
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json)
Hash identifier: OE4EmZz5jBvCFb0z2YmktbB6vag7IFKBdrshOStTz7Q=
Subject key identifier: D5:EE:9E:4A:3E:0D:82:A7:0C:EC:40:5E:A6:A0:63:20:03:AE:22:FE
Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Certificate serial: 1C2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
Manifest number: 1C29
Signing time: Sun 04 Oct 2026 16:13:48 +0000
Manifest this update: Sun 04 Oct 2026 16:13:48 +0000
Manifest next update: Sun 11 Oct 2026 16:13:48 +0000
Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: q0lc6QVfti2+URpzbkMSp8r/BdMq0rD7NC+GUQSZi2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7210 (0x1c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Validity
Not Before: Oct 4 16:13:48 2026 GMT
Not After : Oct 11 16:13:48 2026 GMT
Subject: CN=6ac27b3c-38ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:38:7f:7a:8b:ed:e3:fc:d1:4b:ee:39:bf:
b5:a0:70:57:1b:4d:c3:ea:3e:74:1b:1b:c5:a1:76:
f4:6e:42:c6:c7:03:9f:e8:cf:bd:ad:6a:38:49:4b:
44:fd:a3:48:17:ca:a1:f2:4b:d3:28:c2:e9:6c:44:
54:d3:b0:a6:77:8a:a3:0b:d4:5b:bd:ec:90:d4:23:
6f:7a:54:33:99:b9:2f:5f:55:a2:23:b7:b6:83:ab:
75:85:73:b5:3c:d1:30:80:86:e0:3d:4a:4d:24:e4:
6a:15:56:2b:d0:d1:9b:96:2a:1a:34:84:96:04:00:
e3:66:98:dd:3e:39:0b:a8:37:8f:c0:ba:ea:56:ce:
78:8f:19:c0:df:50:fd:b1:9a:ef:41:5d:06:06:da:
9a:5f:a9:cc:74:6b:e1:d3:d9:28:6e:3c:53:23:2a:
f9:c2:e3:7c:db:b6:bf:1c:8e:63:37:81:65:e8:3a:
a8:bf:f1:1a:cb:f9:69:15:0d:e9:cd:8b:99:65:65:
b6:8d:94:32:71:59:39:f0:94:42:47:2a:38:30:ac:
a7:14:cc:63:f2:9e:ab:27:11:e8:39:54:eb:78:31:
84:aa:09:26:3b:d2:7f:27:a5:8b:b3:09:c1:b3:7b:
56:93:4a:5a:4d:f5:bc:3d:13:00:8a:89:40:e1:1b:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EE:9E:4A:3E:0D:82:A7:0C:EC:40:5E:A6:A0:63:20:03:AE:22:FE
X509v3 Authority Key Identifier:
keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:98:45:97:aa:ae:70:27:c3:ba:68:fe:67:f4:61:9f:49:e1:
03:ec:b1:97:fe:66:5f:5f:09:9c:7c:fd:35:c1:34:64:b5:d7:
ee:1c:56:03:c0:27:58:4c:66:5f:73:6e:b6:8b:d9:d0:66:de:
5f:b9:0e:45:f5:12:84:43:dd:86:a2:87:e9:f6:db:8f:71:8d:
ef:f0:46:7c:77:7a:67:14:b7:c7:c8:e4:52:3b:b3:11:fe:f8:
73:98:6d:c7:36:1d:e4:5a:5f:62:bf:2d:2b:5f:42:9f:28:32:
f5:bf:23:af:bc:f8:8d:e1:66:6c:89:68:b2:4e:ef:cc:e0:ae:
52:30:52:9f:df:80:37:8e:5f:a5:f1:33:3f:af:bc:4b:24:a2:
23:31:68:51:df:99:a3:bf:7c:65:c9:6a:a1:52:c9:e6:b0:dd:
77:21:4c:da:84:f7:c8:ad:76:2b:4a:ad:8c:81:8e:55:95:30:
b4:9b:f0:89:f0:3b:85:b9:39:1c:cd:07:f6:21:12:54:87:09:
d3:0d:ec:dc:93:e7:a6:e5:c4:71:88:23:71:d2:a3:17:f2:2a:
b8:ec:22:a4:04:41:08:93:cd:4d:95:f9:78:94:c4:2d:5d:5c:
b2:7b:67:9d:01:b2:33:ce:a8:19:19:68:a3:be:56:a5:45:ec:
a6:bf:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:18:31 2026 by rpki-client