
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json)
Hash identifier: n8hQSdfxAT6Scnk6l1qwHIsXWY5cfSEp2N83CNamr9I=
Subject key identifier: EA:8C:3C:7D:B9:BD:52:DC:E3:BB:D9:B2:44:55:76:9E:AC:9F:EF:EF
Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
Manifest number: 0156
Signing time: Sat 03 Oct 2026 05:50:37 +0000
Manifest this update: Sat 03 Oct 2026 05:50:37 +0000
Manifest next update: Sat 10 Oct 2026 05:50:37 +0000
Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: xSUGyR6TMnbgnMbaXTIGCKGiws8aJ3jl32pd43+dYss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320
Validity
Not Before: Oct 3 05:50:37 2026 GMT
Not After : Oct 10 05:50:37 2026 GMT
Subject: CN=6ac097ad-5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:5b:a7:8d:43:4f:34:dc:99:83:9a:6f:c6:
6a:85:18:4f:a8:d4:57:73:e3:49:e6:37:ed:bc:a1:
66:fc:c1:f1:b4:62:37:9a:a5:f2:36:d7:50:66:e4:
3f:75:12:a1:c8:80:fa:d4:34:fb:ac:bb:58:df:67:
2e:fd:d8:f9:c4:1e:02:64:a1:28:02:97:aa:ea:8e:
ea:b3:15:2b:0d:1a:b3:2e:48:97:6c:36:26:4b:b4:
23:b4:47:1f:a7:62:ee:d6:fb:d3:9b:9a:bb:9c:64:
91:34:f5:4e:54:71:98:0b:10:d2:a6:aa:e1:48:20:
dd:75:65:91:b3:b6:bf:d0:1e:e7:86:e5:4c:e4:8b:
99:dd:df:dd:02:ec:65:ec:ae:a8:55:d1:a3:af:be:
bc:a8:97:7e:84:95:7f:8a:ae:0d:39:b4:bd:30:1e:
91:ac:81:d8:4e:aa:71:eb:7c:17:b5:5c:2f:82:9b:
da:ce:c7:9d:99:aa:7f:b7:02:30:cc:32:41:f2:46:
d7:2e:1e:27:88:74:da:70:19:a4:5f:58:44:fb:40:
9c:de:70:e6:0d:fd:1c:e3:e8:fc:40:fd:0c:c0:af:
52:0b:e6:a4:4c:01:05:df:0a:d3:43:68:cc:62:68:
83:2c:eb:80:08:df:9c:97:3d:ac:6e:67:de:7a:9b:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:3C:7D:B9:BD:52:DC:E3:BB:D9:B2:44:55:76:9E:AC:9F:EF:EF
X509v3 Authority Key Identifier:
keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:11:fc:ac:b8:ac:4c:05:64:e0:f4:a5:1c:c2:c9:6c:e9:79:
61:44:2e:36:cd:3e:46:dd:c0:9a:4f:49:41:60:4d:56:ff:2a:
e4:f7:35:b3:26:99:9a:2f:e4:1b:e4:55:a0:ee:7f:2a:f3:67:
e2:3c:ba:c3:8b:64:4c:41:7c:9a:96:14:36:25:5a:9e:2b:70:
c5:f5:4a:f0:a3:df:d1:9c:51:30:ec:54:9b:9e:69:a7:ed:37:
ef:b2:c7:c2:15:19:f7:92:cc:2d:84:f0:51:f6:d7:a3:0f:55:
10:a1:d4:ec:b1:f4:fb:04:cd:2d:52:18:e4:f2:af:58:7f:8c:
5f:94:09:93:1b:aa:70:2d:a8:4a:72:3b:77:7f:0d:31:94:e8:
9a:60:ff:59:e7:07:30:07:c3:81:51:a0:06:99:dd:3b:92:88:
bd:7e:10:07:09:2b:db:9b:d7:c6:44:c9:9e:6a:9f:63:f3:0a:
1a:b9:ec:2d:14:6b:4b:42:a5:4a:f1:05:71:3d:51:ab:6b:e9:
cb:45:64:4a:32:9e:3a:49:37:ea:57:54:a1:a8:b5:08:b8:d9:
b9:ca:c9:11:2d:30:21:ce:a6:bb:7c:0c:97:38:e1:30:91:ab:
97:c8:73:d4:64:c5:66:05:3c:de:3c:41:8d:8b:18:13:83:7a:
51:d6:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:33:24 2026 by rpki-client