
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
File: MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json)
Hash identifier: kQwgQ2Nkg5k5p8q0EylsiRG3YhTavobeaRqUJjdGSe8=
Subject key identifier: 34:1D:9A:13:9E:AF:9A:B0:65:76:BF:CB:1B:49:F6:04:DA:56:E0:9F
Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
Certificate issuer: /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
Manifest number: 017F
Signing time: Mon 21 Sep 2026 04:38:29 +0000
Manifest this update: Mon 21 Sep 2026 04:38:28 +0000
Manifest next update: Mon 28 Sep 2026 04:38:28 +0000
Files and hashes: 1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: gNQOWyi8t26+VPTROUjfdG6UXR+pvQ9+7p/Eou4eTwc=)
2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: GqOCo+Gys/z1j8c3oBwzkW0wbpmPF36OaClD0qOv/Zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Validity
Not Before: Sep 21 04:38:28 2026 GMT
Not After : Sep 28 04:38:28 2026 GMT
Subject: CN=6ab0b4c5-3020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:21:d3:af:bc:54:cc:56:3c:6b:04:d9:2e:
1a:46:e1:c6:be:dc:55:db:d9:b2:a9:82:50:db:42:
8a:4b:51:85:e2:4d:71:75:02:bf:c3:75:86:45:a2:
c1:d9:bb:52:db:11:01:5c:d6:62:f5:a8:f6:3f:b8:
74:1e:55:bd:7c:7b:0e:0b:5a:1a:bf:4e:4f:fe:ee:
15:9e:cf:79:4d:34:d4:35:7b:35:43:63:de:2e:09:
d6:d0:76:72:b0:b5:4d:27:b0:94:37:bd:01:bc:75:
67:5e:1a:df:a8:ee:61:e9:97:1b:03:c8:b0:38:a6:
39:fd:6b:d5:6d:9e:72:43:0a:f7:21:11:8b:e8:79:
cd:d8:c3:dc:bf:e5:ce:37:8a:51:1d:5f:ec:b8:48:
33:63:82:80:d6:bf:c2:5e:e6:90:67:a7:48:ed:ff:
8f:ba:c6:50:54:7e:94:a4:dd:1c:b3:86:7a:29:f3:
4a:04:71:d4:f2:ce:49:52:dc:01:ef:d6:5d:32:45:
09:47:bb:4f:a4:f6:e8:78:f9:55:44:e4:94:1a:8b:
9b:87:bd:5c:65:07:56:ae:9d:34:1d:03:c8:ab:f6:
b2:2c:07:fb:7d:94:0e:6b:cd:ad:d6:5f:0e:e5:b9:
33:32:03:df:c2:87:66:2c:09:f0:00:46:32:72:eb:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:9A:13:9E:AF:9A:B0:65:76:BF:CB:1B:49:F6:04:DA:56:E0:9F
X509v3 Authority Key Identifier:
keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f9:3b:24:ce:78:92:dc:72:c0:01:c0:1c:d2:cd:e2:d0:09:
84:77:27:11:01:a3:ea:a8:90:72:f6:53:26:e1:73:ec:74:21:
96:d6:3e:79:1f:12:a4:79:da:75:51:dd:0c:7d:25:ac:35:0e:
bc:14:86:d2:63:db:90:91:eb:63:2b:06:fd:27:e2:d3:06:8c:
98:a9:f0:3e:39:21:dd:53:ad:7c:4d:87:65:f9:9a:0d:74:f7:
57:47:85:ec:2d:59:e4:85:99:52:36:74:e4:e2:14:bb:48:82:
b5:5d:df:ba:0a:ee:84:d7:fe:0f:52:f5:22:14:42:fe:f5:82:
fd:8f:79:8a:4b:a2:59:c6:52:e5:61:ec:c0:f2:39:fa:c7:7c:
b9:61:35:ea:bc:45:5e:f1:ee:0b:ee:87:62:74:83:ad:da:3a:
54:0d:42:54:15:3a:98:43:24:b5:24:75:53:4d:c1:ee:26:05:
16:58:30:45:9d:c6:78:d1:15:d1:49:f9:c4:37:a6:0d:2b:8d:
6a:88:8e:a8:f8:f2:87:65:40:35:b0:ea:f0:9b:1d:9b:b8:0e:
f5:f8:7f:05:c7:ff:ea:66:aa:51:cb:a7:84:e9:e7:c0:82:4f:
0e:7b:e3:86:6b:ba:00:f4:f5:b0:f0:0e:85:48:84:db:b5:a0:
40:09:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:30 2026 by rpki-client