
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.mft
File: MpwAwXd-xVITo998OiXs0R8K0MU.mft (raw, json)
Hash identifier: YXb5PgTlNmDYtF+lsdxMEw5Zm9bGLa6fPNJvCCxhfoo=
Subject key identifier: FE:B3:F0:59:F2:2E:AD:17:D1:8C:38:4E:20:64:F3:45:68:19:77:5E
Authority key identifier: 32:9C:00:C1:77:7E:C5:52:13:A3:DF:7C:3A:25:EC:D1:1F:0A:D0:C5
Certificate issuer: /CN=A9172577/serialNumber=329C00C1777EC55213A3DF7C3A25ECD11F0AD0C5
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpwAwXd-xVITo998OiXs0R8K0MU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.mft
Manifest number: 13
Signing time: Sun 27 Sep 2026 09:40:49 +0000
Manifest this update: Sun 27 Sep 2026 09:40:48 +0000
Manifest next update: Sun 04 Oct 2026 09:40:48 +0000
Files and hashes: 1: MpwAwXd-xVITo998OiXs0R8K0MU.crl (hash: RRE6FNnZ8+8qHkBNrotyD/lCy1dEtp9BAhtSncdsCQ0=)
2: B5B5FDC0A13C11F1AF235BB64611F970.roa (hash: +Mzs6hlhgMNNsmeiZTxc9KH2oKf2PeDFQzRGMaXmJYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.crl
rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpwAwXd-xVITo998OiXs0R8K0MU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172577, serialNumber=329C00C1777EC55213A3DF7C3A25ECD11F0AD0C5
Validity
Not Before: Sep 27 09:40:48 2026 GMT
Not After : Oct 4 09:40:48 2026 GMT
Subject: CN=6ab8e4a1-a5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:a3:2d:7f:da:a3:29:de:c0:63:10:a3:49:
7d:e6:36:19:30:34:4e:82:a0:9e:dc:fe:a1:41:42:
6c:eb:77:d5:cb:7b:9a:f1:fe:c2:e2:cc:8b:49:90:
d3:7a:5c:99:6d:00:46:98:67:3f:4c:be:1f:35:17:
75:c5:a4:b0:d1:fd:dd:81:9f:56:b2:00:67:5c:4d:
fa:f3:f7:61:94:bd:cc:45:f8:96:7a:ab:77:67:d7:
44:b3:dc:42:8a:25:11:bb:42:64:a1:38:4d:4b:d7:
32:f9:4a:c4:75:cb:c7:4e:77:d1:d4:92:98:38:0a:
41:86:89:3b:52:da:73:f1:3b:ea:3a:f3:bb:9a:04:
81:4f:c2:6b:1a:73:9a:01:23:f6:67:78:9f:be:7f:
83:ea:df:03:e7:70:1b:fa:62:84:69:97:e7:fa:b8:
98:87:81:a8:01:89:2c:b3:b7:c6:b0:78:b0:e9:67:
11:23:cc:ea:eb:87:21:7e:50:45:3c:5a:0a:d0:6d:
d9:8d:2c:e6:41:08:bb:c0:06:04:87:1c:df:c6:6c:
ea:47:39:54:17:b2:e4:9d:d4:78:c7:05:07:78:11:
60:f4:4a:71:66:08:9d:a0:57:ab:99:cc:35:10:e7:
31:91:6b:4e:09:fb:dc:c2:a1:5f:8d:ef:fd:e0:a4:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B3:F0:59:F2:2E:AD:17:D1:8C:38:4E:20:64:F3:45:68:19:77:5E
X509v3 Authority Key Identifier:
keyid:32:9C:00:C1:77:7E:C5:52:13:A3:DF:7C:3A:25:EC:D1:1F:0A:D0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpwAwXd-xVITo998OiXs0R8K0MU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172577/3B102F28A13C11F19F0A47824611F970/MpwAwXd-xVITo998OiXs0R8K0MU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:bf:95:62:f8:ab:c0:77:fd:f6:5c:50:31:43:5f:99:6b:f2:
5b:22:17:be:3f:59:ff:98:8e:60:ae:6f:cb:6a:4e:ec:1e:cf:
99:39:b5:d0:53:cc:7b:83:03:75:cc:13:2a:a4:72:db:34:cf:
72:af:1d:06:2e:69:13:64:11:fb:ec:5d:64:e6:3c:0a:a7:fe:
90:40:30:4b:5e:4f:5e:6a:f5:d7:c5:80:14:5f:c7:9d:b5:b4:
77:35:de:88:de:2d:25:08:7d:6e:b5:c4:1e:d2:6f:63:5f:12:
72:0f:d8:29:86:d5:e5:02:60:58:57:69:cf:11:9d:f7:fb:4f:
2c:de:1c:27:ce:25:87:a3:cb:f3:f0:1a:66:eb:7f:ef:ad:59:
f6:69:a9:74:35:e5:1c:b6:8a:a5:ed:ed:37:8c:dd:5c:e5:62:
f7:9c:e5:3c:f8:9b:2a:2f:49:92:79:f8:5d:06:a4:e6:66:08:
7d:98:80:9b:9e:7e:b4:1a:6e:13:39:3c:78:d6:ac:1d:f9:68:
43:2b:89:8f:4b:a3:95:dd:dc:d0:71:e5:9f:38:4b:f6:54:4e:
32:ed:71:48:a6:a5:15:7d:4f:aa:c3:9c:ca:f8:60:c6:5d:8f:
cd:2f:a6:21:b6:96:58:a0:c7:7e:e9:59:b8:ac:3c:83:09:52:
70:41:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:31:39 2026 by rpki-client