
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json)
Hash identifier: +HuxxyXVGT3N2alLpJdA9Of94PmgNtJtDnxRnHJDfk4=
Subject key identifier: DB:DE:A0:52:B5:34:CE:42:BE:1B:F6:78:3A:49:0F:11:20:BC:F7:2F
Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45
Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
Manifest number: 0148
Signing time: Mon 21 Sep 2026 05:21:51 +0000
Manifest this update: Mon 21 Sep 2026 05:21:51 +0000
Manifest next update: Mon 28 Sep 2026 05:21:51 +0000
Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: P5GDrospYErf015fisCVA4Lb34SgYZCrRenalvNLYYw=)
2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: QYBewwq2Jnoq3XiFtkZ6uq7GsNeS7PlzqiYcUXNMoXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
Validity
Not Before: Sep 21 05:21:51 2026 GMT
Not After : Sep 28 05:21:51 2026 GMT
Subject: CN=6ab0beef-d623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:0b:63:80:f8:2a:18:0a:00:81:8b:e0:39:
b9:e6:62:d8:73:fc:d0:e7:56:d2:57:fc:9a:81:1a:
70:b9:c3:f7:f2:88:b9:62:d4:ee:96:20:cf:79:72:
f2:9b:fe:4d:55:bb:09:11:ea:43:bd:27:5b:0c:b8:
e4:0e:b4:42:9b:9b:97:a5:fc:ad:b0:36:03:96:d8:
25:ec:9b:c1:44:8d:4f:f4:df:f0:2d:c2:e1:1a:0e:
2e:e6:64:ac:0f:db:11:97:4d:8d:d3:de:c6:d5:ef:
78:6b:80:c1:52:72:29:56:41:10:af:24:57:cb:c5:
15:c1:9c:6d:0b:44:94:0d:7d:b9:10:54:07:74:a1:
c6:51:c7:6c:40:fc:8a:6a:42:9a:eb:7e:8f:41:9f:
65:f3:94:a6:77:5a:92:5f:57:c8:41:14:31:51:ae:
98:5d:ab:4d:6d:91:e3:64:0f:12:c0:2b:61:49:4a:
2e:08:c2:27:12:44:bd:8c:39:2c:ed:9f:9b:57:a1:
0a:af:9a:f5:71:2d:30:ce:c4:ff:59:13:47:90:f9:
7c:f0:73:49:d8:47:85:d0:d8:54:37:c8:a4:73:0f:
74:3a:73:dc:f6:16:6e:da:a7:7e:cb:ed:4c:4c:cc:
fe:83:fb:5a:ef:dc:fd:4b:c7:0e:50:d2:76:71:72:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:A0:52:B5:34:CE:42:BE:1B:F6:78:3A:49:0F:11:20:BC:F7:2F
X509v3 Authority Key Identifier:
keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a9:68:eb:20:77:58:2f:ad:48:09:fc:cf:ca:d1:03:e0:b8:
18:75:69:4a:e5:2f:79:1e:7a:33:fd:12:f9:fe:d3:d2:e9:49:
f4:a8:46:b6:ab:0b:47:dd:51:5e:f4:d0:e7:22:28:46:cb:17:
28:53:93:b7:d7:a4:63:47:49:88:f6:34:e1:fd:94:d1:4b:e1:
31:fa:73:55:09:8f:73:61:91:e8:05:f6:af:7e:91:25:3b:75:
67:ad:e0:eb:d7:3e:78:53:9b:3e:22:cf:c5:76:e5:58:9e:4b:
c7:23:1a:d1:9e:9a:5b:5f:b2:64:5a:e9:e8:b5:78:b0:1a:0e:
47:e9:b3:80:39:fd:b1:d1:da:02:af:1b:b8:93:a8:b6:6c:8c:
bf:e9:a1:e0:50:8f:a2:d1:ba:64:bd:51:3b:de:33:92:0e:5f:
d0:7f:c3:0d:01:62:22:8b:fe:56:41:ad:3c:2e:70:ef:89:c5:
57:2e:78:63:0c:5f:5d:85:21:c5:e7:83:8b:07:ae:f2:c4:c1:
15:57:31:07:cf:43:b8:02:85:b8:22:8d:06:36:99:0c:59:46:
bc:cb:ab:d8:a0:a5:e9:17:4a:37:ad:fd:3e:8e:cb:f1:2a:36:
ea:aa:47:10:a9:fa:50:ec:1a:5a:28:5c:93:b4:7c:41:19:ae:
21:c3:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:11:40 2026 by rpki-client