
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
File: mvY3DDqaguLsqIJzqLjnngKCVPk.mft (raw, json)
Hash identifier: pdJN8pZRgzuv1vcUD72KLeHPLSbn8q6vKVXeAn6xaBM=
Subject key identifier: B2:77:1E:64:35:C6:9F:0D:60:7C:00:DB:1E:E5:98:4E:B1:CC:FB:6F
Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
Certificate issuer: /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
Manifest number: 28
Signing time: Mon 27 Jul 2026 11:11:56 +0000
Manifest this update: Mon 27 Jul 2026 11:11:55 +0000
Manifest next update: Mon 03 Aug 2026 11:11:55 +0000
Files and hashes: 1: mvY3DDqaguLsqIJzqLjnngKCVPk.crl (hash: welkzCx39IWTXdpuv2DqA8G/RQJw5r1vtKqTWSOGed0=)
2: 0642A9644FB211F18BDA0000A1833773.roa (hash: ba3MiHCQ/9RzbEMhAGdSRjmEpdohirZy6IJ6tNd/uKM=)
3: D8D132C452E111F18BE0BBBEAE833773.roa (hash: SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=)
4: HOBn4xDPKZiL8Isjj99ROKIwrsQ.asa (hash: zAFqND4LetLfBzzSmwzchzjXRNY+jMjvxeB5FZiT9ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Validity
Not Before: Jul 27 11:11:55 2026 GMT
Not After : Aug 3 11:11:55 2026 GMT
Subject: CN=6a673cfc-49b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:9b:59:01:29:52:f6:96:40:a1:ee:aa:0b:
cb:f4:00:e1:7e:24:24:61:e1:a3:de:5b:27:15:de:
e9:d9:a8:c7:4e:a8:ce:f0:f0:39:0c:51:03:6d:b5:
e6:0d:1c:2d:78:2e:71:1e:55:c2:57:26:d7:4d:be:
6d:20:2e:29:1b:e3:58:f0:5f:c1:89:3b:35:d5:3b:
55:19:ca:82:33:4f:d1:4b:3e:ac:e5:e2:8e:8f:dd:
47:58:9b:c5:82:00:f7:fc:80:43:c3:f9:e8:31:e0:
53:76:20:d4:86:d1:cd:70:15:23:08:fd:6f:7e:73:
56:92:d9:f8:8b:ca:79:42:84:fb:b6:70:c5:66:86:
b3:7f:c5:3c:be:fc:42:7c:1b:c2:06:83:78:84:80:
b6:49:f8:66:9d:8f:0f:16:c6:91:44:c5:2f:de:83:
b9:50:7d:e8:54:f8:18:9c:a4:0a:b4:67:8c:bb:19:
cf:bc:97:aa:63:f5:0c:84:4c:82:79:6c:f8:f0:e0:
35:ad:8a:46:72:55:dd:df:f1:ec:d3:46:99:85:66:
b0:ce:b2:44:2e:1f:81:2f:f9:1b:e7:da:a0:5c:e6:
4f:94:8b:c7:7d:87:7d:de:8a:05:ad:d5:6f:cb:d6:
0d:5a:84:0e:36:ee:28:96:21:d9:47:8e:34:59:88:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:1E:64:35:C6:9F:0D:60:7C:00:DB:1E:E5:98:4E:B1:CC:FB:6F
X509v3 Authority Key Identifier:
keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2a:94:61:96:1e:52:ea:bf:8a:68:c9:18:b9:7d:7d:c5:3b:
de:9c:9f:37:a1:23:58:fc:eb:cc:22:66:d0:7f:63:72:28:4b:
d8:ae:9b:68:52:cb:79:56:b1:cc:61:d6:ab:b0:49:fe:eb:2b:
2c:a0:84:56:14:4b:8c:76:56:7c:a3:f7:80:b8:0f:74:7c:77:
fe:18:09:74:e6:8f:8d:05:1d:0f:27:81:87:e2:1e:7e:e7:5f:
31:92:f5:df:ef:30:c7:72:92:c0:8f:1b:d5:47:1b:09:d8:2e:
3b:e5:3e:1a:9d:2f:2f:6f:e1:5d:53:19:3d:ed:af:17:5c:7e:
0a:c7:08:24:24:97:aa:03:40:d6:e8:fe:d1:b3:fd:1c:6b:5a:
d0:17:f0:f2:2e:8c:2c:15:22:09:5d:07:0d:21:01:f6:ed:d0:
4b:2d:95:2d:ef:89:d3:99:d5:c9:7b:38:a7:3e:fa:c4:6f:de:
45:05:ce:7b:dc:00:fd:7b:ce:cd:ab:58:50:66:18:7f:ff:c7:
7e:1e:b0:55:ad:e5:bb:fc:08:08:17:78:c7:d3:33:ed:36:b4:
b8:4f:92:c8:19:02:e3:cc:d7:0e:b4:4a:8a:8e:0f:3d:53:83:
c5:95:ad:86:9d:35:30:58:2a:17:0c:82:c3:dc:d5:82:16:7b:
aa:66:49:6b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NUMzNDExMC8GA1UEBRMoOUFGNjM3MEMzQTlBODJFMkVDQTg4MjczQThCOEU3OUUw
MjgyNTRGOTAeFw0yNjA3MjcxMTExNTVaFw0yNjA4MDMxMTExNTVaMBgxFjAUBgNV
BAMTDTZhNjczY2ZjLTQ5YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIGptZASlS9pZAoe6qC8v0AOF+JCRh4aPeWycV3unZqMdOqM7w8DkMUQNtteYN
HC14LnEeVcJXJtdNvm0gLikb41jwX8GJOzXVO1UZyoIzT9FLPqzl4o6P3UdYm8WC
APf8gEPD+egx4FN2INSG0c1wFSMI/W9+c1aS2fiLynlChPu2cMVmhrN/xTy+/EJ8
G8IGg3iEgLZJ+Gadjw8WxpFExS/eg7lQfehU+BicpAq0Z4y7Gc+8l6pj9QyETIJ5
bPjw4DWtikZyVd3f8ezTRpmFZrDOskQuH4Ev+Rvn2qBc5k+Ui8d9h33eigWt1W/L
1g1ahA427iiWIdlHjjRZiFtTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsnceZDXG
nw1gfADbHuWYTrHM+28wHwYDVR0jBBgwFoAUmvY3DDqaguLsqIJzqLjnngKCVPkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzJCMDE3MjVFNEZB
QzExRjE5MTY0MzI5NzlFODMzNzczL212WTNERHFhZ3VMc3FJSnpxTGpubmdLQ1ZQ
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbXZZM0REcWFndUxzcUlKenFMam5uZ0tDVlBrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
QzM0LzJCMDE3MjVFNEZBQzExRjE5MTY0MzI5NzlFODMzNzczL212WTNERHFhZ3VM
c3FJSnpxTGpubmdLQ1ZQay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDIKpRhlh5S6r+KaMkYuX19xTvenJ83oSNY/OvMImbQf2NyKEvYrptoUst5VrHM
YdarsEn+6yssoIRWFEuMdlZ8o/eAuA90fHf+GAl05o+NBR0PJ4GH4h5+518xkvXf
7zDHcpLAjxvVRxsJ2C475T4anS8vb+FdUxk97a8XXH4KxwgkJJeqA0DW6P7Rs/0c
a1rQF/DyLowsFSIJXQcNIQH27dBLLZUt74nTmdXJezinPvrEb95FBc573AD9e87N
q1hQZhh//8d+HrBVreW7/AgIF3jH0zPtNrS4T5LIGQLjzNcOtEqKjg89U4PFla2G
nTUwWCoXDILD3NWCFnuqZklr
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:48 2026 by rpki-client