
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json)
Hash identifier: MGnlxgEmB2I2uvfVhx38FWmMuS2A+/XedNy16Y0vAfo=
Subject key identifier: 20:D2:4C:F5:AE:55:99:E2:FE:B6:6A:4D:65:42:42:4E:5A:67:A6:09
Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D
Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D
Certificate serial: 0572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
Manifest number: 056A
Signing time: Mon 27 Jul 2026 00:18:07 +0000
Manifest this update: Mon 27 Jul 2026 00:18:07 +0000
Manifest next update: Mon 03 Aug 2026 00:18:07 +0000
Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: b8AowXEP/KsSvifodUg1GFs6lnTjaGela7C/37p3DfA=)
2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: PEJr+Mm39qdGaPmAkNHpAbI5gf+Z7mrX4P7uIMXjoD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl
rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D
Validity
Not Before: Jul 27 00:18:07 2026 GMT
Not After : Aug 3 00:18:07 2026 GMT
Subject: CN=6a66a3bf-f498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:b7:1a:38:0b:9f:36:b1:bb:e3:af:8a:e8:
f5:99:07:eb:f6:2b:d7:b8:66:09:cc:4b:f3:39:4c:
29:6a:a6:99:96:16:a3:4b:a4:16:f2:24:77:1b:2c:
1b:b8:18:3e:50:23:48:79:b7:9a:53:4a:23:30:be:
51:3d:2a:4b:55:ce:91:aa:c2:1c:07:b0:0c:41:01:
46:ad:19:78:c9:36:30:e2:16:c8:ed:74:a6:33:bf:
b7:20:42:a5:93:b5:c5:23:87:c0:bd:9d:9a:8c:c4:
e5:54:6f:64:c1:b3:0f:c0:e3:6d:09:38:e3:3f:d8:
06:38:8f:3e:4c:a6:37:e3:64:36:9d:37:e4:b6:0f:
17:55:2e:00:5c:06:d6:b8:78:d9:05:5d:7a:22:55:
e1:77:d1:c5:28:10:22:39:61:65:d5:04:64:6f:b4:
d2:1f:84:51:21:6a:72:de:38:ea:dd:32:b8:15:f2:
d9:2e:76:f7:da:cf:fa:b3:87:0d:57:5b:43:d6:b0:
51:11:ea:d9:99:21:64:18:ba:b8:c8:8a:cc:b6:9c:
b7:fc:67:af:13:37:c7:38:b0:a7:66:ee:71:9b:9d:
fa:41:a0:f3:f2:c9:4e:e9:33:43:44:2e:86:ad:ed:
60:79:be:44:c4:01:5d:ef:de:42:8c:73:ef:55:1c:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:4C:F5:AE:55:99:E2:FE:B6:6A:4D:65:42:42:4E:5A:67:A6:09
X509v3 Authority Key Identifier:
keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:cf:e6:e8:a6:d5:d0:08:2e:30:05:31:63:b7:32:ce:6f:23:
71:c6:e7:d4:7f:1d:91:3f:46:b6:ed:75:70:63:1b:92:fd:2a:
4e:b4:6b:f4:82:5f:e0:f6:aa:7f:ed:11:7a:66:d9:c8:06:0e:
63:71:e5:f4:be:a2:1f:97:aa:de:48:8e:19:b4:fe:87:3f:ed:
e5:b5:b9:15:63:f5:28:f0:bc:f1:44:c7:13:47:5c:7d:99:bb:
79:2a:9b:1f:4c:7b:bd:23:57:5e:78:3c:2e:6b:04:9f:ba:32:
09:22:e8:bd:32:87:fc:d9:f4:e9:9d:d0:70:fa:8c:b3:39:20:
99:8f:b9:ec:cb:45:7e:c9:22:d8:5e:be:bb:3e:78:88:72:50:
90:f7:23:e0:cb:25:34:3d:dc:4a:2c:0d:bc:ac:a8:e6:8d:d6:
19:95:eb:f2:31:90:bf:85:82:cb:7f:a8:dc:4b:08:2b:ee:03:
64:aa:5d:b2:e2:6b:03:1b:09:d2:90:23:60:a3:37:6f:54:90:
92:85:50:e3:6b:bd:46:20:67:bb:0b:a6:86:a9:52:4a:6e:81:
04:81:b4:4c:ad:f9:58:94:aa:97:b4:5d:7a:66:cc:93:d8:eb:
81:0b:41:e5:42:ff:40:ae:48:c2:82:44:dd:c5:70:10:28:bf:
c0:86:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:12 2026 by rpki-client