
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File: MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier: cj6yR1gCeht6HHUm+O1AwFMVIB/eXy9ZUoM8mNb6WHU=
Subject key identifier: C1:52:BE:FC:96:3C:37:3A:4D:DC:76:88:C7:38:5E:93:52:26:B2:6F
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer: /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number: 0166
Signing time: Mon 21 Sep 2026 03:37:23 +0000
Manifest this update: Mon 21 Sep 2026 03:37:22 +0000
Manifest next update: Mon 28 Sep 2026 03:37:22 +0000
Files and hashes: 1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: yBRQlk1eOZW6tQvu3uKTHlUAy7aRa39fDQvi1qeIE28=)
2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: FNB/Vhah+1KKF+D8+8ZX+5xp4x5bxuKgnMy6uZOCSaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Validity
Not Before: Sep 21 03:37:22 2026 GMT
Not After : Sep 28 03:37:22 2026 GMT
Subject: CN=6ab0a673-6c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:be:d6:fc:1c:2c:62:f4:e3:e1:0a:15:3b:
ad:d7:17:74:ee:88:b9:11:2c:b9:53:a4:7e:5a:91:
2b:d7:17:8e:be:b6:be:66:24:00:9b:c0:06:4e:2e:
1a:54:0c:16:66:63:b3:41:c9:4f:1c:d1:47:9d:5c:
b4:83:ac:f4:ec:2d:4d:ce:be:c9:e1:80:5d:ef:4d:
81:c7:d8:94:bc:ef:f8:ec:80:af:5f:b9:4d:31:c8:
10:83:7a:50:74:fa:68:d7:dc:ea:88:aa:1e:c1:32:
e3:75:86:39:88:4e:19:b7:c5:02:91:df:3e:c7:1e:
67:65:a3:06:a4:51:fd:37:c5:6b:a2:bb:44:e2:77:
30:b9:bc:6a:a8:06:ee:b8:69:f3:59:f5:0c:05:49:
13:da:17:ad:28:0f:75:09:b0:9e:32:2c:42:c2:a0:
c3:2e:38:68:a8:49:3c:91:17:6c:42:b1:68:47:30:
17:de:96:6d:a7:3c:81:d3:14:7f:60:8a:d9:7e:3a:
53:c4:46:b1:b2:47:5c:f0:10:34:0c:84:fd:5f:b4:
60:f8:ac:72:3a:74:29:36:cb:64:cc:c9:dc:93:d8:
9e:99:db:8a:5a:b1:09:46:e5:de:e7:17:94:a5:bd:
63:b0:9d:2b:5b:ab:c4:0a:8b:1f:62:fc:c2:be:ae:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:BE:FC:96:3C:37:3A:4D:DC:76:88:C7:38:5E:93:52:26:B2:6F
X509v3 Authority Key Identifier:
keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:cb:1f:4a:84:bb:22:21:a0:78:bd:9d:ab:54:63:d1:98:42:
3e:12:9a:fc:f4:66:7c:0c:a1:4b:51:a2:dc:2c:62:b4:99:cc:
43:9e:c5:e1:b6:cd:a7:72:ba:65:9a:8b:4f:df:45:8c:03:21:
10:e8:7e:48:1a:0e:a2:64:0f:da:1d:e7:10:76:2f:15:64:6b:
82:aa:b9:0a:d5:63:25:60:54:24:49:ac:05:44:a8:a2:fb:ee:
cf:8f:74:45:6f:a6:27:7e:dd:be:65:d0:de:05:72:62:e4:ef:
1d:fa:f4:69:ba:5b:39:0c:31:f7:cd:bd:cf:a0:1d:b7:52:34:
06:f1:eb:af:4e:e5:e2:a4:13:0f:b7:05:2d:54:6a:06:6d:02:
22:4c:2c:57:42:10:45:1d:a1:01:c1:cc:55:bc:ff:be:72:51:
d2:eb:e5:9c:c4:34:84:f5:a8:ee:57:80:94:f1:5b:f5:59:84:
db:69:b1:22:bc:01:0e:93:7e:83:0c:f2:a3:53:a8:46:e7:23:
8b:c8:3e:cf:a8:57:03:a2:d2:7f:e6:f4:f3:d0:df:ce:ba:24:
89:0f:bc:43:34:29:1d:47:fb:b4:f7:ed:c0:5a:e2:00:61:d7:
8a:d7:87:4b:ce:7e:7d:5b:ac:2d:54:45:40:8e:5f:78:23:63:
db:8a:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:58:09 2026 by rpki-client