
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier: d933+QXX6TgPIFfxtbyZDxYnT6iDY1aHGmTWtc/PHvE=
Subject key identifier: CE:3F:14:AB:39:12:BF:21:CB:E5:69:E0:77:B6:F3:D9:B2:77:5A:D1
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number: 0204
Signing time: Sat 13 Jun 2026 03:09:49 +0000
Manifest this update: Sat 13 Jun 2026 03:09:48 +0000
Manifest next update: Sat 20 Jun 2026 03:09:48 +0000
Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: kWTEN2CiNnbySO3/shrAdv8pjugeShM2wOvDCFKRHYE=)
2: 367F1DC24F6E11F185D012B6C8833773.roa (hash: t1Y5uB+U1yi8oL0ZoSG/KpJIn/IBE89Y/hTey3o5yJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Validity
Not Before: Jun 13 03:09:48 2026 GMT
Not After : Jun 20 03:09:48 2026 GMT
Subject: CN=6a2cc9fc-7a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:0e:ef:16:aa:34:46:78:6b:9a:38:d3:37:
62:b3:1a:d2:ec:b9:9e:67:02:4f:e3:13:d1:bb:a7:
f0:d3:9d:cc:64:f0:9c:12:97:ce:93:ab:c5:ef:ce:
ba:24:9f:7d:4f:9f:8f:14:18:71:15:cf:d7:43:71:
04:77:6d:9d:41:29:34:77:32:85:8a:71:db:a2:ce:
7c:e7:05:ba:a0:a5:22:85:d6:46:5f:97:ba:11:bc:
45:0c:9c:93:5a:5a:6e:fb:89:b0:25:e9:ef:4f:8d:
11:25:ef:af:eb:88:4f:b3:80:6f:2d:3c:16:bc:96:
50:d1:c6:8e:9c:43:94:4f:3f:84:b9:ea:8f:ad:e0:
68:66:ba:48:21:5f:c8:07:c3:2b:15:1b:97:c0:ab:
5b:ee:bb:15:48:16:fc:a1:5e:ff:dc:f9:f2:49:54:
84:d8:29:ae:04:29:15:54:7b:a7:9b:36:68:a7:51:
7c:31:66:ac:5c:85:35:11:3a:33:c4:bc:43:55:2e:
64:17:05:ea:e0:a1:f4:0d:47:48:8b:19:b6:a8:55:
53:83:d2:25:ae:5e:1f:6c:59:c2:91:df:70:b4:9b:
e2:d6:67:47:fe:4b:d0:21:06:cd:a0:1f:1e:2e:b7:
b8:e7:b3:33:8d:a4:f5:9a:80:3a:ad:89:a9:44:e0:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3F:14:AB:39:12:BF:21:CB:E5:69:E0:77:B6:F3:D9:B2:77:5A:D1
X509v3 Authority Key Identifier:
keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:db:45:95:b7:d9:d3:3a:62:40:68:4b:ed:d1:a6:c0:20:70:
b4:1a:76:30:8b:08:d8:27:09:c4:c3:0e:aa:16:29:1a:e6:6d:
c7:91:8e:b8:45:10:c9:11:0f:08:67:16:11:6e:a2:61:e2:ee:
b7:ab:5c:8c:f7:55:d7:1c:73:50:ae:c6:3d:a8:6c:04:2e:9a:
db:7d:c4:56:a8:96:40:87:6a:dc:61:f0:ea:bb:7f:6c:d5:ab:
25:fa:5b:e7:56:5f:07:31:df:19:6a:ff:d4:0b:85:ca:0b:23:
c3:ba:e2:f6:89:6e:38:e2:60:1f:4e:63:75:53:21:e6:94:f9:
6a:d9:38:db:68:cc:7a:6e:8c:9a:f1:e2:eb:e0:5f:e3:09:e6:
be:63:cf:ae:5f:4c:50:c1:0c:ab:be:52:1e:6d:dc:95:bc:02:
d2:b1:60:e5:19:e0:85:fe:c1:7e:ab:3d:41:e2:32:dd:90:95:
17:2e:bd:b7:c1:dc:2a:9f:90:af:8e:8c:02:8e:6c:26:29:94:
8d:7d:57:e5:3c:3a:1b:20:38:0b:b6:15:aa:c0:d0:37:95:fd:
50:26:7d:a1:be:f0:d8:f5:2d:ff:3f:63:d1:ea:8c:83:f3:6b:
d8:66:f2:fb:e0:2a:1f:5d:72:04:ee:40:70:33:a7:4d:13:20:
b0:e6:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:58:41 2026 by rpki-client