
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier: 4Zobo6iq9qM8WsysGJH2uZMj/gRqUx8hdD6zA31nVh8=
Subject key identifier: E0:A0:46:D2:25:78:7C:CC:F1:53:16:6D:A8:5D:87:CB:3E:D1:1B:F1
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial: 09E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number: 09D2
Signing time: Wed 22 Jul 2026 20:20:48 +0000
Manifest this update: Wed 22 Jul 2026 20:20:48 +0000
Manifest next update: Wed 29 Jul 2026 20:20:48 +0000
Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: mPaFmXSKX/cHEtACFfxlunHqLm6DDr30yZfTexogmW4=)
2: 900E2272349F11EDA1460419C4F9AE02.roa (hash: H91fXqxV7rY9zHcxYCuUe8A5mKb0ae920Vx4iWfH6XE=)
3: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Hj2gvQPptbIyBsk+GZQr8HEa82gNIwoOpKASxetT7F4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Validity
Not Before: Jul 22 20:20:48 2026 GMT
Not After : Jul 29 20:20:48 2026 GMT
Subject: CN=6a612620-286c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:76:6c:b9:ac:b7:2b:85:82:a3:26:08:60:
66:5f:2b:4f:c2:86:5c:58:ca:a3:c2:a7:37:e4:2d:
a7:ec:0a:bb:29:6f:1d:fd:c7:35:02:13:8f:55:9c:
26:de:9a:6d:37:69:85:65:cd:a2:5d:ef:a7:ba:72:
a4:db:07:41:b3:66:e5:07:00:d3:e9:b4:00:35:43:
b2:a9:97:5f:67:6c:b3:ba:63:d5:50:6a:78:dc:24:
7b:b6:d9:0d:6b:02:79:13:c9:51:d3:ff:41:ed:05:
be:8a:77:1d:dc:38:fa:66:6c:28:40:64:f6:56:46:
2a:e6:b7:99:27:e8:4e:f2:e3:86:a5:fd:46:a1:ac:
e0:af:b0:9f:f3:78:de:0d:d4:e6:af:13:9c:bd:a3:
d6:bb:f0:26:e2:7e:bc:58:3a:1b:02:45:23:0b:0d:
8d:7b:fd:df:d8:9c:34:29:7a:bc:f0:2c:c8:dd:40:
5b:32:88:5c:f2:f5:b8:63:00:cb:45:ed:ea:cc:7a:
6e:e7:4d:8a:33:de:1d:c3:c7:3a:42:5f:c3:1c:16:
86:8f:a7:8c:3c:61:2a:89:00:ad:9b:15:e4:23:85:
50:bd:f6:00:db:c6:54:5d:af:69:21:e3:ed:a2:03:
37:52:d2:16:1b:ac:17:a1:3f:37:5a:e3:aa:77:42:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A0:46:D2:25:78:7C:CC:F1:53:16:6D:A8:5D:87:CB:3E:D1:1B:F1
X509v3 Authority Key Identifier:
keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3d:71:45:41:49:f6:89:4f:da:f2:52:bd:50:11:db:b6:15:
3a:3f:67:8c:01:86:be:15:9d:b8:3f:27:b6:47:7e:36:5e:a1:
4b:52:38:3b:09:54:91:d5:02:da:21:e5:b5:cf:88:17:25:95:
87:48:d3:eb:09:1e:61:48:99:19:5a:3a:d9:e0:f5:c6:44:aa:
d1:da:8e:83:b1:f4:d8:61:fe:cd:02:c9:ba:4e:7a:2b:ee:bc:
24:25:e4:5f:01:c8:b3:68:6a:a8:ef:69:ea:f6:a5:4e:b7:b2:
f7:ad:09:41:a7:59:d0:c2:b8:e1:bd:5b:38:33:a5:1d:89:17:
89:5f:f2:6d:5c:76:04:02:db:69:8a:7e:74:2b:6c:78:e0:b9:
7a:98:5d:f6:46:63:f5:cf:b7:1e:cd:e3:53:29:51:da:41:a0:
7b:76:68:5b:25:80:5f:d6:57:47:e5:6b:c1:fd:ab:02:c9:dd:
c6:5e:9c:2f:44:45:7b:1a:74:cf:f5:a4:73:0a:15:24:bc:ce:
5c:de:3d:db:19:91:8a:05:15:b8:cd:bc:b0:5b:f4:6b:e3:8e:
99:52:9d:59:df:c5:ea:12:7f:fe:2d:31:08:e0:fe:ea:aa:02:
4d:38:a8:2c:4d:a8:cc:47:53:c4:ea:aa:4e:04:87:1f:81:27:
ab:55:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:59 2026 by rpki-client