
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier: ZmRQR663tbAPN5KeQd6kqMcnyyTYTuJYdshk1TlTSgY=
Subject key identifier: A9:D3:E9:54:6B:7B:15:62:48:20:D7:18:FC:5D:FF:02:4D:EC:EE:67
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial: 3611
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number: 35C7
Signing time: Mon 28 Sep 2026 14:41:12 +0000
Manifest this update: Mon 28 Sep 2026 14:41:12 +0000
Manifest next update: Mon 05 Oct 2026 14:41:12 +0000
Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: oppkI6DyFoqt68Ky854AY1xhB8LmUwwHiq3qZOInp1k=)
2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: GHAiy1U9rxwuTHVrOO4W5yr6dZrHk1J4DMJnsgMqY/I=)
3: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: Pbz8SUu4Fa6QitdUmbJG9+WkFTgMMNMW+GHyYn+iC2M=)
4: 31745126CD1811EC917CB819C4F9AE02.roa (hash: G8AuTu7DkmkKWVjhwU/vCSBI+wvMCkDDSTrsyLfGoH0=)
5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: yTJcTl5edJ4kNv98CPAK/m1H2g/dq/a73IywMpJw5X0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13841 (0x3611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Validity
Not Before: Sep 28 14:41:12 2026 GMT
Not After : Oct 5 14:41:12 2026 GMT
Subject: CN=6aba7c88-4994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:4f:cd:12:ec:17:02:cc:52:cc:db:49:50:
ce:aa:c0:39:85:fc:69:80:36:fc:93:21:a4:7e:9f:
17:99:cc:e2:ea:f9:35:89:41:2b:91:45:1e:a1:12:
ca:8a:26:7d:db:eb:e9:4f:2f:53:80:ba:0a:10:0b:
2a:76:02:a5:13:3b:31:fc:ed:4e:00:5b:13:2c:0b:
a3:1c:88:3e:d0:a5:cd:93:3e:71:82:25:60:4d:3f:
89:ac:40:76:14:d0:68:61:19:83:26:69:d3:55:60:
5d:9e:bb:e2:b2:0d:bc:4d:6c:ef:ec:88:a8:6d:d6:
60:3b:2e:3c:6e:a6:34:29:8b:77:f0:50:34:4b:1f:
13:4f:21:21:20:78:a6:66:3f:f0:55:0a:a2:b9:a2:
34:30:d7:41:a4:ad:c4:9b:33:36:ff:77:35:23:6a:
70:1a:0a:7e:49:1c:2f:c1:80:e1:93:ae:bd:7d:b9:
8e:27:60:12:2e:2f:7c:53:0a:2d:19:ee:70:5b:32:
a5:80:6c:d8:ec:c7:a8:b3:18:0a:a6:01:fa:cd:5f:
cf:33:fc:be:f8:49:34:3d:d4:0d:68:47:8c:30:0d:
f5:4a:f5:2e:36:88:e0:5f:15:f0:e1:77:63:dd:4e:
a8:c8:9d:d5:8e:9f:55:ce:13:3b:ac:7e:57:3e:d6:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D3:E9:54:6B:7B:15:62:48:20:D7:18:FC:5D:FF:02:4D:EC:EE:67
X509v3 Authority Key Identifier:
keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:09:5f:1c:15:5b:de:b4:45:26:a9:78:00:a7:db:f0:aa:99:
5c:d7:87:d4:2c:de:07:2f:ff:dc:62:e5:64:81:50:b4:f0:29:
84:77:fc:05:f5:ca:dc:b8:cb:03:03:59:f8:70:95:5e:fd:a1:
2f:62:e4:71:4f:c0:7f:93:3e:2e:81:45:68:68:86:2d:47:39:
0a:99:d0:12:68:c6:50:dc:46:99:2b:0a:73:b6:ce:a0:94:40:
01:a6:e4:f5:e9:93:a8:c0:29:cd:47:cb:1d:dd:98:91:87:6c:
0b:73:c7:2d:b6:cc:aa:fc:6b:38:f2:53:43:74:63:81:5e:46:
1f:cb:59:2c:0a:4b:21:b6:8c:ed:00:31:9a:7c:e2:7f:2e:9e:
b8:f8:e4:8e:a8:46:62:dc:3e:60:60:f3:cb:e5:d6:6b:e9:44:
4a:b2:d6:55:3c:8f:c1:cf:80:75:d6:8d:41:62:9d:01:3b:34:
30:35:58:7e:6d:b4:1e:57:54:2c:e6:c3:24:c4:2f:df:bb:72:
2c:f8:81:cc:f6:3e:0c:5a:7a:e2:b3:f9:00:a7:a2:28:39:a8:
b7:79:ef:9b:55:de:f4:8f:f1:79:fe:01:29:70:3d:5d:09:b4:
05:43:37:f4:8d:85:ea:93:45:8d:de:46:1f:f4:33:5e:50:1f:
7a:f2:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:55:27 2026 by rpki-client