
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json)
Hash identifier: 6Xhj7xGtYSQ41hrrfhQALmroRm70qoeaBXZgvI9Y93g=
Subject key identifier: 2E:28:88:7F:25:F0:A9:21:F9:6B:AF:EA:2D:29:96:E8:47:7C:EB:27
Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
Manifest number: C2
Signing time: Sun 05 Apr 2026 06:22:57 +0000
Manifest this update: Sun 05 Apr 2026 06:22:56 +0000
Manifest next update: Sun 12 Apr 2026 06:22:56 +0000
Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: yI5jntb4XPtxjHiVJvLVp5frHcS8sz4e7WxXUi+Zaqk=)
2: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: 9AYfRR1mUHtIyonHrj2E53FFwt+sSRdMykaqwYBUAaY=)
3: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: JgW7r5pk1FderMLKPrb4Cb/ibJCCVddw7kZ9flhSsCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Validity
Not Before: Apr 5 06:22:56 2026 GMT
Not After : Apr 12 06:22:56 2026 GMT
Subject: CN=69d1ffc1-ede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:e9:47:61:71:9a:64:ed:f9:c7:e4:bb:d7:
d3:e4:10:d9:98:06:b3:58:00:58:16:43:79:26:fe:
3f:31:87:4a:c8:00:f9:a0:61:ec:50:51:af:6d:2c:
30:b5:24:db:c0:84:7b:52:08:49:91:a4:a4:17:00:
fa:43:73:68:b6:75:a1:0c:ae:5c:54:74:18:bc:f0:
52:f9:8f:64:b2:9f:c4:cc:34:7b:bb:c8:bb:be:06:
65:d5:37:60:30:cf:39:2b:00:bb:e6:e8:59:9f:cf:
37:2b:21:03:9d:26:7d:b2:64:4d:c7:c0:6c:56:d9:
80:40:5a:f7:2c:9a:27:c8:ad:80:be:47:2c:5a:5a:
dd:66:11:f1:63:b4:8e:ae:97:9b:8a:75:4b:23:d2:
35:cd:9c:1b:78:da:b4:95:8d:52:58:11:e9:53:d0:
f0:eb:a6:7a:b0:8d:ff:3a:aa:2d:7f:09:af:ad:38:
04:5d:f8:63:da:f3:ff:84:34:31:e8:c1:70:b3:52:
0b:14:9a:c2:7a:05:47:ec:4a:35:3b:27:7a:ef:4f:
1a:3a:66:52:17:fe:4c:d6:34:58:ce:18:48:da:71:
9c:e0:a9:75:91:42:db:31:9b:2f:8d:01:f5:c4:7a:
4c:98:7e:8e:5c:fa:77:57:52:3b:84:3b:a8:14:f9:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:88:7F:25:F0:A9:21:F9:6B:AF:EA:2D:29:96:E8:47:7C:EB:27
X509v3 Authority Key Identifier:
keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f9:b3:b8:13:24:f3:93:db:b3:4e:39:02:18:82:49:72:d7:
65:d6:5d:99:03:7f:13:7d:8d:7a:f4:33:ab:1a:6c:30:96:a0:
45:65:de:c3:c1:22:f0:f9:30:dc:a5:71:7a:df:dd:5a:3e:22:
e1:6a:d5:cd:99:d5:2f:6f:3c:47:06:41:a3:8d:f7:dc:b1:9c:
c3:c3:52:9b:29:48:e5:34:cc:6e:dd:5e:d7:79:50:cc:c0:ca:
fc:3e:04:f1:80:61:ed:16:bf:35:c8:b4:26:9d:2c:e4:8c:75:
54:03:a0:19:dd:40:83:99:52:20:63:3b:f1:4d:dc:eb:bc:2d:
e6:c1:f9:8a:da:2d:1b:cf:43:21:be:45:f3:68:10:96:48:3e:
86:2c:57:34:a8:16:a9:c9:65:aa:50:9c:4f:43:00:f5:8e:36:
15:9c:9f:bc:d2:3a:83:3e:b4:bc:e6:e2:57:a4:c1:aa:76:de:
aa:49:29:01:47:99:9b:d5:d4:47:1b:24:1f:2a:f3:9e:fc:22:
43:54:98:fd:b0:e9:81:fe:d4:fd:ab:fa:f3:a4:e5:af:be:f4:
3e:e2:46:df:03:23:35:e0:87:7e:fc:78:a5:c3:a4:e2:0a:88:
a1:89:eb:e4:1b:98:5c:34:ed:6a:47:7a:f6:a7:47:9a:c6:c9:
5a:4b:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:16 2026 by rpki-client