
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
File: MZfydASVOdoqReLMBqpcyHTmJ28.mft (raw, json)
Hash identifier: xWsmFGsHbEycLmDqyEPMWCTjogRzMa/oyEg7PBZTRw8=
Subject key identifier: 4F:06:7E:51:C2:64:90:C9:41:25:12:82:41:76:25:AD:69:82:48:37
Authority key identifier: 31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
Certificate issuer: /CN=A919BF94/serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
Manifest number: 2C
Signing time: Thu 03 Sep 2026 08:56:55 +0000
Manifest this update: Thu 03 Sep 2026 08:56:55 +0000
Manifest next update: Thu 10 Sep 2026 08:56:55 +0000
Files and hashes: 1: MZfydASVOdoqReLMBqpcyHTmJ28.crl (hash: GC5qDwBkfTDXJ1/6mALMq4lijm6gF8dHZj2qT+3drz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BF94, serialNumber=3197F274049539DA2A45E2CC06AA5CC874E6276F
Validity
Not Before: Sep 3 08:56:55 2026 GMT
Not After : Sep 10 08:56:55 2026 GMT
Subject: CN=6a993657-307a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:30:3a:92:81:77:d5:ac:4f:bc:b3:7d:e5:
42:d6:cf:03:1a:60:b6:98:13:88:ea:05:f9:e6:3c:
2e:72:b8:be:c3:8f:c2:c3:9d:9b:21:e6:da:28:28:
f7:c3:17:88:f4:35:67:bb:b8:b7:58:37:f3:97:4a:
99:d2:af:d0:b0:9e:32:82:b9:86:b9:e3:0d:8d:81:
cb:e7:ba:b2:d5:57:b3:b1:30:7a:e7:36:68:12:ff:
59:18:6c:b9:1a:ac:bf:fc:99:82:6e:09:0e:fe:30:
09:c4:5b:4f:5a:fc:93:60:03:0f:1a:55:c3:50:80:
6a:30:b7:6c:5f:3a:18:47:ca:16:94:0b:81:24:2c:
82:ba:c9:54:cf:be:e0:13:6a:b1:7d:b5:c2:d8:f0:
81:0e:45:c9:bf:f0:3d:da:46:4b:07:f0:12:1b:58:
f1:28:f4:1e:7e:a1:72:4e:d6:9d:12:e7:5a:20:27:
b6:0d:1c:11:a8:4e:e9:5b:44:71:6a:14:3b:a9:37:
dc:bc:45:50:7a:e0:c6:94:c2:b2:48:c9:6f:6a:2d:
76:7d:6f:21:aa:dc:5b:d7:1e:b0:48:b8:50:62:13:
0b:71:3c:6e:26:18:1b:8b:30:7c:66:bd:d9:ba:c3:
6f:65:29:07:17:90:3a:1b:68:f5:90:ff:03:f6:87:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:7E:51:C2:64:90:C9:41:25:12:82:41:76:25:AD:69:82:48:37
X509v3 Authority Key Identifier:
keyid:31:97:F2:74:04:95:39:DA:2A:45:E2:CC:06:AA:5C:C8:74:E6:27:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZfydASVOdoqReLMBqpcyHTmJ28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BF94/8353E3F0652911F18C86F8A79AEE528E/MZfydASVOdoqReLMBqpcyHTmJ28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:96:a5:87:96:94:0e:67:8c:86:22:22:22:cc:f5:a4:1a:94:
6d:13:4a:29:b2:92:f0:a0:da:ef:fe:6b:1f:1d:3f:24:47:f6:
f4:9b:9a:a2:ad:85:4f:40:55:c3:84:e4:37:85:cc:72:e9:de:
21:af:3d:51:62:20:19:f1:0e:9f:7f:91:30:e5:4f:8e:76:db:
17:25:af:da:5c:43:18:85:19:55:8b:a0:7f:9f:20:67:cb:dc:
73:d8:4a:b0:14:89:65:ca:e2:2a:32:4c:69:a1:0a:7a:8d:10:
59:c6:8c:6f:27:37:6f:ab:30:0c:12:2a:e4:db:84:c3:8a:a4:
68:a6:07:72:c4:f6:b3:e7:43:a7:34:00:8a:0d:26:b7:bd:10:
39:af:8d:a0:63:f6:e6:8f:33:10:7b:d2:05:e2:12:92:16:71:
ee:75:79:38:81:ff:53:d7:9e:82:b4:14:89:64:2e:b0:e4:85:
cf:08:ca:ac:a0:fc:d5:4e:91:1f:89:e3:7c:e6:9e:03:dd:1a:
05:09:a2:d0:82:b1:0d:44:7c:87:43:0d:03:78:13:67:2e:b8:
0c:71:cf:07:37:d3:86:f1:e4:d4:3f:38:8a:2f:9f:0d:cf:21:
a8:d6:b6:7e:bf:0e:c7:64:e0:05:fa:d9:a7:a6:83:bc:1d:4e:
3a:19:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:12 2026 by rpki-client