
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier: +2AQxlF8Qm+7kaSlpY4I2XoT5BFRPau2CJDG1XHTvCc=
Subject key identifier: A4:77:C2:DC:F3:3A:41:29:34:DC:CB:34:BC:81:50:F0:59:8D:ED:46
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial: 03AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number: 03A8
Signing time: Wed 23 Sep 2026 00:14:27 +0000
Manifest this update: Wed 23 Sep 2026 00:14:26 +0000
Manifest next update: Wed 30 Sep 2026 00:14:26 +0000
Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: I5LkG4vlRYw2TD+fTpzD0qI18cEMb59OjXCW+X6/dio=)
2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: +35QxxMyIjCMr8iV27/aV6sabG1DfHlXwGU/67Kw18Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Validity
Not Before: Sep 23 00:14:26 2026 GMT
Not After : Sep 30 00:14:26 2026 GMT
Subject: CN=6ab319e2-8c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:50:23:90:ee:d9:36:ff:ee:ff:b8:57:09:
f2:fb:9f:bc:c9:77:d7:78:57:15:b6:80:3a:2d:a5:
38:c0:1c:e9:2d:9d:17:20:a0:3e:f0:5c:fd:6a:af:
b8:e0:f9:c1:11:0b:e4:e6:a3:43:d0:e7:90:0e:80:
2b:0d:78:84:77:5d:cf:9d:ac:18:9e:ce:ba:42:42:
0d:50:36:a5:0e:35:48:60:fd:81:97:72:b4:e0:0d:
20:73:a0:68:71:0b:cf:af:16:e6:fb:9d:51:1f:45:
00:d6:dd:71:f8:7f:b5:8d:ef:a2:ee:14:c8:b4:4b:
38:11:e4:55:94:87:4c:84:a6:42:79:4e:6e:73:a0:
9f:d6:1f:7d:d3:5d:4c:b2:53:be:d3:23:90:e2:fb:
3c:b1:4f:e9:58:e8:fa:48:4b:af:38:1e:e6:5e:f4:
60:e1:6e:2d:7b:18:f7:ee:22:e4:e4:ef:9a:0e:89:
72:8e:a7:cf:8e:ef:2c:b8:ae:9d:c9:11:b0:c2:d4:
3b:80:9f:3d:28:6d:42:8d:68:e4:8e:58:38:d0:11:
09:d5:5f:73:54:3f:c4:56:1d:58:ae:c9:04:c7:a0:
5e:47:00:65:a2:82:ce:b5:d9:dd:b1:7d:11:eb:1a:
db:7d:61:84:8b:a7:cc:69:ff:f3:a1:a6:4e:bd:06:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:C2:DC:F3:3A:41:29:34:DC:CB:34:BC:81:50:F0:59:8D:ED:46
X509v3 Authority Key Identifier:
keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:35:54:85:05:27:55:4e:1a:6d:cb:1c:66:72:6d:4e:c5:7d:
ab:10:4e:e4:a0:82:fb:72:ec:c2:30:cc:91:83:df:d4:75:e8:
6e:79:f5:aa:58:e4:19:88:57:15:8e:bd:6b:bd:a7:e7:49:58:
89:ca:00:de:b7:c7:63:52:b3:89:ef:39:e8:6a:09:8f:87:bb:
f6:25:53:e1:bc:6d:fc:6a:be:1a:5d:62:34:e9:2a:41:a2:c1:
1a:d8:4d:2d:27:f3:f9:cd:e8:67:9c:7c:81:3e:07:f0:73:82:
5a:06:2b:1d:07:fe:01:bd:22:bf:64:fe:e5:37:c5:24:53:4d:
62:8f:ce:dd:43:f8:94:29:d3:d4:18:d8:e0:a3:36:de:8b:28:
39:1a:59:8a:2a:09:5e:04:d1:2e:d9:75:e7:5c:f4:c7:73:e1:
e2:ff:ca:58:a9:22:4c:1b:3f:03:13:c6:6e:66:ff:0f:a7:e5:
38:26:cb:e3:02:9e:f3:1e:3b:e4:d0:63:8b:2c:f9:b7:13:bb:
ba:31:67:27:5c:52:7b:dd:17:4c:c8:ee:19:68:bf:e9:de:0b:
b1:35:30:65:0d:04:89:1a:3d:b1:b8:98:5d:63:8b:4e:37:55:
07:fe:7a:d4:21:e2:3f:0e:ba:27:73:2f:48:cb:25:6a:7d:fe:
b3:9d:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:43:01 2026 by rpki-client