
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier: MATsw+d0pWo/WRA6u2xOogEcvC8HQqWK7X7E088p/7c=
Subject key identifier: 5B:EC:DE:3C:CE:CB:A9:30:F0:9D:87:9F:42:02:0B:DB:E4:51:74:E1
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number: 01DC
Signing time: Sun 05 Apr 2026 03:01:06 +0000
Manifest this update: Sun 05 Apr 2026 03:01:05 +0000
Manifest next update: Sun 12 Apr 2026 03:01:05 +0000
Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: buURGxtr+rPYhqM0h8XcXQx3tweTvAGKGhwMfhNRWK0=)
2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: 19CRriFHUu9Og+pLKFNKi+nzmbjd/BqY5BWoDtCmKYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Validity
Not Before: Apr 5 03:01:05 2026 GMT
Not After : Apr 12 03:01:05 2026 GMT
Subject: CN=69d1d071-8793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:42:b7:59:e7:d8:b6:cb:50:59:b3:d3:f3:
d4:2f:e5:dc:f0:66:63:59:75:2d:ef:84:9e:19:60:
8f:56:7a:df:3b:99:8c:1e:fd:69:c6:b4:a9:94:f1:
5f:15:7e:15:9a:d1:3f:d4:5b:1a:dc:bc:7d:97:59:
bb:3b:b2:a5:27:5a:78:98:62:b0:fa:18:16:cc:76:
4f:8d:8f:81:61:da:41:29:ca:5d:c8:71:d6:df:f1:
91:81:e0:cf:ec:9f:9a:5f:73:db:82:e4:9d:c6:5e:
3a:92:39:e2:dc:06:c6:da:0b:22:9a:be:87:fc:22:
19:08:6c:9e:da:e1:7a:d7:5f:4d:d0:c3:5c:9d:87:
21:24:3d:2e:72:b7:3f:50:ad:7f:2d:e9:ea:64:27:
12:63:25:47:57:cb:7f:94:01:77:7a:20:e3:1e:eb:
8f:80:ed:1d:39:ca:98:05:33:15:e1:65:14:a3:1e:
de:2c:eb:ac:92:07:91:cf:9f:5f:1e:f2:e3:ea:6c:
50:c5:99:e2:bb:98:f0:9c:01:39:dc:28:f9:ff:37:
bd:40:2a:df:7a:8a:c6:8b:cc:8f:2a:1e:86:b3:18:
95:e6:56:59:56:a4:f3:04:f5:4f:ab:69:2f:1c:33:
13:79:68:6c:0f:fa:44:bb:de:d3:9f:e0:53:28:03:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:DE:3C:CE:CB:A9:30:F0:9D:87:9F:42:02:0B:DB:E4:51:74:E1
X509v3 Authority Key Identifier:
keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:72:e9:0e:9c:32:2c:35:eb:26:c8:f3:aa:d6:35:30:5a:d7:
23:ce:c0:df:5a:7a:13:01:83:13:50:15:72:ea:78:07:8f:cb:
de:ca:93:36:94:da:77:07:79:f2:ea:15:42:09:ce:6f:cf:64:
f5:c5:fb:05:95:15:3d:a1:c4:24:9c:f2:c6:ae:33:49:7e:c0:
3d:a9:06:11:51:4c:8f:79:50:cb:5c:11:1c:fa:67:e1:61:04:
f4:67:fa:fa:6e:fd:ab:97:25:7f:39:21:6f:5a:b9:ab:87:5f:
00:c7:97:d4:f0:62:29:cd:0a:26:30:35:53:3d:81:6a:74:dc:
82:36:21:60:87:9c:57:03:44:96:88:8a:69:e7:7e:ff:30:6c:
52:4c:83:e1:04:cd:9b:47:5f:74:a6:cb:b7:b6:fb:03:ee:53:
2c:54:37:8e:a2:f4:04:db:30:b2:5f:14:ce:e1:44:9f:8f:75:
d9:cd:0f:e1:1d:bb:5a:07:35:08:3e:e9:f4:87:31:8f:07:eb:
28:22:6b:08:79:18:42:6b:58:b2:bd:46:9c:be:db:4b:ce:ff:
05:a6:48:11:ad:7c:ef:a6:37:c5:36:cd:1f:cb:58:ec:80:a0:
8c:73:bf:e6:40:fb:de:2c:29:8b:67:cf:14:0b:99:3c:e3:d3:
50:58:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:45 2026 by rpki-client