
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier: NqiUPM/6X9eWh4qk8ZVW3zjXKL9Rln9CiJWsgzW3gQM=
Subject key identifier: 67:01:EC:25:A3:5C:68:54:82:87:DA:AF:A1:51:F8:0E:60:D6:58:B9
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number: 01E2
Signing time: Fri 17 Apr 2026 03:10:30 +0000
Manifest this update: Fri 17 Apr 2026 03:10:29 +0000
Manifest next update: Fri 24 Apr 2026 03:10:29 +0000
Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: gsXWYe2/CJh/y55cgcJIISVnVsGpyvN7eDmsd3iS6fM=)
2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: 19CRriFHUu9Og+pLKFNKi+nzmbjd/BqY5BWoDtCmKYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Validity
Not Before: Apr 17 03:10:29 2026 GMT
Not After : Apr 24 03:10:29 2026 GMT
Subject: CN=69e1a4a6-e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:be:e0:53:8f:7d:5a:95:b2:9a:f2:cb:54:
39:21:d6:47:8d:a9:d9:89:88:41:ac:cf:99:d4:8d:
b0:f3:0c:7b:26:77:ce:cf:b8:b4:ce:e6:d6:28:c7:
7b:60:2a:e7:97:58:e8:57:5c:af:e3:8c:5d:b6:2f:
fe:d8:1e:20:5f:a3:9a:6d:73:6d:5b:6d:85:82:98:
3e:26:6c:30:15:9b:98:3e:06:31:34:fc:ba:6a:6c:
36:7a:14:97:90:bb:57:5b:cd:8d:5f:a6:22:b8:d1:
1b:8d:97:5d:63:b7:fe:ef:59:99:10:31:ee:d9:bd:
83:0a:0c:fa:37:02:52:21:b7:92:20:cd:b7:38:f1:
06:f1:45:5c:d3:80:55:3a:b0:8b:57:a9:07:ed:44:
10:6f:a9:dc:9c:79:12:c8:ad:59:b5:d7:5d:a8:11:
ed:76:55:ea:8e:9b:1f:50:32:ab:25:63:cc:03:a1:
d1:5e:45:23:9a:7f:ac:c2:c5:2b:d2:ce:12:d0:a3:
50:f9:b5:26:48:8c:04:38:52:f7:f2:a7:df:bd:a8:
e8:d6:0b:f4:07:f4:ca:53:8f:f6:94:27:c8:89:a7:
9c:92:f3:85:eb:8e:2f:ed:99:71:d5:63:62:38:aa:
2c:b3:b6:d7:c5:6b:1e:91:9c:e4:8a:10:fe:6b:7f:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:01:EC:25:A3:5C:68:54:82:87:DA:AF:A1:51:F8:0E:60:D6:58:B9
X509v3 Authority Key Identifier:
keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:54:19:30:66:dc:ec:e2:d4:db:a8:89:24:9c:26:4f:bc:9e:
52:5d:48:ac:6b:fb:9a:36:bd:17:46:33:25:c1:3e:0f:d4:4c:
09:6e:04:db:05:bb:de:72:34:05:ab:b8:f1:c2:d9:a3:09:25:
bc:e2:20:ca:c2:5e:12:6e:de:1c:3a:62:33:91:b4:07:76:17:
69:28:21:3f:d2:fd:a4:21:a4:2b:d2:fd:98:d3:ad:32:f7:8e:
14:cd:ed:07:b2:0e:48:52:46:4d:cb:c9:53:30:4c:fb:ee:47:
68:bd:ca:71:03:95:73:de:1d:e5:f7:4e:53:7e:04:46:0d:94:
f0:6b:a6:72:fe:68:33:9e:dd:d2:b8:2a:16:5a:da:95:b9:6c:
b6:31:cb:55:ae:7f:d2:a4:6e:de:85:7e:cd:f0:56:b9:ae:3a:
3e:5b:e1:ff:a9:9e:19:b0:05:7b:02:8b:26:55:01:cb:d7:db:
01:8e:0f:00:56:9a:20:2e:f8:2d:48:8b:f0:d5:bf:df:f0:3e:
52:71:53:47:e5:3b:40:3d:24:a1:53:a5:2a:17:26:b4:a9:e0:
1c:6e:4c:f2:2b:d6:bb:67:08:e3:14:1c:cc:c4:57:3f:a1:b4:
81:64:c8:47:26:6b:8f:26:37:8f:4e:15:64:35:36:7b:74:fc:
d8:bb:d7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:33 2026 by rpki-client