33:FE:3D:22:60:A9:59
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial: 08D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number: 08C1
Signing time: Tue 06 Oct 2026 20:45:41 +0000
Manifest this update: Tue 06 Oct 2026 20:45:41 +0000
Manifest next update: Tue 13 Oct 2026 20:45:41 +0000
Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: EQgRM77i7IdrDq3Z5l8ddjrfqxoQOGE0h4MOV/KTBw0=)
2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: 7lILAk4gsWPIDZdA1SJEcAGVilUIsUdUMv+Kcbhfelo=)
3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: e6YP5hoyPP9E+431/sCsWnlZVdwuRyAJ8acWlo4Re+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Validity
Not Before: Oct 6 20:45:41 2026 GMT
Not After : Oct 13 20:45:41 2026 GMT
Subject: CN=6ac55df5-db11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:27:55:42:e1:e7:d3:35:48:87:d0:44:3d:
0f:95:3a:6e:30:29:b9:de:1c:12:b1:d5:4e:ea:64:
68:4f:39:a2:ef:81:8e:fb:1c:42:ce:7d:a4:4b:61:
30:96:fe:b0:8f:28:7e:50:57:50:4d:8b:9b:f4:fb:
7a:b3:f0:6b:83:fc:78:a2:e0:69:c1:02:fa:82:27:
45:d5:69:45:d4:ff:ce:5b:df:8f:04:3a:54:8a:36:
c3:54:ae:64:ab:c6:f8:0c:8a:c3:ad:a6:b7:82:ea:
78:16:54:65:ee:f9:6a:5b:51:07:50:c7:2a:a3:20:
ea:10:fe:79:6a:f1:16:64:50:12:c6:27:13:00:4b:
13:f1:23:ad:93:9c:2a:9e:06:2d:6a:dc:8a:65:2e:
4b:b1:86:ed:4e:db:1d:39:ce:52:84:d9:83:48:a5:
f0:95:93:80:3e:10:d3:de:2e:92:61:b4:33:da:cc:
bb:c3:9b:77:3d:ce:64:28:96:1d:8a:b0:23:7a:f5:
52:5b:e6:6a:98:4c:b9:9d:c1:67:e8:8d:d4:2b:f4:
b5:a8:72:7d:8e:ad:51:d9:c4:cb:c8:a1:d4:3c:89:
f5:1c:91:75:f5:5a:57:34:48:5f:23:32:59:15:fa:
9f:90:7b:90:6e:0c:48:52:43:13:8b:7d:9b:6a:9b:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:17:01:5D:07:94:DC:2A:C0:19:84:57:33:FE:3D:22:60:A9:59
X509v3 Authority Key Identifier:
keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:93:0a:43:63:38:3c:bc:31:ed:6a:83:7d:aa:24:f3:36:51:
8e:5b:ec:72:85:3e:c9:41:35:d9:d3:e0:2a:14:7c:9f:58:1b:
43:fc:4f:16:99:e1:e1:81:74:ff:47:fb:83:3a:f6:e8:73:d1:
e2:d0:91:5c:6d:73:0a:12:f5:90:73:2c:67:83:5c:95:31:cb:
29:27:b4:9b:42:17:78:00:cc:02:ca:3a:7d:25:78:89:4a:f9:
8c:f4:f4:9c:69:6f:c7:dc:b4:2e:09:18:49:ef:12:f6:b2:55:
ea:32:62:ba:9a:f1:6f:e6:27:a8:4c:e9:43:0d:39:88:ba:62:
88:94:ae:06:1f:a6:52:63:0c:a6:ae:c8:d0:52:c5:e4:8a:74:
52:ed:94:eb:ce:9f:20:b4:cb:d2:16:bb:42:20:7b:c0:2b:6a:
05:56:59:ed:23:47:1b:96:f1:ed:18:7e:e8:63:11:e1:15:4c:
46:4f:fc:93:c6:44:2a:77:b8:ef:9b:a2:2d:0c:a8:9f:8f:5e:
3e:39:65:a3:7f:77:48:cc:1f:b5:fc:49:9e:05:a8:15:90:2a:
1c:42:2c:fa:22:ff:37:9e:2e:a2:94:f8:52:02:ef:ee:3c:69:
6a:1c:12:5a:b9:4f:43:f9:92:28:64:e2:80:e2:ed:f5:7e:d7:
19:bb:56:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy
OUY5MTY4ODEwHhcNMjYxMDA2MjA0NTQxWhcNMjYxMDEzMjA0NTQxWjAYMRYwFAYD
VQQDEw02YWM1NWRmNS1kYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZgnVULh59M1SIfQRD0PlTpuMCm53hwSsdVO6mRoTzmi74GO+xxCzn2kS2Ew
lv6wjyh+UFdQTYub9Pt6s/Brg/x4ouBpwQL6gidF1WlF1P/OW9+PBDpUijbDVK5k
q8b4DIrDraa3gup4FlRl7vlqW1EHUMcqoyDqEP55avEWZFASxicTAEsT8SOtk5wq
ngYtatyKZS5LsYbtTtsdOc5ShNmDSKXwlZOAPhDT3i6SYbQz2sy7w5t3Pc5kKJYd
irAjevVSW+ZqmEy5ncFn6I3UK/S1qHJ9jq1R2cTLyKHUPIn1HJF19VpXNEhfIzJZ
FfqfkHuQbgxIUkMTi32bapvzCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8/FwFd
B5TcKsAZhFcz/j0iYKlZMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz
QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO
OU9udHB2NWNDUEVwLVJhSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALJMKQ2M4PLwx7WqDfaok8zZRjlvscoU+yUE12dPgKhR8n1gbQ/xPFpnh4YF0
/0f7gzr26HPR4tCRXG1zChL1kHMsZ4NclTHLKSe0m0IXeADMAso6fSV4iUr5jPT0
nGlvx9y0LgkYSe8S9rJV6jJiuprxb+YnqEzpQw05iLpiiJSuBh+mUmMMpq7I0FLF
5Ip0Uu2U686fILTL0ha7QiB7wCtqBVZZ7SNHG5bx7Rh+6GMR4RVMRk/8k8ZEKne4
75uiLQyon49ePjllo393SMwftfxJngWoFZAqHEIs+iL/N54uopT4UgLv7jxpahwS
WrlPQ/mSKGTigOLt9X7XGbtWkA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:48:43 2026 by rpki-client