
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier: PLUfXwdcfP6JFOPF0w4X6IOBFXh+XOJUMmc+ezQefzw=
Subject key identifier: D7:11:AE:16:73:E9:F6:93:6B:4B:1D:97:BE:C9:83:1D:73:57:86:E8
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial: 35EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number: 35A4
Signing time: Wed 22 Jul 2026 14:42:34 +0000
Manifest this update: Wed 22 Jul 2026 14:42:34 +0000
Manifest next update: Wed 29 Jul 2026 14:42:34 +0000
Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: vzjOlgfuqAfRjbPsjM0wE5rLpM3gZ4katTPPgw32tKY=)
2: 31745126CD1811EC917CB819C4F9AE02.roa (hash: G8AuTu7DkmkKWVjhwU/vCSBI+wvMCkDDSTrsyLfGoH0=)
3: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: yTJcTl5edJ4kNv98CPAK/m1H2g/dq/a73IywMpJw5X0=)
4: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: GHAiy1U9rxwuTHVrOO4W5yr6dZrHk1J4DMJnsgMqY/I=)
5: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: Pbz8SUu4Fa6QitdUmbJG9+WkFTgMMNMW+GHyYn+iC2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13806 (0x35ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Validity
Not Before: Jul 22 14:42:34 2026 GMT
Not After : Jul 29 14:42:34 2026 GMT
Subject: CN=6a60d6da-3642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:1d:fe:0b:2b:89:89:f1:84:a0:ec:3b:27:
28:cf:88:a3:dd:48:81:49:46:40:39:c5:71:90:c8:
f8:f8:c8:f2:c4:e9:54:8e:b8:12:73:33:a2:5c:2c:
1f:be:c2:f6:77:5f:c3:bd:a2:73:46:02:71:8b:d0:
56:f5:7e:7d:22:37:ab:3c:ba:cc:30:4b:80:79:1b:
a3:96:08:98:74:81:4e:34:91:ab:07:ff:aa:ab:4a:
a4:a4:4f:37:27:1e:06:8f:e4:14:4c:f1:b5:64:ca:
da:86:2f:32:09:c9:5a:ec:fd:61:29:e6:0e:2f:e5:
e8:dd:34:da:d3:1b:89:52:c1:d1:cb:28:b3:75:18:
0f:b9:0f:ef:4d:c7:90:20:c4:c7:ac:33:b9:0b:47:
7a:de:01:0a:9a:40:1d:4d:c0:d6:ac:23:58:69:73:
48:5b:a5:b7:fa:48:bd:32:43:cf:68:d7:5a:d4:e2:
f5:78:5a:ac:d0:d5:20:77:ac:4d:1c:bb:ad:26:fe:
5a:3a:6f:4c:c2:5c:f5:f7:33:cd:43:e7:c6:c0:16:
c6:77:86:17:2d:b5:a1:85:17:ea:d8:99:43:c9:cc:
56:5f:2d:b3:9c:3a:a9:10:32:d8:e2:c9:1a:55:5d:
cd:af:51:d4:d0:7c:c5:8e:82:12:38:ce:1f:02:60:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:AE:16:73:E9:F6:93:6B:4B:1D:97:BE:C9:83:1D:73:57:86:E8
X509v3 Authority Key Identifier:
keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:b2:4c:26:95:e1:54:18:d3:6b:8d:d2:2c:e7:a9:97:3e:dc:
a3:07:75:79:18:05:de:63:89:e8:a3:8b:01:47:c8:e1:74:8e:
85:55:3d:67:d3:00:79:1d:a1:7b:c4:da:38:a0:73:81:5c:b2:
91:54:a1:77:10:4d:3d:96:91:82:b0:fb:d3:1f:d0:2c:c2:6d:
e7:f5:b9:40:64:a4:db:b1:51:44:4c:42:e9:14:18:4e:71:92:
8f:c1:ee:e6:06:74:9a:0f:a5:bd:2f:b5:d2:b0:5e:c5:f2:81:
43:fb:fc:92:df:e0:7d:a9:84:d5:ff:cb:fe:da:00:cd:e5:3e:
14:54:de:40:fa:df:e9:1b:80:c3:27:1f:d8:2d:a2:c6:92:37:
75:fe:1e:a3:61:cb:4a:e6:88:0e:a3:7a:7a:d7:e5:c3:31:f7:
bf:02:26:52:07:ef:a0:1c:e7:59:73:33:5e:db:e6:18:9e:0e:
00:d2:64:df:df:96:0a:3d:8c:8c:c2:73:c7:6f:48:62:39:3e:
f1:c1:0e:0d:24:18:27:49:e3:bc:11:ce:fb:2b:9b:51:c7:63:
b3:51:7b:a5:6d:79:f6:23:3e:6a:a9:f1:05:fd:ec:b9:66:b2:
f3:9b:ae:3c:47:13:2b:e5:13:d3:1b:7d:aa:0a:b8:f1:85:8a:
cb:e5:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:15:26 2026 by rpki-client