
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft
File: mazcDOVaSyEFtBOmoQ28JJggYPI.mft (raw, json)
Hash identifier: cIpKHq6xdorLmMy9t9LqjGso4X91C/bDmGY2UC/MT7g=
Subject key identifier: 57:E8:4B:8F:B1:D2:5E:3E:77:AC:94:42:CD:EA:77:59:3B:CE:B1:A4
Authority key identifier: 99:AC:DC:0C:E5:5A:4B:21:05:B4:13:A6:A1:0D:BC:24:98:20:60:F2
Certificate issuer: /CN=A9123194/serialNumber=99ACDC0CE55A4B2105B413A6A10DBC24982060F2
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft
Manifest number: 0A
Signing time: Sun 27 Sep 2026 09:51:50 +0000
Manifest this update: Sun 27 Sep 2026 09:51:50 +0000
Manifest next update: Sun 04 Oct 2026 09:51:50 +0000
Files and hashes: 1: mazcDOVaSyEFtBOmoQ28JJggYPI.crl (hash: 7IRKNATHGB4wdl8roouGtmvUFHkOtighUJHdhUoQncE=)
2: 1F518440B5DB11F189029FF54811F970.roa (hash: 7QspwJnTwPU8SYRoP8fOtF6hyWUPrM9LdiMlnY0MmsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.crl
rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123194, serialNumber=99ACDC0CE55A4B2105B413A6A10DBC24982060F2
Validity
Not Before: Sep 27 09:51:50 2026 GMT
Not After : Oct 4 09:51:50 2026 GMT
Subject: CN=6ab8e736-3889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:58:c9:29:bc:b6:56:fd:08:43:f0:a9:89:
e2:67:a3:7f:65:23:6e:d9:4d:57:c2:0c:30:36:fc:
6d:e1:a2:4c:85:a5:8a:47:e1:f9:0d:9b:ab:75:0d:
ee:0a:f5:34:c1:35:f9:b9:2e:f5:a6:6c:cd:61:d7:
c3:8b:1d:04:9b:e1:7b:36:4b:dc:aa:07:e4:64:7a:
98:b8:72:17:30:e3:79:1d:64:21:d9:c3:d5:40:55:
b9:9c:45:bc:c9:8f:65:69:24:18:9a:e6:27:dc:20:
da:d1:39:83:15:d7:8e:71:d6:7d:2a:e0:95:37:3f:
a5:28:36:38:1b:8f:7d:b8:1d:70:fa:ac:99:8b:59:
78:e4:55:14:75:d7:5f:36:e4:20:26:4a:49:dc:4f:
9a:b3:52:36:a5:67:ca:0f:5f:01:aa:f5:b0:4c:53:
7a:d3:0e:bc:5b:b9:ca:e1:31:91:77:e4:fa:67:80:
b1:f0:6e:74:44:96:d8:e6:6a:fa:d4:71:82:0c:b4:
d8:d0:80:26:93:cf:21:d7:a3:13:cf:28:04:3f:4f:
e5:a1:3c:b0:e6:04:0c:88:73:5d:d8:41:3f:0b:d0:
c9:38:6d:72:44:e0:6f:7b:3e:d4:0e:1b:9e:58:62:
dd:8b:0d:a6:7a:eb:67:29:3e:b5:a1:03:3b:1e:ef:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:4B:8F:B1:D2:5E:3E:77:AC:94:42:CD:EA:77:59:3B:CE:B1:A4
X509v3 Authority Key Identifier:
keyid:99:AC:DC:0C:E5:5A:4B:21:05:B4:13:A6:A1:0D:BC:24:98:20:60:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:84:ac:ca:5e:17:97:b1:32:f8:1c:ab:15:75:70:5e:f0:ea:
51:11:e0:a6:f0:19:f0:84:59:65:01:d1:6d:c6:ed:fa:1f:99:
07:74:55:84:ac:01:31:86:70:ae:cc:48:3f:3d:43:69:1b:0f:
c7:f8:c7:58:82:c3:93:ca:fe:74:be:33:6f:61:cf:af:6d:0c:
62:3b:bf:6e:09:71:c4:41:6c:9e:7a:2e:89:aa:1d:9b:a6:d7:
ae:92:ee:15:c1:d2:c3:e8:69:a4:7e:db:bd:e1:38:4f:ac:fd:
70:08:54:3f:ef:5b:67:e0:7d:38:ea:72:87:ab:82:74:48:56:
4b:03:67:b1:b1:2e:17:6f:71:b2:8b:c2:a9:f3:41:9a:b0:4b:
3a:10:6f:3d:ad:d8:08:aa:0b:9f:39:33:24:94:f7:aa:a2:e1:
f9:43:ec:ca:4a:d4:22:1b:f7:66:10:fb:3a:ae:7f:e3:6d:55:
48:e4:d4:92:16:bd:a0:74:c8:c8:7f:3a:ee:3a:c3:65:cd:1c:
07:4e:13:3f:e0:c6:6a:64:34:0e:fb:e4:27:60:6a:1e:74:51:
d4:dc:d3:b9:e9:6d:7a:fe:86:6c:37:af:16:0b:65:95:c8:aa:
4c:ac:22:f5:6e:5f:68:ef:3e:e2:fa:a6:22:c6:20:38:d1:d9:
85:0e:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:54:15 2026 by rpki-client