
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json)
Hash identifier: 1Z+oQOXkad++JnSpzkpKUKe5VjN9sX21rJetAEVW4ng=
Subject key identifier: 4F:64:26:38:27:84:9B:58:C0:50:A3:40:F6:8C:01:F5:F9:FB:B4:A1
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial: 05AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
Manifest number: 05A5
Signing time: Fri 18 Sep 2026 23:05:32 +0000
Manifest this update: Fri 18 Sep 2026 23:05:32 +0000
Manifest next update: Fri 25 Sep 2026 23:05:32 +0000
Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: VSNuqi34g8oa5P0D5ApxrdRmdUAZUCvSY64wy3C4vXU=)
2: FA73196C6DE711F1AA720C725CA30FBC.roa (hash: pCO2JAGPlXln8a9u0qBW16Bj24ZR218132+aPis8m+k=)
3: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: I6IT2owDLfV5TvMKrbrd8HwemeT+BKI0jfx24fbp7QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1455 (0x5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Validity
Not Before: Sep 18 23:05:32 2026 GMT
Not After : Sep 25 23:05:32 2026 GMT
Subject: CN=6aadc3bc-89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:3b:4c:91:d8:ba:0b:b2:82:32:a0:96:20:
67:9a:da:fa:e8:a2:ef:7e:d8:53:98:4c:be:13:eb:
c2:13:74:c9:1e:27:f0:15:de:e7:7a:88:0d:33:70:
03:c5:16:5b:3d:1b:1c:2e:3b:2e:f3:17:06:0e:49:
13:2a:a9:76:bc:df:60:11:67:3b:fc:4b:1b:0a:d7:
65:0e:57:30:b3:dc:7f:70:f9:b9:2f:df:9a:19:4d:
00:35:ac:57:cc:e5:3a:8c:20:3b:c0:96:19:2b:50:
ec:fc:a5:ac:c4:00:b0:ac:3a:4f:62:75:4d:47:6c:
17:0b:d5:e7:f4:73:32:94:51:ca:d8:0c:99:19:df:
c6:d6:58:1b:ca:00:a3:2c:ed:ee:e3:b5:0a:5b:5d:
6d:29:a2:97:ea:54:c9:3e:db:ff:e4:54:81:16:38:
7d:be:09:60:cc:cd:3c:5c:2d:21:32:ce:c6:1a:a5:
e6:3e:58:f3:0c:67:0c:7b:2d:ce:24:b0:0b:dd:ee:
2b:3c:9c:90:96:5a:c4:37:19:6d:56:6a:a6:28:e7:
56:83:df:97:a2:82:88:6d:c6:d5:ac:6f:86:aa:4a:
88:eb:08:27:a4:06:40:4e:4a:61:e8:1f:9b:0d:cd:
36:cf:21:c3:dd:1a:4d:e8:1e:34:7c:0e:ad:21:fe:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:64:26:38:27:84:9B:58:C0:50:A3:40:F6:8C:01:F5:F9:FB:B4:A1
X509v3 Authority Key Identifier:
keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:86:41:f3:2f:3d:aa:3d:c4:92:6a:e1:dc:06:10:23:5e:ac:
f6:67:b6:86:65:5b:5b:47:22:a1:0b:b4:0d:91:16:20:02:53:
bc:a5:a1:dc:34:84:81:67:9d:ca:72:b2:0e:13:87:10:d4:f8:
67:26:99:1e:0e:2d:9a:c9:16:96:f1:bb:d9:c3:ec:cd:a1:6a:
67:7f:41:06:eb:48:f9:54:5c:fe:d8:b9:7f:f8:9a:91:59:49:
48:0d:1c:2e:81:9f:49:b4:de:3b:7a:cc:ca:7f:f0:b3:18:4e:
d3:59:a3:e6:6f:f4:1e:0b:ea:ab:e0:cd:2a:43:92:29:43:e3:
6c:60:c2:c9:d2:bf:38:7c:ac:c7:cb:a3:10:bc:f5:f0:b0:59:
70:87:eb:5a:dd:e2:16:0b:3c:88:00:e9:7a:63:57:74:4d:b8:
b6:1e:b2:51:c9:a4:6e:e7:1c:78:42:97:fb:29:11:89:4f:71:
50:a2:ca:de:d5:51:af:92:f7:a8:07:b7:ba:a9:a3:03:7b:ef:
dd:5b:42:dd:73:99:9a:7e:ac:c1:f5:bb:85:59:06:26:37:fa:
bb:38:39:bc:1d:f3:88:65:8e:3b:01:5d:cc:9f:51:d7:9e:30:
68:d1:fd:e8:a6:8c:2a:87:70:7f:45:e3:ea:2e:82:91:3d:e1:
43:ca:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:16:40 2026 by rpki-client