
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json)
Hash identifier: l0xA7nLWVkt5ebmlNxyOfShs225y9z8iLS+ahX2NLz0=
Subject key identifier: 67:27:71:A2:71:FF:BB:8F:58:68:26:D2:57:9B:50:73:7D:07:77:C4
Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
Manifest number: 01CF
Signing time: Mon 02 Mar 2026 01:07:16 +0000
Manifest this update: Mon 02 Mar 2026 01:07:14 +0000
Manifest next update: Mon 09 Mar 2026 01:07:14 +0000
Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: XMzGL9JB4wig3BCZC+LhUokqPhuvV01WQeDeUJlvStM=)
2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: F1vpQpUV3bw/FrQH9h0dEOMw7zfdTnJwa9DPHf/lxCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Validity
Not Before: Mar 2 01:07:14 2026 GMT
Not After : Mar 9 01:07:14 2026 GMT
Subject: CN=69a4e2c3-5e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:8b:2d:f7:ec:19:f7:01:ee:fc:fc:e7:11:
84:3d:cd:ab:cb:7b:08:0e:dc:6a:e7:58:9a:ed:8d:
57:fb:39:83:cd:08:b3:d9:1b:fe:a1:c7:81:df:32:
c3:b1:ce:16:4b:23:1f:81:b1:79:6e:2d:71:60:fd:
c3:2c:b1:95:f6:8f:6b:10:6e:ba:e3:1b:06:b0:28:
f9:3a:b6:8d:5b:d9:a9:bf:be:d6:ea:5f:b5:41:b9:
2e:13:27:4d:0f:18:3b:88:28:3f:47:40:30:56:f2:
00:a5:63:fc:c9:3d:16:9e:12:4a:e7:2a:71:d6:1e:
ad:3d:53:0d:1f:9b:59:b2:2a:fa:2a:09:fe:58:de:
3f:a8:f6:60:b1:ac:ea:40:b5:b5:99:33:21:a9:2b:
b9:c4:85:bd:90:90:5a:15:10:c4:50:9c:16:6a:99:
d5:be:61:0a:ee:e6:6c:c5:dd:c7:2e:c7:f2:5a:0e:
76:f4:5e:32:6d:8a:f4:02:77:03:4d:02:52:99:4d:
aa:71:72:94:5a:97:6c:2c:b2:19:58:44:88:dc:87:
8d:7f:35:50:fb:d2:d6:5a:c3:98:24:3a:e5:43:60:
e6:49:5f:6d:e9:13:b9:24:52:f0:ee:62:9e:00:11:
12:cb:ef:6b:1e:90:9c:59:ab:cb:a0:a4:07:c3:c5:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:27:71:A2:71:FF:BB:8F:58:68:26:D2:57:9B:50:73:7D:07:77:C4
X509v3 Authority Key Identifier:
keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:e1:9b:9c:07:08:30:dd:d7:b8:f4:c8:3d:59:93:7d:6f:38:
11:fe:7c:73:a4:33:97:df:30:51:b1:2c:96:05:d5:80:89:da:
37:6b:e5:dc:1e:89:da:36:94:29:93:5a:b0:fc:e5:99:ca:95:
24:9f:ef:4a:69:20:8f:e5:9b:d5:9a:fc:d4:f6:68:62:a8:52:
8a:8b:2b:86:71:6b:f4:2f:ea:9c:56:c5:80:9c:7e:f3:18:90:
86:4f:9b:62:97:23:12:4b:7c:b5:6d:e9:4c:fd:4d:15:e9:d3:
06:3d:37:d6:12:c8:d4:c6:c9:60:41:9c:96:59:0c:87:42:8a:
bd:50:b2:1d:b8:f8:52:87:e8:42:73:f0:6a:5f:10:9d:1e:ff:
8f:56:ac:da:20:43:3b:07:60:ef:18:70:4c:e2:25:71:8f:c3:
2c:d8:41:51:ef:4b:32:89:a3:3d:48:f9:47:1f:11:6b:99:b6:
e8:a4:10:fe:8d:2a:01:65:a6:b0:b6:36:c5:21:a0:9c:39:24:
ea:0d:45:14:2b:8f:64:41:f5:14:a6:84:ef:c5:70:ce:b3:3c:
88:d8:97:b8:35:ed:2d:23:5d:44:30:b9:38:ff:5c:27:58:78:
82:d9:54:23:b6:78:fd:49:94:9a:72:94:7f:70:b6:7b:0d:62:
56:56:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:56 2026 by rpki-client