
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier: bLdKLEVV5lbQ+2w5JwNSHIYsJrwqFr1WVu9pJSifHDc=
Subject key identifier: AB:71:AE:96:FF:99:53:B5:D8:23:94:E9:59:C9:96:E0:E5:62:FE:EE
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number: 0133
Signing time: Sun 01 Mar 2026 06:48:31 +0000
Manifest this update: Sun 01 Mar 2026 06:48:31 +0000
Manifest next update: Sun 08 Mar 2026 06:48:31 +0000
Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: auoboRoEiVVKuKTXwpGqGRlgGJGn0bN7Wm09ZsBpXok=)
2: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: lyaciBaHQ7wicHWM/adA9CDhCXcjs8ttP7h7VzDSE2s=)
3: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: 4eCQXPIoXqLFis62/nmMgnZplG75TTG2mCb5ZkTz7as=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Validity
Not Before: Mar 1 06:48:31 2026 GMT
Not After : Mar 8 06:48:31 2026 GMT
Subject: CN=69a3e13f-101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:d2:85:59:73:62:f9:e6:0d:58:59:aa:2e:
bf:9c:59:81:ef:88:70:96:32:33:af:8d:4f:fb:26:
40:8f:46:e3:92:2f:ee:c1:30:9a:5d:5c:7f:09:5b:
67:ed:df:8b:e5:5e:5d:e4:b9:5f:a5:cb:8a:a1:44:
9b:86:9d:22:f1:2c:81:72:a0:22:f1:39:df:8d:be:
35:47:9e:75:19:ac:76:f5:0b:c4:02:0a:b3:90:fb:
c5:15:7e:9a:bd:8d:fb:ed:77:c5:6c:57:c3:55:26:
07:14:b8:21:4f:d4:4b:21:52:16:af:55:cf:91:ff:
c1:53:7e:b2:4b:12:f2:61:b7:38:4b:91:3c:9d:37:
89:e0:da:1c:10:8c:4b:05:c5:71:e7:aa:48:a4:d2:
8d:08:e9:3f:22:11:68:64:16:eb:3c:0e:26:e2:da:
b1:e1:4b:9e:61:f1:4f:ac:c8:80:9d:e9:e6:3f:e1:
e2:17:8a:47:a8:25:74:da:6c:5c:47:02:a1:05:90:
68:9f:67:73:5e:27:78:72:98:81:06:39:bf:56:cf:
0f:88:d8:17:3a:93:86:85:83:29:53:d4:83:f4:de:
6f:94:6d:04:67:17:6a:78:ed:68:06:23:69:8b:6f:
95:2f:52:39:4a:4f:a9:78:5b:58:29:d2:62:dd:e5:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:71:AE:96:FF:99:53:B5:D8:23:94:E9:59:C9:96:E0:E5:62:FE:EE
X509v3 Authority Key Identifier:
keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:96:34:52:2b:d3:b3:5f:b3:1d:fb:f3:32:74:1e:7f:d9:cb:
6c:5d:5e:07:12:0a:70:26:7e:40:46:ce:a2:09:60:2b:22:9d:
d3:93:c2:12:ef:fa:61:09:9c:d9:57:0d:04:05:ed:b5:36:2a:
03:ce:a6:63:4c:aa:d5:84:f3:6a:8a:4b:7b:0b:de:3b:a9:78:
a1:8b:27:22:84:24:8d:8f:ac:3a:ed:d3:9c:51:d6:65:72:5c:
b0:9b:af:30:d0:77:91:2a:4a:a0:00:6d:8f:6a:2a:60:2b:3b:
e9:80:da:05:78:09:fb:3c:13:89:ed:81:0c:97:66:c7:67:ad:
3f:58:09:7c:42:d2:69:d2:1a:49:5b:75:43:22:a2:46:0e:77:
a9:4b:47:e7:71:6b:ae:37:17:c5:b8:10:64:c4:86:03:df:ed:
e6:9e:3a:be:81:1a:09:ad:c2:da:08:c2:00:7c:7e:83:df:97:
91:3f:6e:a1:25:95:9f:2d:a2:5f:a6:3b:4b:01:56:52:51:d2:
a5:d9:a7:ab:9e:f8:33:60:1d:37:d2:85:ed:55:06:2d:34:c6:
8a:88:2e:c0:85:6e:5e:4f:09:e6:d2:a4:9a:ce:cf:1e:96:5f:
e4:68:0e:67:14:a2:1d:0c:d5:95:8c:0b:19:18:52:b3:1a:b5:
59:58:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:31 2026 by rpki-client