
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json)
Hash identifier: tfPWBABYnD54+QdhqEojNLZUl38j7/X/3J4dlhZQL0Y=
Subject key identifier: 55:AF:00:22:93:BA:94:CE:8C:F6:20:38:2B:88:BB:A7:99:D2:F2:1E
Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Certificate serial: 0520
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
Manifest number: 0518
Signing time: Tue 22 Sep 2026 23:16:40 +0000
Manifest this update: Tue 22 Sep 2026 23:16:40 +0000
Manifest next update: Tue 29 Sep 2026 23:16:40 +0000
Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: Lf+mdp3BRJZUFKeuBhpOfSQQ9izihAT/v+T+NT5HQN4=)
2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: 7dmcjwf3qKkvWDXhJJ0yFS4Iw9ffbjP8rVUkXu2XNOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Validity
Not Before: Sep 22 23:16:40 2026 GMT
Not After : Sep 29 23:16:40 2026 GMT
Subject: CN=6ab30c58-b8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:a1:bc:15:30:d8:29:cb:ba:52:0d:4d:13:
8e:93:1a:52:33:82:58:c7:96:20:23:96:06:51:2a:
6f:2d:0c:91:5c:f3:d6:01:c1:6b:33:3e:2d:16:2a:
51:2d:6e:f8:53:bd:aa:07:e7:9a:1b:fd:02:e5:9b:
6c:f7:64:9e:c8:da:a8:81:a5:81:5b:31:71:7b:0b:
4d:a2:ad:77:e1:20:f2:b6:cb:e7:2b:64:3b:9c:68:
a9:df:86:aa:eb:de:d7:67:8f:8e:0d:b7:3a:2b:cc:
37:74:8c:b0:b2:13:0a:07:82:b8:f0:ae:bd:78:b7:
a0:6e:a4:dc:54:ea:8a:da:c4:57:7a:e1:b4:7b:1e:
46:9f:4a:b5:f6:47:91:33:cd:ab:21:64:76:d4:7f:
ed:2f:ea:20:73:23:a4:ec:0a:1c:08:c0:bc:eb:23:
33:51:9d:4b:86:59:fc:68:a5:11:3c:5e:d1:be:f4:
a4:ad:f9:14:5a:be:3f:a7:29:cf:59:e2:bb:2c:b7:
f1:54:09:cd:9b:23:95:5d:47:84:af:c9:0a:71:05:
c0:7a:9c:d7:dd:95:81:8f:e2:dc:78:33:38:96:4f:
9f:f8:79:4c:e2:b6:03:a1:ee:74:b2:42:25:fa:ed:
cd:bb:a2:83:89:c3:2b:da:dc:6c:4a:35:72:83:5e:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:00:22:93:BA:94:CE:8C:F6:20:38:2B:88:BB:A7:99:D2:F2:1E
X509v3 Authority Key Identifier:
keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:c7:f0:73:95:83:0e:41:3c:00:19:a4:4c:6e:40:65:79:
af:07:6d:ed:27:46:6b:30:0a:7a:2d:99:cf:b7:58:19:2c:57:
8c:60:be:b1:c9:0c:54:a8:86:93:71:f1:ea:e5:57:f6:87:90:
83:98:ac:7d:25:61:6e:01:cb:1f:10:0d:e8:fe:4f:92:56:ee:
ed:2d:28:31:fb:6b:23:a8:60:a7:d3:a1:cb:5a:c3:c0:7f:b4:
bd:2b:dc:3a:b1:9a:01:78:c6:2d:dc:6d:1c:37:63:fb:1f:01:
f9:11:4e:6b:8d:02:48:51:b6:e9:34:2d:77:08:66:59:93:eb:
b7:15:1b:9e:90:db:fa:79:db:d8:d0:35:8e:d3:5d:ae:80:1c:
d2:70:3b:be:fb:a3:45:8a:8d:4b:e1:65:b3:60:5d:2c:c9:1c:
24:3c:5b:48:d2:07:37:1a:d3:c7:8c:53:c9:6e:b9:07:e4:ba:
2b:1e:c9:c6:f2:6f:3f:91:17:33:08:47:c9:3f:7d:6f:e6:e8:
81:5d:89:e8:ec:80:38:1f:c5:46:6f:5f:63:5d:b4:90:87:d0:
ec:09:91:29:54:21:71:86:f5:6f:54:32:f2:1c:36:b2:ed:d9:
eb:b8:b8:f5:c1:68:e6:1f:f7:13:31:34:81:5c:53:49:36:9c:
f7:86:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:08:00 2026 by rpki-client