
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier: mTwbXbgM9T+4Ak3pYUEwa7WQ8Zd5RyQ6OwrTvQeTjsA=
Subject key identifier: 48:A1:BA:3D:50:44:D8:2E:0C:AB:E8:16:E9:9B:27:67:FD:44:4E:26
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 127B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number: 0DFD
Signing time: Tue 22 Sep 2026 19:53:35 +0000
Manifest this update: Tue 22 Sep 2026 19:53:34 +0000
Manifest next update: Tue 29 Sep 2026 19:53:34 +0000
Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: CXjsC5UeSoode2lVrP4lLrEJuHzDt5AeXQ+YdcQjAZI=)
2: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: WOG/JDnTMbLnKggPICFOEZMrJLYgxzH3vajEoHzJKiM=)
3: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: leKyUuCIlZ14TjNCgY53HEbyQblwhhLPh9MB2YSGjFw=)
4: A173B894112711F0845DF16FC4F9AE02.roa (hash: PZTxpjB636ZwcR/b+ew6RaaC+tAKodGrZdfamhS9xkI=)
5: B0F927B62E5111F1BD10F65598833773.roa (hash: lEC4h0C/BlWeoQezEUq/wosvOp1Bq3k86rCVxSiaJ7c=)
6: 9415082C580911F1AF5AA0C49D833773.roa (hash: ZXqZlUpuR0qiSlcSWwYD4VZZKGXWPn1lkEN6cYxmbW0=)
7: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: bNrxB+4vYm1vYBbu7foU1nk5+0scTY3fNESf2+DiIQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4731 (0x127b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Sep 22 19:53:34 2026 GMT
Not After : Sep 29 19:53:34 2026 GMT
Subject: CN=6ab2dcbe-1c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:3d:4a:4b:44:74:47:df:0c:b8:c8:e2:10:
74:ff:1a:9e:e8:48:02:a4:64:01:5d:e5:62:26:52:
5d:d7:1e:67:6a:2f:b0:98:dc:9c:c0:2c:32:c9:f7:
56:a6:24:90:ec:95:e0:e9:5b:50:99:3d:47:31:9d:
fa:e6:97:41:04:f8:69:17:4b:a8:ff:2b:bb:84:43:
3e:44:11:c7:74:17:77:ad:41:78:cd:05:80:a9:56:
19:f7:78:49:d7:58:f1:49:ad:03:11:20:5d:64:94:
4b:5e:d7:c6:3e:05:30:63:2f:51:85:b6:7d:19:e8:
c7:35:fc:2d:bf:09:a0:f4:26:76:31:0c:9a:3b:a5:
d1:35:5b:2f:4a:fc:3e:98:47:45:7a:4d:a3:d6:c6:
d8:df:ea:1e:16:98:4b:67:3f:99:86:66:e4:ac:41:
d2:67:a9:3f:07:af:44:e7:95:9d:64:57:77:7b:46:
72:e3:5c:a8:b1:e1:36:74:ca:40:33:41:91:ce:c0:
59:9b:16:49:46:6f:3a:89:ad:4e:0a:bd:b9:9e:81:
e0:42:80:35:18:d3:78:ad:9d:a4:21:ac:8f:28:57:
03:82:2f:3c:af:86:23:e6:3d:69:98:d1:ed:43:78:
fc:1f:d5:4f:89:4f:46:3a:13:a2:25:7f:32:71:a2:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:BA:3D:50:44:D8:2E:0C:AB:E8:16:E9:9B:27:67:FD:44:4E:26
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:aa:7a:65:8f:85:b8:74:75:a9:74:a0:f6:e7:cd:ab:72:92:
e6:80:f5:bf:45:6e:b1:41:4f:97:10:95:d4:e7:0c:c4:1b:a6:
09:a8:19:50:93:48:3e:f2:43:4f:ab:9d:a3:07:32:47:ea:c1:
53:16:97:09:52:ce:c1:d0:2f:3a:0a:d3:c9:d3:78:1b:4f:b9:
10:a6:e0:8e:a5:d1:ba:b2:02:ba:56:f3:d7:d5:1f:b3:d8:67:
5e:59:3c:ba:c3:d4:57:0a:a4:b4:12:19:a6:ac:2e:63:88:60:
bf:b4:00:2f:91:e5:bf:0e:4d:dd:a4:0b:a1:85:d2:1a:1f:81:
64:8f:47:e2:76:b0:75:64:3e:9c:5f:0e:27:25:91:e2:4c:0a:
5a:54:e3:ce:d4:22:6e:71:bf:b7:06:26:0a:e6:83:bc:d4:09:
4f:35:4d:13:73:a9:7e:e7:d5:18:e7:20:04:63:23:4a:a8:ad:
4e:0d:32:df:dd:75:77:f9:9f:5b:f2:0d:79:1a:30:87:73:a0:
ef:fd:f5:71:11:65:43:9c:fa:22:81:33:1e:0a:03:f1:c0:ad:
67:8e:10:61:d2:68:12:c0:9b:9d:52:ef:d8:7e:08:e6:b8:0b:
96:e7:63:6b:7d:da:7f:ea:60:f7:f8:1d:73:8d:ab:ab:d1:e4:
86:5e:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:37:08 2026 by rpki-client