
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier: L4a92GWAvoHJhrS0Y8NQ48klwSYmovfO8sXTxF8gRBU=
Subject key identifier: 2B:F2:67:0D:39:F4:3D:4B:8C:92:8D:93:24:4F:EF:A0:F7:54:48:B7
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number: 0237
Signing time: Mon 21 Sep 2026 02:38:58 +0000
Manifest this update: Mon 21 Sep 2026 02:38:57 +0000
Manifest next update: Mon 28 Sep 2026 02:38:57 +0000
Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: 8O4hHFyleNkcCQ4trL0Whu+qfzGctz8MB48KKyzKrCg=)
2: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 1RzsjB3B/c1zgVm8/5Sg1Xe89XFvfc6vQnq4tvEitnY=)
3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 8JV502SLk8QbZyaGCPLTxSnSD1WOF++tIWExjZSLMdQ=)
4: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: Pt4/aeZJmmxaKw58FeByKfcr60LvOJZSjrmtvVkGyg8=)
5: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU=)
6: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: 6VryhfiIF2VBEa3XnAENzfKNyDYTfUs9xynBu6kvnA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Validity
Not Before: Sep 21 02:38:57 2026 GMT
Not After : Sep 28 02:38:57 2026 GMT
Subject: CN=6ab098c2-5645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:de:9c:32:dd:1f:51:ad:bd:1f:ae:f1:c2:
c6:5e:38:9f:48:01:25:89:c4:05:a9:13:12:5b:ba:
44:09:5d:cb:45:f3:ca:4e:9f:ee:25:59:f8:04:f5:
c3:d3:ae:61:03:63:e6:19:7f:4e:35:30:33:71:92:
35:37:7f:89:8f:a0:43:04:fd:3b:4a:15:d1:9c:bb:
b3:9f:87:36:b4:34:a2:c4:19:3b:14:c4:cc:ae:f8:
d9:57:5a:1a:da:04:bd:cb:a8:46:72:be:1d:2b:50:
c9:ac:88:a1:c3:5c:17:a0:ef:6c:e3:d6:d1:b9:57:
8e:34:33:6b:0a:8c:cf:c6:ce:52:fd:22:65:c5:4a:
ad:a7:47:54:21:d1:4f:72:6f:b9:7e:35:e9:91:fe:
29:c7:c0:a2:1f:ff:2d:40:3a:3b:de:52:86:01:33:
ff:76:c8:77:c7:f7:75:61:27:ef:98:44:ea:86:a6:
20:6a:ad:26:ab:fd:6a:63:af:1a:93:55:61:60:89:
b0:83:03:40:a0:0a:df:f8:f9:d2:03:d8:03:8f:a0:
a4:ea:39:83:0d:3f:23:93:d4:f3:c7:b2:e6:fe:a9:
ba:25:c6:30:9d:99:2e:f4:9f:6e:36:80:6a:68:14:
cf:f1:f1:f3:f1:55:88:a9:a7:02:e6:5d:db:5b:00:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F2:67:0D:39:F4:3D:4B:8C:92:8D:93:24:4F:EF:A0:F7:54:48:B7
X509v3 Authority Key Identifier:
keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:df:82:e9:33:ad:31:94:1d:c3:1b:94:21:52:fc:46:ce:eb:
3c:a0:3a:6d:92:39:86:b6:97:d5:af:46:bd:ce:e8:0f:b9:9d:
8f:8f:d4:c4:1c:e0:05:da:50:45:13:4a:89:bc:bb:e8:1d:35:
6d:2e:dc:98:9d:30:fe:1c:df:3d:da:f8:5e:ff:01:c2:13:12:
3b:52:b3:cf:cd:38:6e:52:d9:f2:89:93:78:c9:1a:07:b9:7d:
1f:b6:54:a1:39:14:50:1e:9c:36:d1:89:da:a8:84:ae:7c:4e:
e7:47:1f:e4:3e:24:03:d9:83:f4:e0:c8:d3:2a:c1:0a:22:68:
f0:f5:01:1a:9e:86:83:06:dc:77:5b:4f:be:55:7d:bc:86:13:
34:22:d3:fb:e8:e8:c9:3a:3d:f6:71:69:0f:af:6b:cf:fa:c1:
6d:c2:a1:48:42:2c:9d:84:d0:4b:f2:40:67:0c:f3:19:91:12:
c3:2c:38:d5:9f:3b:37:20:bc:23:ef:98:5b:e5:58:51:7b:bb:
27:ea:c4:66:e2:6b:3f:20:d8:42:6e:4c:dc:f9:3c:f8:71:3f:
b1:9f:66:94:86:25:a3:66:7f:76:78:dc:05:0c:59:91:bd:de:
e4:2d:c3:07:b9:b8:6c:f4:c7:1a:74:4c:f3:14:d6:89:05:f0:
79:51:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:20 2026 by rpki-client