
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json)
Hash identifier: zxDLJTWH7Hf2bsn3WjSZxJrILVBRt/JCG/0IqOCEBrI=
Subject key identifier: 36:BD:08:EC:FA:93:9A:3A:D4:4F:87:5F:67:A0:BD:BF:1B:13:E1:44
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial: 05B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
Manifest number: 05A8
Signing time: Thu 24 Sep 2026 23:02:43 +0000
Manifest this update: Thu 24 Sep 2026 23:02:42 +0000
Manifest next update: Thu 01 Oct 2026 23:02:42 +0000
Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: MNfK5DY5qLtkLwhvLS8sRl07sSOrUnZPe1QhGE+2NCI=)
2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: I6IT2owDLfV5TvMKrbrd8HwemeT+BKI0jfx24fbp7QE=)
3: FA73196C6DE711F1AA720C725CA30FBC.roa (hash: pCO2JAGPlXln8a9u0qBW16Bj24ZR218132+aPis8m+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Validity
Not Before: Sep 24 23:02:42 2026 GMT
Not After : Oct 1 23:02:42 2026 GMT
Subject: CN=6ab5ac12-eee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:54:e7:97:ea:32:ef:d2:04:61:64:0b:42:
3d:cb:63:ce:45:93:a0:ec:66:13:14:5c:7a:59:69:
3b:c6:9b:f1:25:d7:3c:1b:c2:11:cd:7a:31:23:af:
c8:fd:d2:d9:81:92:d4:a9:91:36:30:f6:92:ee:2a:
42:a5:a9:95:ca:11:ab:7d:0a:4d:10:5f:c9:41:69:
57:4d:7a:d2:2d:50:e7:31:5a:28:13:51:55:32:be:
b8:49:99:8b:f5:08:91:b3:80:38:0c:c7:b9:24:ba:
af:09:14:54:c6:11:63:a6:4c:9d:e3:a1:d9:8a:39:
1d:2a:ba:cc:15:02:48:3c:cf:b5:bd:65:f5:3c:b1:
6a:e2:20:ed:0c:9a:12:9c:41:7c:a3:aa:92:91:e9:
e3:42:71:af:95:08:c8:10:b5:0d:fa:a6:90:23:6a:
0c:f6:52:e9:7f:d3:9f:8c:c1:a5:f2:11:f8:3f:09:
02:bd:9d:24:13:86:08:8b:50:b0:38:4d:9a:39:46:
32:77:b2:aa:14:c0:3d:ac:af:dc:15:3e:75:16:8a:
ca:72:d6:99:51:7d:84:a6:c8:ea:3c:38:a7:8a:32:
a7:72:0d:e2:91:ae:9a:48:63:a7:8b:ae:1b:3b:26:
64:60:78:28:91:29:9a:f8:d9:f1:e1:dc:20:57:f7:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BD:08:EC:FA:93:9A:3A:D4:4F:87:5F:67:A0:BD:BF:1B:13:E1:44
X509v3 Authority Key Identifier:
keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:d5:56:06:6c:9f:d8:a7:48:ef:06:c1:e0:35:16:fc:d9:15:
d2:1f:58:56:17:6e:76:73:65:3c:ca:aa:0c:4d:f9:4e:45:f8:
1e:ef:7c:7c:bc:62:5b:1a:8a:77:00:42:1c:08:80:86:7f:c0:
b4:ce:eb:19:7d:c9:70:5c:de:b1:1f:d9:ff:53:1a:01:65:fb:
3a:4d:63:b8:c8:fd:e7:02:c2:43:17:30:c0:ec:2c:7c:70:2e:
01:97:39:e3:41:05:e4:e5:19:18:db:f6:5e:11:10:d1:cc:e9:
4e:5e:f2:97:99:f3:06:48:d4:12:e2:c4:84:b9:eb:1b:e4:01:
bb:97:f6:bc:54:2c:7f:92:b5:67:bc:fb:75:48:d7:6d:46:39:
51:24:9b:52:93:d9:15:0b:b5:eb:49:e8:07:08:e1:36:21:bc:
88:27:d7:5b:2f:31:d4:89:a9:88:2f:b0:52:8c:b9:77:fc:94:
ea:e9:87:17:a5:05:e4:ce:df:80:51:2e:ec:53:91:20:0f:b7:
f6:a3:b2:88:49:c4:e0:0a:ed:a7:93:c6:a7:6a:a8:4c:67:d0:
16:91:9a:f6:5e:b9:1f:ff:38:75:70:6d:98:c0:47:f2:e8:f4:
4f:04:fb:d6:fc:fe:03:ee:9d:20:f4:5e:f2:e6:44:8f:64:f1:
50:73:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:37:23 2026 by rpki-client