
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier: 54kpcRMygVmm46AkHgwXlKUc+dA5lDVlIj0o/WyvzpY=
Subject key identifier: D0:3A:61:5A:2B:6B:A1:14:6E:6C:CB:5C:BA:73:11:BE:69:BC:62:D3
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial: 09C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number: 09AE
Signing time: Tue 12 May 2026 20:02:53 +0000
Manifest this update: Tue 12 May 2026 20:02:53 +0000
Manifest next update: Tue 19 May 2026 20:02:53 +0000
Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: hYucVWWkb8XQJ+tPTrgVT3+b9Sr9bEQbXRg2qHxk9/Y=)
2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Hj2gvQPptbIyBsk+GZQr8HEa82gNIwoOpKASxetT7F4=)
3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: H91fXqxV7rY9zHcxYCuUe8A5mKb0ae920Vx4iWfH6XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2496 (0x9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Validity
Not Before: May 12 20:02:53 2026 GMT
Not After : May 19 20:02:53 2026 GMT
Subject: CN=6a03876d-bb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:ef:df:31:0a:a0:bc:ce:a3:46:87:ff:84:
e4:15:83:64:88:d9:b0:50:3a:6d:a7:40:f5:7b:12:
16:0a:6c:92:5e:0b:08:9f:34:87:54:87:45:30:01:
41:42:a2:56:e9:c5:fd:46:3c:fe:92:c8:ef:da:1f:
9a:89:69:54:de:ee:11:20:74:f1:3a:44:00:22:66:
6d:e4:1c:73:30:01:d6:2f:21:93:bb:f6:36:1d:a5:
ca:41:26:17:3b:2c:c4:1e:45:c5:d7:d6:4b:91:4f:
d8:a8:fa:49:cc:c4:1a:54:ed:54:a7:21:55:7e:46:
2f:57:d7:ee:56:9a:e3:12:68:de:34:1c:20:a8:e6:
a4:15:ae:e7:79:eb:74:a0:9d:c5:c6:b1:60:1b:3b:
a0:dc:97:a7:6d:8d:57:65:9b:de:d4:6c:5f:d6:2e:
1f:bc:f2:a4:81:f1:b6:17:bb:a6:a2:45:d6:24:15:
ab:23:38:a9:de:b2:9f:87:01:18:a4:3a:bd:33:37:
0b:10:87:7c:14:1d:8f:b4:0c:32:bc:28:21:08:9b:
f4:d6:97:ed:68:50:aa:5c:52:ad:62:fb:04:f4:91:
c0:da:b3:ea:c1:32:91:b8:e0:af:db:e9:ab:d2:86:
3e:ac:3b:cd:dd:fa:43:64:e8:19:2d:5d:6c:9f:21:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3A:61:5A:2B:6B:A1:14:6E:6C:CB:5C:BA:73:11:BE:69:BC:62:D3
X509v3 Authority Key Identifier:
keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:2a:37:44:c1:34:df:a1:c2:9b:58:72:d8:a2:f9:4d:52:b6:
82:9a:47:bd:72:0c:87:62:51:81:e0:e3:d0:b0:62:2e:1f:58:
d1:d4:f0:65:cb:a7:a4:f9:c3:aa:33:63:0c:0b:1d:81:55:16:
31:8b:e1:19:e5:03:26:6c:f0:e2:80:52:ae:84:1a:eb:9f:cc:
4e:c7:95:e9:4c:04:6c:bf:0b:79:e7:9f:6f:d7:b6:11:7e:bf:
8b:37:20:4e:66:8d:f1:fa:77:88:0c:b9:96:bf:a5:1c:9d:2d:
c4:78:04:c6:85:2b:c8:11:26:d4:38:38:b5:f2:40:fe:2c:cb:
dc:94:a5:17:7c:37:fc:a2:51:7a:da:bb:16:39:d1:2d:16:e6:
35:8d:ff:bd:80:05:0b:0d:cb:05:4c:52:fa:66:ce:e9:41:6b:
5d:1c:16:29:1e:41:57:88:3c:56:d8:c5:0b:5e:b7:0c:65:f8:
c5:d2:c2:32:bd:0c:58:94:32:05:91:6c:bd:72:a5:0e:49:a3:
9e:a1:9d:58:e6:27:3e:69:41:ad:74:c0:d0:ea:3f:f0:cd:2d:
49:ec:54:3b:85:21:04:b2:6f:e1:84:a4:4c:4a:92:fe:b9:88:
89:72:11:35:2e:10:87:96:25:d3:c4:ab:ce:cf:06:4e:4d:2f:
e4:86:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:38 2026 by rpki-client