
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier: WjoPpKv9DakRCTqisd77d+/YEPIJKOITBU+7DzoHEUE=
Subject key identifier: 4D:75:7B:86:68:E0:65:9F:E8:73:4E:EA:69:57:B5:D0:1E:D0:74:D0
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial: 0993
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number: 0985
Signing time: Sat 28 Feb 2026 20:21:31 +0000
Manifest this update: Sat 28 Feb 2026 20:21:31 +0000
Manifest next update: Sat 07 Mar 2026 20:21:31 +0000
Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: sSMObVxIvK/sFsR1O430p6oTfKvcNn/eu+CS9jT5ab0=)
2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: OGDR7WY+8jRV/CmpiqK1tUUAkb5JwuvFd2VhraMYCs0=)
3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: +ITJTnPvYoAS79cIvUIh+D7rV0iw05gZdlP9LgmbBHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Validity
Not Before: Feb 28 20:21:31 2026 GMT
Not After : Mar 7 20:21:31 2026 GMT
Subject: CN=69a34e4b-bd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:ae:f1:d7:a9:a1:57:69:7a:cd:6a:aa:2f:
5e:4d:8d:46:fa:28:f2:b4:48:fb:db:85:e7:1f:68:
ea:25:0b:56:cd:50:f4:40:a6:98:cb:4f:16:38:c5:
78:1d:8a:bd:98:d8:5e:d5:dd:56:62:5f:0d:16:9e:
0f:f5:07:8e:3a:c5:0b:a4:0b:c6:2f:c2:88:67:a3:
b7:ae:e7:04:0f:ee:35:bd:59:12:2c:1c:03:88:97:
e1:44:92:79:e8:7d:cc:67:09:cf:f6:ba:fe:7a:b7:
2a:1e:51:98:3f:c5:b8:91:58:d3:fe:b1:3d:8a:1c:
4c:25:f6:74:b4:5c:fd:25:c2:b8:99:96:38:1e:0e:
35:67:00:59:54:a6:73:3f:d9:75:c0:73:e8:ce:b4:
fe:9b:2a:ac:85:fd:8c:ba:98:01:39:e2:a1:8d:de:
58:d4:7f:5a:9e:f8:3c:b0:fe:eb:1c:3a:f2:49:a5:
59:3a:a8:75:1c:ac:07:32:ae:27:37:99:bf:45:9b:
b9:58:91:d5:17:0e:37:91:00:2a:bc:d1:d1:7d:c4:
02:cf:68:76:08:c5:d3:e5:d2:1a:89:cf:42:f2:25:
09:d8:65:19:ea:fe:fc:52:67:40:8c:bb:5d:25:2c:
b1:f6:4f:3c:f5:0c:a8:ab:44:72:e5:77:99:5f:ea:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:75:7B:86:68:E0:65:9F:E8:73:4E:EA:69:57:B5:D0:1E:D0:74:D0
X509v3 Authority Key Identifier:
keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:c5:15:46:98:ab:ec:33:c5:62:02:76:d3:2c:34:4a:c5:
17:11:dc:7a:ab:1a:23:23:1e:6b:c2:65:e4:16:c6:94:2a:3f:
07:65:24:33:46:e8:e2:1a:88:e2:b5:c3:eb:f8:06:51:f1:9b:
2d:88:e6:7a:6b:d5:16:ef:e9:38:fe:2e:85:89:d0:c6:64:cb:
aa:bb:26:bc:99:73:d8:e9:f0:ae:d4:55:53:7f:e5:a8:82:d9:
15:b7:25:fe:0c:42:12:1f:65:6f:ff:69:61:f5:27:99:26:60:
fd:d2:cb:6a:db:03:3f:62:ab:bc:5f:20:f5:db:45:a6:f2:2a:
e6:9b:1f:72:82:47:f6:13:f9:95:28:f7:d4:16:6b:5b:00:15:
7c:f5:28:bb:37:c1:c6:7d:c0:ff:e1:02:37:f0:e7:c4:8c:bf:
67:49:d7:42:0c:eb:f8:dd:9a:3b:e4:f9:0f:23:ae:cb:d1:6c:
24:21:a3:57:75:05:82:66:f8:4e:08:3a:8d:ed:50:33:bf:93:
77:d0:cd:54:72:b3:23:ff:3a:dd:e1:92:4e:0f:51:e2:9f:ee:
a9:22:29:ae:98:ce:89:ae:67:33:46:54:d8:08:34:a0:4d:7d:
ba:85:9b:4f:09:74:57:b6:71:9b:e7:57:87:ed:1e:7c:38:40:
8a:89:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:38:58 2026 by rpki-client