
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier: pHa/uIdZQED9umcpcx1L6awsgZQlMbYJFouKBZK6sBI=
Subject key identifier: 23:28:A7:23:81:41:F4:D0:A3:08:64:0F:62:F1:CF:1A:EF:1B:66:DD
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number: 01D6
Signing time: Wed 25 Mar 2026 02:53:41 +0000
Manifest this update: Wed 25 Mar 2026 02:53:41 +0000
Manifest next update: Wed 01 Apr 2026 02:53:41 +0000
Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: yhrGFm6ovBZLbnOZ5yuf2O/CCaTglZ1UDyd4bqZoY4M=)
2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: 19CRriFHUu9Og+pLKFNKi+nzmbjd/BqY5BWoDtCmKYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Validity
Not Before: Mar 25 02:53:41 2026 GMT
Not After : Apr 1 02:53:41 2026 GMT
Subject: CN=69c34e35-b783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:66:da:79:d5:09:98:d4:dd:88:9f:33:9f:
bd:c1:d0:25:b2:ba:39:10:ef:aa:3b:91:0c:30:98:
4c:c9:16:f1:db:9d:c8:ae:05:a4:e1:e9:84:b9:38:
69:de:ed:d8:75:49:41:bd:a2:2d:c3:74:52:7e:96:
b6:8a:ac:cc:0e:64:23:ae:26:28:cd:06:8c:e9:21:
12:42:3b:3d:6a:e6:d9:8a:33:2c:15:2c:45:40:38:
20:af:20:75:a8:3e:50:53:0d:0a:e7:86:1b:21:34:
a6:8c:9d:7b:ee:69:46:cb:2e:cf:63:c1:4f:3a:3a:
99:fe:d2:1f:19:fb:6c:ad:f5:20:78:81:f7:9f:84:
05:55:d3:9f:f6:d4:52:13:8d:fd:35:b1:26:e6:49:
a1:dd:65:88:d6:2b:ea:da:a8:9f:43:1b:62:1b:33:
33:6a:dc:6e:dd:3a:0d:49:69:51:50:a4:2d:26:24:
22:c9:3e:85:e9:35:e7:db:c4:d3:c3:06:6e:98:b2:
8e:ce:6f:1e:59:0f:a5:67:49:13:b6:49:08:06:e7:
94:70:b8:1d:81:e0:e8:1a:a6:b6:1a:11:20:b9:70:
af:18:f1:53:69:44:f4:50:b7:d4:17:d8:81:86:86:
73:d6:57:4a:de:2a:2d:ac:27:ab:de:7d:86:df:d7:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:A7:23:81:41:F4:D0:A3:08:64:0F:62:F1:CF:1A:EF:1B:66:DD
X509v3 Authority Key Identifier:
keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:79:3b:65:6e:ea:1f:d4:5f:74:77:31:7e:7d:d7:1f:ad:be:
38:af:58:b6:3e:e0:79:5a:2f:fc:bc:bf:bc:e7:2e:c0:f2:b0:
ad:06:90:87:39:02:61:83:44:b4:54:27:97:9f:e2:5e:db:05:
80:4a:12:90:72:47:1d:28:80:c8:63:9d:f5:bb:1d:88:b2:dc:
8d:56:4c:bf:ac:87:d6:6b:1e:0b:72:fb:21:ce:25:ee:3a:26:
24:3c:28:21:5e:ea:b1:94:8a:90:d3:93:62:18:f1:4c:f5:60:
56:23:38:95:c4:13:08:0f:e1:7d:d9:65:85:18:dd:45:26:e0:
e3:ff:4a:c2:43:96:f2:f5:53:96:df:72:15:a1:f6:34:8f:e5:
86:07:de:1e:dc:fe:ec:17:7d:86:83:66:0d:7b:ba:45:b6:13:
f4:d5:29:f2:5d:44:34:96:a6:26:c7:59:db:8b:26:32:33:43:
08:77:3d:2a:b5:48:a8:af:a4:2b:b0:1e:58:73:a8:47:83:e2:
bb:4a:63:3c:e0:c9:d9:4b:42:d5:36:fd:46:f4:2b:44:f7:74:
72:e8:76:6f:4f:cc:84:35:0d:8a:66:54:77:3f:8c:96:42:43:
fd:50:c1:16:1b:ec:79:51:7e:0e:07:53:78:8b:f5:50:89:5f:
9e:72:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:44 2026 by rpki-client