
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier: 9wNbpZUsqK14K0bX5OQKwFWpFl4eKUORtcn3IZopKR4=
Subject key identifier: 80:7B:D5:B6:FF:00:58:B5:28:91:91:7F:AE:A9:34:B8:26:8A:E7:3C
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial: 02C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number: 02B2
Signing time: Fri 25 Sep 2026 01:34:45 +0000
Manifest this update: Fri 25 Sep 2026 01:34:45 +0000
Manifest next update: Fri 02 Oct 2026 01:34:45 +0000
Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: kHCo4KVZOHmx7JMqBzPT4sUmCjHccBFB4O0bWV4uqPg=)
2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Validity
Not Before: Sep 25 01:34:45 2026 GMT
Not After : Oct 2 01:34:45 2026 GMT
Subject: CN=6ab5cfb5-3add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:4e:76:a5:47:dd:70:8d:45:4f:9b:d3:88:
75:f6:ca:3e:b3:1a:8f:2c:db:06:ba:36:3c:ea:ee:
e4:58:74:96:b5:78:bf:7c:e6:c1:78:2b:16:9e:9f:
f0:da:da:fb:e6:14:35:86:2e:82:f9:91:95:f2:48:
b3:78:38:43:cd:2b:dc:12:46:bf:92:af:d9:41:c7:
06:ab:37:f4:d5:94:84:78:30:b3:8a:de:bc:1c:6a:
d7:ef:17:8c:54:39:7a:cf:e7:19:a1:c6:b1:1f:eb:
7a:98:1a:7c:b2:a1:c1:49:18:3f:d9:ba:31:61:21:
24:32:be:af:19:03:2c:bb:08:65:b1:2d:df:59:23:
75:d5:fb:cd:e5:68:e4:d4:83:b2:e1:f6:32:75:bf:
90:0d:8d:fd:5e:b2:0b:43:aa:85:4c:10:54:ee:90:
88:d7:d1:43:60:02:9e:69:70:ce:36:b5:b3:bc:e4:
ff:40:49:2c:b8:d2:d8:46:f8:35:6e:26:00:09:33:
77:00:d5:1a:a4:bc:61:7f:36:2f:64:d6:0e:a8:2e:
58:81:0f:73:72:94:58:5d:5d:10:a6:ee:8e:5c:5b:
f0:58:0e:4d:be:0a:a5:e1:86:24:d0:03:28:1a:66:
f5:e3:a7:15:fb:2d:6f:75:f5:b3:98:c4:6b:48:21:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7B:D5:B6:FF:00:58:B5:28:91:91:7F:AE:A9:34:B8:26:8A:E7:3C
X509v3 Authority Key Identifier:
keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:50:ad:52:0b:ec:63:46:6d:de:78:7b:a9:00:39:ed:94:89:
2f:77:e9:08:18:e3:5e:dd:ac:ef:b2:ba:62:e9:11:5d:21:97:
e9:46:d4:1e:56:93:e6:7a:d7:22:6a:9e:9a:a6:76:e6:cd:9f:
4b:09:31:4b:09:55:17:9a:bc:a7:ca:b5:ca:d6:f7:c8:4e:cd:
23:94:ea:99:b9:b4:c6:0a:0b:37:f7:a0:b7:1d:da:f5:96:30:
c2:19:41:0c:57:7e:06:b6:0d:a5:b6:9f:06:6a:56:c7:0d:8a:
77:c2:3e:d7:2b:41:70:c7:5a:75:e1:a1:71:c4:69:78:e2:e4:
c6:65:88:19:02:d7:06:c3:ac:30:71:96:a9:3c:9c:a4:aa:58:
1e:44:9d:cf:2c:f6:d0:c2:6b:00:e6:55:3f:f2:3d:db:06:0f:
47:2d:16:6d:9d:da:25:73:1f:62:bc:c2:6c:e1:b5:16:b6:21:
f3:2c:d2:39:d4:f5:7e:cd:c5:22:55:6e:c9:77:28:4c:0c:46:
bf:da:39:e5:7d:3c:ab:6e:a8:b3:88:ca:0e:db:1f:b8:d5:48:
67:ca:35:38:3b:7f:95:76:76:94:fd:56:0c:0c:ca:ca:70:ed:
92:d4:29:9d:8e:9f:0e:00:cb:0e:b7:7e:07:17:4d:57:75:87:
87:d3:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:22 2026 by rpki-client