
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier: P202WHJSWCqhYYYSg1Lm/uDxY8PgQuysFb/n82/vSCo=
Subject key identifier: AD:20:6B:CB:34:73:26:3D:D1:E1:6F:7C:88:9C:E6:8B:48:B5:D2:25
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 1260
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number: 0DE2
Signing time: Thu 06 Aug 2026 19:59:58 +0000
Manifest this update: Thu 06 Aug 2026 19:59:58 +0000
Manifest next update: Thu 13 Aug 2026 19:59:58 +0000
Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: I1b+IEx7PjQzwQgMMqnUrIgBiV4HBTADFCUwpPN7SbY=)
2: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: bNrxB+4vYm1vYBbu7foU1nk5+0scTY3fNESf2+DiIQA=)
3: 9415082C580911F1AF5AA0C49D833773.roa (hash: ZXqZlUpuR0qiSlcSWwYD4VZZKGXWPn1lkEN6cYxmbW0=)
4: B0F927B62E5111F1BD10F65598833773.roa (hash: lEC4h0C/BlWeoQezEUq/wosvOp1Bq3k86rCVxSiaJ7c=)
5: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: leKyUuCIlZ14TjNCgY53HEbyQblwhhLPh9MB2YSGjFw=)
6: A173B894112711F0845DF16FC4F9AE02.roa (hash: PZTxpjB636ZwcR/b+ew6RaaC+tAKodGrZdfamhS9xkI=)
7: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: WOG/JDnTMbLnKggPICFOEZMrJLYgxzH3vajEoHzJKiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 19:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4704 (0x1260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Aug 6 19:59:58 2026 GMT
Not After : Aug 13 19:59:58 2026 GMT
Subject: CN=6a74e7be-5e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:64:8e:52:08:a5:41:e4:73:a7:e9:1c:fe:27:
9d:2a:98:f8:c4:7a:4a:57:1b:a5:9b:5f:c3:23:9b:
e2:96:d5:0b:b2:b7:9f:9e:10:61:33:2f:78:33:bb:
66:64:eb:24:cd:23:8a:bd:39:bb:f4:a5:05:5c:c7:
36:d1:7c:b4:e9:38:f8:cd:03:de:fd:e8:e1:63:bd:
d0:3b:d6:4e:6f:ec:fd:72:03:32:ef:40:83:b7:30:
fc:35:97:64:46:60:b2:69:ad:86:b5:7a:2e:e1:72:
e6:86:fe:98:04:ec:d2:2c:15:75:d3:44:50:c4:96:
9f:b3:d3:78:07:79:4b:cf:d1:a6:69:bf:9c:61:72:
f8:8a:76:2c:57:07:12:42:13:32:e0:bb:1a:07:7a:
bf:78:47:9d:f9:01:9b:01:0a:08:f7:2b:2d:6c:97:
56:1e:31:5b:0e:89:66:08:1b:13:5c:0f:50:8a:67:
a3:f4:e0:54:e5:12:d5:83:9b:d9:31:4d:1d:d9:c0:
b1:3b:41:8b:ee:02:1d:87:b0:99:5a:f6:4f:e9:c3:
26:70:a9:2d:54:e7:b9:b6:e0:60:9d:b9:fd:96:d1:
8d:bd:be:5c:aa:e0:1d:90:21:14:f0:e1:2d:ba:16:
99:d7:9d:bf:c0:31:c7:72:de:8a:33:fc:1f:f7:e2:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:6B:CB:34:73:26:3D:D1:E1:6F:7C:88:9C:E6:8B:48:B5:D2:25
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:4d:a0:a2:99:41:82:58:53:a1:7b:8f:81:e2:36:bb:fe:6e:
59:8d:74:b5:3a:f5:0a:03:c1:87:7c:bd:8c:11:82:7c:72:0a:
3e:f0:9f:3f:d7:b3:cf:f6:a8:c1:f6:6e:25:af:ce:e5:93:51:
b7:c7:d9:6a:a1:97:8e:9f:e4:4b:87:57:c4:c3:40:3a:31:3e:
1e:3a:27:b4:12:20:ec:5e:ff:74:ed:63:7c:50:69:e0:7c:4b:
87:d2:5f:64:f1:de:ef:08:5e:2b:5e:96:1d:eb:cf:86:9f:06:
4b:24:32:2f:b5:d5:f4:3c:16:fa:0d:2b:6b:90:aa:8a:c1:7d:
d3:9c:3d:b6:9d:8e:4f:30:87:d8:49:19:d8:37:14:53:06:35:
08:a3:14:ff:46:e8:45:5b:9f:fc:2b:64:c6:d1:21:45:f1:02:
33:6a:86:42:1a:bd:b1:34:60:49:78:14:ab:16:0b:8c:48:81:
33:c6:0a:96:5b:5e:fc:28:82:32:7e:cc:da:a1:f4:b0:e0:71:
05:dd:7e:7a:85:eb:97:90:59:c5:26:71:81:e0:45:77:8f:7d:
41:58:9b:eb:0c:52:1c:db:67:75:db:b5:04:1a:c1:2e:a8:b4:
3e:39:72:bb:1d:a1:54:a2:a4:e5:7b:72:70:e4:20:7e:64:11:
f2:ef:da:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:51:28 2026 by rpki-client