
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier: 35q3i1zv9MhSifuSxSpl3TgVN1TGbfd2ehiAAJiKT2Y=
Subject key identifier: F8:2C:4C:A7:4E:F9:EC:D8:B5:06:7B:98:D1:9E:68:EB:AD:20:57:44
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number: 0168
Signing time: Fri 25 Sep 2026 03:39:25 +0000
Manifest this update: Fri 25 Sep 2026 03:39:25 +0000
Manifest next update: Fri 02 Oct 2026 03:39:25 +0000
Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: R+PcGyAoT5Fu6hWeiiXCGEXtlckxr2amiwTUVJc4so0=)
2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Validity
Not Before: Sep 25 03:39:25 2026 GMT
Not After : Oct 2 03:39:25 2026 GMT
Subject: CN=6ab5eced-dcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:3e:1b:d1:b1:cb:0c:c8:96:1f:47:bb:b6:
28:da:ef:50:92:10:6b:7e:6c:62:28:b7:c9:77:6f:
3e:7c:ec:66:7c:be:55:a1:1e:59:10:6a:b2:dd:e6:
78:7b:dd:01:45:56:52:9d:ec:a7:c5:8b:d0:57:80:
0c:21:f2:07:a6:a4:d7:ac:76:c9:a3:a9:c1:5f:4c:
a7:4f:ac:e1:f7:de:1a:ad:7d:2b:71:fe:ba:e4:72:
02:11:93:bc:17:9c:b5:ba:75:5f:80:e2:89:99:c7:
b8:de:89:e0:30:70:db:58:c4:12:0e:40:a7:ab:b5:
49:a1:a7:74:45:1c:2d:88:85:ca:8c:8e:4a:7b:92:
d3:8d:e9:a5:12:ee:31:8c:4a:2d:cb:66:5d:8c:71:
37:f5:bc:0d:b9:99:bc:fe:10:a8:f0:ae:ed:86:3d:
1f:04:9b:46:e2:75:5b:05:51:23:5d:6e:3d:51:8d:
c1:cc:35:83:44:8f:b6:85:a7:b4:ae:75:2e:c3:e9:
4c:44:3f:f2:54:b8:fc:f4:0a:de:70:f0:5e:ee:5c:
9b:9f:26:65:3e:41:3d:43:37:2c:79:92:51:1c:7a:
b0:1f:06:e7:c1:f0:a1:b2:f6:8d:bc:dd:56:2d:7d:
7c:61:c4:50:7e:80:32:23:60:dd:12:7f:58:f3:85:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2C:4C:A7:4E:F9:EC:D8:B5:06:7B:98:D1:9E:68:EB:AD:20:57:44
X509v3 Authority Key Identifier:
keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:b4:f5:b8:26:d3:5a:c9:fa:7f:ca:1f:07:bd:3d:56:3a:7e:
9e:43:c0:80:3e:8e:28:1e:a7:f4:11:36:47:da:4f:63:9f:a4:
5c:11:4d:26:4d:98:da:a0:07:fb:a3:97:83:91:85:e6:89:7e:
72:05:e7:d2:68:e2:a6:04:15:c2:f4:98:8c:d6:18:b6:ad:c8:
bb:8a:3c:13:54:be:03:fa:76:2d:77:f9:49:ee:ec:eb:8b:7e:
f7:a0:cd:04:2d:74:d8:25:f1:d7:33:ef:a2:6c:17:04:37:e6:
d0:52:1a:d0:73:a7:69:64:8d:48:e9:9f:91:50:ac:23:76:7b:
e8:1c:f3:60:e0:0f:73:91:43:02:aa:ea:21:01:34:14:a3:be:
8d:be:c5:5a:68:9e:18:90:51:0c:62:f4:86:58:64:36:54:3d:
6c:cc:53:7e:8b:f7:03:4a:89:70:31:61:c5:62:8b:75:a9:25:
a1:ac:a8:1d:da:db:35:4d:c7:52:68:1d:30:68:dc:ae:f7:df:
77:29:c7:34:70:62:e8:9c:1f:17:2c:ff:f7:f0:43:3d:7e:57:
aa:bd:a6:b9:b9:26:72:23:2e:fd:59:6a:6f:09:fb:ed:79:81:
13:12:c5:0f:52:bb:93:97:3c:ba:4a:10:7d:c2:a7:6f:61:36:
a4:66:63:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4RjMxMTAvBgNVBAUTKDMyQzAyMTMxMUI2MkZFNDUwMEJDOEU0RTBGNDg1MkM2
NEJDNURBQ0IwHhcNMjYwOTI1MDMzOTI1WhcNMjYxMDAyMDMzOTI1WjAYMRYwFAYD
VQQDEw02YWI1ZWNlZC1kY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyj0+G9GxywzIlh9Hu7Yo2u9QkhBrfmxiKLfJd28+fOxmfL5VoR5ZEGqy3eZ4
e90BRVZSneynxYvQV4AMIfIHpqTXrHbJo6nBX0ynT6zh994arX0rcf665HICEZO8
F5y1unVfgOKJmce43ongMHDbWMQSDkCnq7VJoad0RRwtiIXKjI5Ke5LTjemlEu4x
jEoty2ZdjHE39bwNuZm8/hCo8K7thj0fBJtG4nVbBVEjXW49UY3BzDWDRI+2hae0
rnUuw+lMRD/yVLj89ArecPBe7lybnyZlPkE9QzcseZJRHHqwHwbnwfChsvaNvN1W
LX18YcRQfoAyI2DdEn9Y84WuyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgsTKdO
+ezYtQZ7mNGeaOutIFdEMB8GA1UdIwQYMBaAFDLAITEbYv5FALyOTg9IUsZLxdrL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9DNTdGMjNBRTlC
MDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9rVUF2STVPRDBoU3hrdkYy
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDhGMy9DNTdGMjNBRTlCMDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9r
VUF2STVPRDBoU3hrdkYyc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASLT1uCbTWsn6f8ofB709Vjp+nkPAgD6OKB6n9BE2R9pPY5+kXBFNJk2Y2qAH
+6OXg5GF5ol+cgXn0mjipgQVwvSYjNYYtq3Iu4o8E1S+A/p2LXf5Se7s64t+96DN
BC102CXx1zPvomwXBDfm0FIa0HOnaWSNSOmfkVCsI3Z76BzzYOAPc5FDAqrqIQE0
FKO+jb7FWmieGJBRDGL0hlhkNlQ9bMxTfov3A0qJcDFhxWKLdakloayoHdrbNU3H
UmgdMGjcrvffdynHNHBi6JwfFyz/9/BDPX5Xqr2mubkmciMu/Vlqbwn77XmBExLF
D1K7k5c8ukoQfcKnb2E2pGZjFw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:26:32 2026 by rpki-client