
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier: xwjXEXoE5oCC0Qd0XwG/3gS5uNoq07Ng9MhBGwcUpv8=
Subject key identifier: 9B:5B:1E:E0:7E:B3:BE:E6:07:23:82:5E:2D:00:2E:A5:9D:E9:17:31
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number: 0151
Signing time: Mon 21 Sep 2026 05:29:23 +0000
Manifest this update: Mon 21 Sep 2026 05:29:22 +0000
Manifest next update: Mon 28 Sep 2026 05:29:22 +0000
Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: SR5b7xBuons/X4dpQam5nOS27T0QU/FvK/v0C3LPdf4=)
2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: fQPbW7wsOJSJ6PTH0yNZlYvKmkqgNxI41AFvHxJhKtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Validity
Not Before: Sep 21 05:29:22 2026 GMT
Not After : Sep 28 05:29:22 2026 GMT
Subject: CN=6ab0c0b3-7a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:cf:cc:6a:c6:de:77:97:88:58:5f:17:88:
06:31:61:67:7d:fd:83:91:d2:99:9e:e4:9e:8f:05:
27:5c:0b:da:3c:3f:ee:50:fc:7f:2b:e7:d8:55:f6:
30:06:0c:cb:74:70:da:6b:a1:21:94:64:70:18:ec:
42:64:80:a2:12:7b:17:f0:bf:50:65:45:ce:06:37:
70:4f:a2:b8:7f:5a:bd:65:fe:21:f1:ae:7c:49:38:
7a:f0:bc:4d:16:f3:74:19:47:0d:15:5a:66:c4:94:
9c:a8:fa:b2:94:22:b9:50:36:79:3e:3d:34:df:12:
7a:72:f5:0c:25:6c:8e:4a:b1:60:47:26:81:5e:71:
54:97:e0:26:3b:e3:ff:49:ca:9e:ff:97:db:a8:08:
36:53:00:87:22:fe:8f:6a:7e:8f:88:fd:8f:45:1c:
40:de:f2:ae:d9:c0:ee:b5:cb:0d:ef:a8:7b:5e:e0:
98:4c:d5:7b:80:c8:36:fa:32:aa:d9:08:cc:5b:f6:
aa:5e:7f:78:39:bd:89:12:c9:2e:16:87:fc:bc:5f:
33:17:63:53:25:e2:a3:de:c0:fb:a9:ee:6e:99:70:
01:9d:d9:66:a6:1e:68:f6:14:79:a5:b7:21:9e:0c:
96:a9:f1:b8:ee:8c:46:eb:77:1f:f7:88:97:61:df:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:1E:E0:7E:B3:BE:E6:07:23:82:5E:2D:00:2E:A5:9D:E9:17:31
X509v3 Authority Key Identifier:
keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:63:95:c0:1e:fd:31:d4:0c:6f:90:69:c5:8b:01:83:8b:7b:
6a:42:5a:78:1e:1c:af:d2:57:64:41:6b:9e:3a:f3:aa:b2:f7:
70:d1:1c:78:a3:d1:50:39:0f:b9:27:86:d7:5c:ce:89:f3:f7:
a7:b7:e0:d3:62:22:26:e0:e7:70:24:57:b3:cb:44:5e:62:52:
aa:0e:5a:f0:33:a2:5d:a9:ff:61:36:a9:ce:57:08:d3:1c:c8:
24:0c:1c:fc:d1:0a:e0:c6:36:ba:35:42:cb:79:6a:40:a9:1e:
f9:21:9c:13:f5:db:f2:62:4e:d7:44:03:e7:09:39:20:3b:60:
c2:81:47:2e:9e:d2:22:39:a4:0c:5f:5b:75:a7:b6:b0:13:52:
84:9b:6d:37:38:1c:fc:0e:96:61:61:d4:c1:9a:7a:66:2f:0b:
b0:f0:6a:aa:8d:34:ce:6f:63:98:c5:7a:d6:86:1b:3e:04:1c:
62:b3:db:a0:34:fe:1f:e1:5a:d7:ac:f6:e0:f4:02:b6:56:e5:
00:c4:0d:59:7d:5c:a1:86:da:5f:c9:bb:2a:f8:2b:28:e1:b9:
4e:a4:95:69:ca:26:7c:9c:a9:c5:3a:55:f5:36:03:b2:ac:91:
09:cf:23:6c:1c:d5:9c:33:ff:e7:7e:f0:ab:a5:99:a0:0d:ec:
7b:61:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:17 2026 by rpki-client