
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json)
Hash identifier: kL4mvU1qchuqLAF6xlnJom9vpRR0Pk4oKiZ37KUCKPI=
Subject key identifier: 66:27:47:7F:E5:A4:3F:95:E3:70:CA:25:CD:33:33:B5:85:AA:C6:25
Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
Manifest number: 0238
Signing time: Fri 25 Sep 2026 02:41:06 +0000
Manifest this update: Fri 25 Sep 2026 02:41:06 +0000
Manifest next update: Fri 02 Oct 2026 02:41:06 +0000
Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: Y9vV1j74pZZa+MVsJeixPzZKmgCgj9cSmnXMFtykeNI=)
2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: F1vpQpUV3bw/FrQH9h0dEOMw7zfdTnJwa9DPHf/lxCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Validity
Not Before: Sep 25 02:41:06 2026 GMT
Not After : Oct 2 02:41:06 2026 GMT
Subject: CN=6ab5df42-842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:88:99:a5:cd:fc:71:6d:e3:c3:fc:09:37:
20:77:9f:9e:9b:e5:64:d7:dc:f6:97:a1:79:5a:da:
7a:0a:cf:77:95:ea:f2:79:25:af:04:e8:1c:26:57:
cc:71:3d:a1:5d:0a:1d:b1:1d:4c:51:ab:6b:0b:b4:
6e:73:d9:0e:59:3f:34:7e:23:fd:6b:60:4e:a3:c0:
93:93:be:49:62:2a:16:57:db:40:c3:b3:e3:1c:e1:
0e:07:fa:75:ae:dc:2d:02:3a:5c:47:9b:e7:3a:30:
4f:23:b3:b4:e3:2b:e4:f0:5c:c9:be:53:34:99:a2:
22:65:60:bd:44:62:11:32:02:64:10:89:ad:5e:9a:
58:95:22:23:b5:01:32:65:52:66:d0:3c:d8:e0:d6:
6e:e2:20:b9:80:fa:3a:9b:86:73:da:3b:23:4f:60:
b4:70:21:92:d0:f2:df:be:6c:76:ed:f3:35:8f:85:
ba:c0:41:47:88:86:a0:5e:e2:e1:1a:b1:7b:52:fc:
7d:cb:2e:7c:67:f6:29:f7:98:3c:15:cd:57:d7:1d:
65:21:0a:01:28:64:8d:1b:75:78:c2:02:7c:22:da:
61:86:c0:44:a0:e8:43:38:89:01:b2:24:5c:5f:98:
74:29:2f:3a:c6:22:50:3b:e6:2a:ae:d9:34:92:7a:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:47:7F:E5:A4:3F:95:E3:70:CA:25:CD:33:33:B5:85:AA:C6:25
X509v3 Authority Key Identifier:
keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0c:44:3d:09:94:e7:5a:f6:07:dd:98:0a:9c:56:33:fa:74:
00:27:02:75:fe:54:3c:f8:5d:2e:13:e5:95:15:18:d4:a6:3c:
a6:9e:45:bb:ec:a1:58:82:b3:52:52:a6:a0:a2:15:ba:8a:0c:
b2:be:99:ec:04:ca:38:0c:e0:3d:d0:20:e0:db:15:79:77:bb:
ab:e3:3e:89:2c:a1:86:a4:d4:5f:51:c5:df:70:45:f9:c5:9e:
f0:2d:1c:0b:3a:63:e0:af:57:1d:16:23:66:8c:a6:6a:94:ae:
ab:ae:ad:6f:2d:a5:f4:18:3d:f2:a0:b2:d5:95:60:8c:00:c4:
32:01:a0:4b:b6:b8:af:2d:6f:44:87:3e:d7:37:85:6d:82:65:
52:78:4e:22:53:aa:13:5c:00:2d:91:45:55:11:24:7e:c3:69:
1f:e6:d5:f8:cc:3a:2a:6f:d9:61:32:e6:f5:2e:c4:01:4a:ee:
65:9a:fd:00:0d:63:cb:d7:63:29:b4:87:8a:eb:f8:b1:f7:77:
67:6d:49:8c:bd:f4:b9:aa:00:ab:8f:52:fc:3b:0a:92:31:1d:
ab:ef:8a:b7:bc:7c:5e:d4:00:43:ca:31:c7:fa:6c:c7:27:ea:
27:e4:d0:fa:e9:87:ee:d0:3c:a4:8a:45:75:ad:7c:a4:85:82:
65:45:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:19:36 2026 by rpki-client