
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier: q4fdO8M34Ko/SSEJrE3YYqrNPhESXYwpd7BqaHjDHmA=
Subject key identifier: 0C:1D:08:3F:A0:A6:C9:08:80:A4:E3:FF:A2:F0:59:31:D9:AA:4E:C4
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number: 0238
Signing time: Wed 23 Sep 2026 02:29:31 +0000
Manifest this update: Wed 23 Sep 2026 02:29:31 +0000
Manifest next update: Wed 30 Sep 2026 02:29:31 +0000
Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: zQa00IV33ZhOegYQWOvNK7IePc6qJibDeC7HwTywjhc=)
2: 367F1DC24F6E11F185D012B6C8833773.roa (hash: t1Y5uB+U1yi8oL0ZoSG/KpJIn/IBE89Y/hTey3o5yJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Validity
Not Before: Sep 23 02:29:31 2026 GMT
Not After : Sep 30 02:29:31 2026 GMT
Subject: CN=6ab3398b-bf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:33:9b:24:ec:c1:6d:96:c9:6f:ab:79:05:
a9:f3:95:0d:81:bf:9a:47:54:48:5f:b9:d8:13:a0:
75:fd:0e:83:b9:4e:69:b8:5f:3c:ab:b4:7f:01:34:
d5:b1:eb:17:92:ac:ac:7e:52:53:13:d3:35:60:19:
41:b8:3e:99:63:d3:c6:69:b6:c0:87:68:a1:db:37:
b2:be:c1:38:c7:65:74:13:f9:54:6d:0d:09:37:b5:
fc:c4:ae:e4:b1:13:c7:d6:c1:b7:35:c6:24:cd:50:
5e:71:c6:e5:4d:97:fe:9b:9f:81:41:75:56:a1:d8:
55:21:b0:de:4b:93:cb:f4:2b:a6:16:62:ba:8c:ca:
85:a0:4a:a6:a2:87:b0:e4:bf:a0:16:02:37:af:d5:
bd:27:d5:bc:be:70:e1:9e:7a:74:43:0f:88:03:01:
bf:9c:4b:c2:81:15:54:c5:af:ad:ea:2a:a3:8b:01:
4c:03:d9:1b:2c:57:47:10:47:0a:98:2e:71:d9:59:
12:b7:45:3f:18:e9:9f:b8:26:99:d2:01:5b:26:52:
2b:d7:f0:23:1d:80:6f:c6:61:7c:b8:21:da:6e:f2:
32:a7:29:b6:4e:70:c9:0c:a0:f3:38:8f:e2:7e:a5:
ed:c6:cb:2b:60:50:12:18:8e:77:92:ad:57:73:9e:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1D:08:3F:A0:A6:C9:08:80:A4:E3:FF:A2:F0:59:31:D9:AA:4E:C4
X509v3 Authority Key Identifier:
keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:cd:c5:3f:07:6a:bc:6f:ee:9d:c9:54:c1:29:0d:b7:25:a0:
98:21:3f:a1:8d:6c:c2:a2:73:95:e0:1c:93:67:9b:a7:30:e6:
37:93:9a:91:25:96:d8:a2:bf:0d:9a:1d:da:57:82:2d:3d:1c:
d1:38:71:67:67:f2:84:cf:39:b3:ee:b8:a8:c9:0b:84:58:25:
a5:22:a9:ff:d9:91:92:fe:46:97:2c:1c:03:7c:56:89:b3:ba:
14:91:49:2b:63:68:31:e8:72:72:47:68:60:8e:79:d7:d5:00:
e0:db:7d:ff:91:cd:e1:15:23:12:05:fe:d8:3d:b6:26:03:b9:
df:7a:c6:2a:5b:90:08:90:19:4d:3f:d9:61:3d:52:0d:bd:8a:
4c:75:9b:2d:d2:38:8e:4f:e1:8a:35:34:d4:35:9b:9a:3c:48:
6d:f6:96:48:e8:58:da:28:92:44:b6:5a:28:a2:b6:aa:11:be:
ca:e9:2a:49:d6:ee:b9:a2:a2:4a:e7:2b:38:ef:ef:36:6d:97:
ca:ed:7b:ea:c5:96:b6:d1:6d:8d:0e:08:9c:de:33:17:c8:5c:
c8:23:fa:71:dc:96:07:02:5f:a9:db:d6:fb:90:d3:70:ed:cb:
99:c6:b8:26:76:e0:37:03:f2:c1:a4:6c:c7:ad:41:4e:08:60:
0e:3b:a6:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz
MjFFNTMxNzEwHhcNMjYwOTIzMDIyOTMxWhcNMjYwOTMwMDIyOTMxWjAYMRYwFAYD
VQQDEw02YWIzMzk4Yi1iZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqG4zmyTswW2WyW+reQWp85UNgb+aR1RIX7nYE6B1/Q6DuU5puF88q7R/ATTV
sesXkqysflJTE9M1YBlBuD6ZY9PGabbAh2ih2zeyvsE4x2V0E/lUbQ0JN7X8xK7k
sRPH1sG3NcYkzVBeccblTZf+m5+BQXVWodhVIbDeS5PL9CumFmK6jMqFoEqmooew
5L+gFgI3r9W9J9W8vnDhnnp0Qw+IAwG/nEvCgRVUxa+t6iqjiwFMA9kbLFdHEEcK
mC5x2VkSt0U/GOmfuCaZ0gFbJlIr1/AjHYBvxmF8uCHabvIypym2TnDJDKDzOI/i
fqXtxssrYFASGI53kq1Xc574DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwdCD+g
pskIgKTj/6LwWTHZqk7EMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC
N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO
am1FdEhzUFZHQzB5SGxNWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZs3FPwdqvG/unclUwSkNtyWgmCE/oY1swqJzleAck2ebpzDmN5OakSWW2KK/
DZod2leCLT0c0ThxZ2fyhM85s+64qMkLhFglpSKp/9mRkv5GlywcA3xWibO6FJFJ
K2NoMehyckdoYI5519UA4Nt9/5HN4RUjEgX+2D22JgO533rGKluQCJAZTT/ZYT1S
Db2KTHWbLdI4jk/hijU01DWbmjxIbfaWSOhY2iiSRLZaKKK2qhG+yukqSdbuuaKi
SucrOO/vNm2Xyu176sWWttFtjQ4InN4zF8hcyCP6cdyWBwJfqdvW+5DTcO3Lmca4
JnbgNwPywaRsx61BTghgDjumug==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:33:53 2026 by rpki-client