
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier: rMYCBgmlxATfEP9tp/qveKIlFQphK/XfzuORN3/spK0=
Subject key identifier: 51:F7:25:4C:88:4C:8F:22:2C:DB:31:54:6C:44:65:5E:9D:12:72:D1
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number: 0235
Signing time: Thu 17 Sep 2026 02:49:47 +0000
Manifest this update: Thu 17 Sep 2026 02:49:47 +0000
Manifest next update: Thu 24 Sep 2026 02:49:47 +0000
Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: o8SzCeO5Glxba5J+g2DaANAEPssxpjHTCp6feJnr74I=)
2: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 8JV502SLk8QbZyaGCPLTxSnSD1WOF++tIWExjZSLMdQ=)
3: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 1RzsjB3B/c1zgVm8/5Sg1Xe89XFvfc6vQnq4tvEitnY=)
4: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU=)
5: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: Pt4/aeZJmmxaKw58FeByKfcr60LvOJZSjrmtvVkGyg8=)
6: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: 6VryhfiIF2VBEa3XnAENzfKNyDYTfUs9xynBu6kvnA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 02:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Validity
Not Before: Sep 17 02:49:47 2026 GMT
Not After : Sep 24 02:49:47 2026 GMT
Subject: CN=6aab554b-a8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:64:9f:d4:6d:0f:1e:78:66:c4:77:4f:7d:
05:70:8e:a3:22:74:86:0c:8f:ea:db:2d:39:73:3a:
d2:6b:fe:49:30:89:28:45:cd:5d:57:8f:d7:af:84:
bd:02:8f:58:db:de:5f:7e:42:71:20:c2:b4:c3:58:
b3:1e:bf:65:c4:0f:d6:58:3d:3d:bd:72:0a:0e:d9:
79:fd:fe:5c:4a:db:7d:51:1e:8b:23:49:dd:d4:e5:
50:a0:69:f2:37:57:07:bb:5e:da:bf:b9:db:42:f7:
3a:79:b2:73:ce:9c:e1:5f:a6:8b:11:50:2a:8a:eb:
02:cf:ff:67:63:f9:b3:0d:6f:6b:ad:a1:cc:60:f8:
63:63:bf:c6:b4:5e:e8:a5:34:69:78:63:26:03:78:
34:46:bb:b5:3f:a3:e3:18:83:f9:c2:60:a6:b7:79:
e7:0c:f1:66:58:ba:a1:3c:f1:1b:61:43:01:45:9e:
97:82:4f:51:54:47:ff:bc:4b:14:fd:4f:77:56:7e:
60:5e:8f:12:ce:bf:4d:6a:9c:e3:b1:3d:05:c8:65:
12:2d:03:67:db:7b:ae:61:84:c6:23:1f:a8:98:4e:
57:0c:ec:2f:79:70:e4:b1:3b:82:6b:87:39:af:4b:
e4:c1:20:fd:f4:a2:df:f9:f3:97:29:ce:11:1a:6c:
ef:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F7:25:4C:88:4C:8F:22:2C:DB:31:54:6C:44:65:5E:9D:12:72:D1
X509v3 Authority Key Identifier:
keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:7a:ec:7c:c9:9c:2b:50:ec:4c:19:2c:d8:60:e0:52:d8:37:
81:9c:08:17:69:7c:09:a4:d7:e6:ea:45:09:fb:98:17:81:5d:
2b:50:9f:c7:3a:17:30:0e:3c:85:68:71:21:a1:19:8d:71:b5:
cf:a9:8a:e7:8c:18:a4:b1:53:64:b8:50:91:54:58:9b:5c:c3:
27:53:a2:f0:e6:48:5c:f3:e0:d8:f7:e9:85:ed:f8:99:2e:ad:
c6:4a:b0:73:a8:57:b8:e2:80:bc:eb:99:f8:93:3a:ce:55:67:
39:be:86:c6:73:e0:87:66:33:80:34:28:82:68:4d:e4:cb:f0:
82:55:cd:34:8c:ea:c8:dd:09:20:8f:eb:37:1b:98:ef:2c:66:
56:58:c6:2d:a9:01:70:3a:f8:2e:98:e1:47:14:09:dd:fa:27:
8c:73:fa:7a:1b:71:d8:9f:85:43:f1:3e:86:78:b3:bc:01:d8:
4e:dc:1a:99:23:f9:38:a2:cb:fb:23:07:e0:4a:94:bf:1e:c4:
a4:33:71:d4:ab:b7:27:a4:fc:c2:b9:ee:9c:97:57:7c:f9:40:
b6:bd:f7:4e:c5:d1:ea:84:07:fd:4b:31:51:e2:f0:ca:cd:0a:
bf:7b:74:1e:69:5a:7b:14:03:32:da:83:d8:f2:d8:87:bd:9c:
de:06:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:49 2026 by rpki-client