
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
File: Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft (raw, json)
Hash identifier: pGWngrkPVm6KrvCfa2QsbmOKipCgz5V4zqrRMNWoivs=
Subject key identifier: CF:29:79:38:51:8F:FC:A0:C4:B7:7E:31:49:5A:27:3E:8E:15:D2:06
Authority key identifier: 31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D
Certificate issuer: /CN=A913270F/serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
Manifest number: 8E
Signing time: Fri 09 Oct 2026 08:15:55 +0000
Manifest this update: Fri 09 Oct 2026 08:15:55 +0000
Manifest next update: Fri 16 Oct 2026 08:15:55 +0000
Files and hashes: 1: Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl (hash: thN+MnnK4ddhIx7y5i9DLF3XX+jBoaC23lsXJKyZr/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl
rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913270F, serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
Validity
Not Before: Oct 9 08:15:55 2026 GMT
Not After : Oct 16 08:15:55 2026 GMT
Subject: CN=6ac8a2bb-dab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:01:54:18:bc:f9:46:5e:f9:ab:9d:20:06:
f2:34:26:4d:76:53:7b:0b:04:50:d1:bb:26:b1:eb:
1a:d0:aa:7d:46:8b:56:7d:07:5c:c3:bd:0d:98:35:
d8:34:94:67:1a:df:fa:ed:77:9c:1c:95:bf:d9:27:
e5:2b:92:f5:41:01:df:f5:61:1a:27:1f:29:7c:34:
8c:15:2e:73:68:52:56:18:a8:72:d8:10:56:0b:c9:
ab:e0:e0:fe:0d:25:a2:45:6b:77:f5:cf:47:41:97:
62:fc:52:14:98:6b:7a:ef:b7:61:c3:a3:a2:2e:c1:
51:b8:49:91:7d:ec:8e:e1:2f:c4:d2:a2:e0:f6:52:
60:70:e6:dc:d9:67:35:87:75:3a:b0:15:b7:03:81:
15:bb:51:6e:21:f7:d2:60:49:8c:5d:dc:5a:b8:fb:
04:eb:9c:3c:aa:1d:5c:9c:7b:a9:15:24:d4:b2:77:
98:48:f9:97:12:cb:94:b0:b1:56:93:54:c9:74:f1:
a9:42:96:e2:b4:44:93:f9:55:21:06:0e:98:8c:17:
f4:6e:73:fb:27:84:7d:7c:fc:3c:a7:ce:8f:0e:22:
ec:af:a1:cc:77:8f:ba:89:4d:d8:ba:ae:6d:b7:0a:
e0:6d:1e:c9:4d:e6:fe:bf:4e:58:93:db:95:5b:24:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:79:38:51:8F:FC:A0:C4:B7:7E:31:49:5A:27:3E:8E:15:D2:06
X509v3 Authority Key Identifier:
keyid:31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c3:0e:0d:fc:f2:97:a2:a2:4c:4c:74:4c:4d:76:21:af:72:
0f:63:4e:f8:76:00:93:4c:f9:a9:98:6f:69:93:5d:2b:7f:1c:
b3:e4:41:88:db:97:67:38:4d:74:c8:7e:3d:a0:92:c5:0a:cb:
40:68:3d:1d:6a:04:84:a6:03:cb:f9:51:67:ea:16:3e:ea:e3:
e0:a6:f4:14:f4:06:b8:dd:9d:15:e0:6a:7e:7a:d0:13:d6:87:
78:be:26:f5:52:56:b8:fd:49:ba:3a:c2:82:f0:3e:e8:3a:5d:
f3:5c:15:5e:d5:14:5e:39:c9:5b:0a:9f:ae:9a:0a:26:58:c8:
cb:d6:43:34:be:ba:76:ed:52:99:b9:19:4e:6f:8b:2a:2c:9b:
c1:85:ee:8e:7e:7d:a9:90:e5:e5:65:09:23:4b:f6:d9:e1:21:
02:04:2e:84:a2:9a:8a:87:93:32:7e:10:87:18:47:ce:40:43:
a0:bc:93:fa:42:3f:01:c9:0a:bb:c3:fe:a5:11:5a:90:10:f5:
09:8e:97:7a:59:87:87:eb:34:a2:51:f3:34:96:f1:1c:1d:20:
42:e7:4f:6a:3f:08:1b:6d:60:be:73:61:cb:b6:10:30:42:b6:
60:aa:b1:ac:97:78:ac:63:99:2d:ed:9d:02:26:6d:5a:79:5a:
72:25:48:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI3MEYxMTAvBgNVBAUTKDMxQkZDMTM3M0ZCMzdDMTM5QTJFRTdDM0E5NkRGRUM0
RTdFMzc5MUQwHhcNMjYxMDA5MDgxNTU1WhcNMjYxMDE2MDgxNTU1WjAYMRYwFAYD
VQQDEw02YWM4YTJiYi1kYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx/IBVBi8+UZe+audIAbyNCZNdlN7CwRQ0bsmsesa0Kp9RotWfQdcw70NmDXY
NJRnGt/67XecHJW/2SflK5L1QQHf9WEaJx8pfDSMFS5zaFJWGKhy2BBWC8mr4OD+
DSWiRWt39c9HQZdi/FIUmGt677dhw6OiLsFRuEmRfeyO4S/E0qLg9lJgcObc2Wc1
h3U6sBW3A4EVu1FuIffSYEmMXdxauPsE65w8qh1cnHupFSTUsneYSPmXEsuUsLFW
k1TJdPGpQpbitEST+VUhBg6YjBf0bnP7J4R9fPw8p86PDiLsr6HMd4+6iU3Yuq5t
twrgbR7JTeb+v05Yk9uVWyTWhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8peThR
j/ygxLd+MUlaJz6OFdIGMB8GA1UdIwQYMBaAFDG/wTc/s3wTmi7nw6lt/sTn43kd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjcwRi9GNEEzNkY2MkVG
OUYxMUYwQjhENUIzRUY2ODZGNTZCQy9NYl9CTnotemZCT2FMdWZEcVczLXhPZmpl
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01iX0JOei16ZkJPYUx1ZkRxVzMteE9mamVSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjcwRi9GNEEzNkY2MkVGOUYxMUYwQjhENUIzRUY2ODZGNTZCQy9NYl9CTnotemZC
T2FMdWZEcVczLXhPZmplUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHMMODfzyl6KiTEx0TE12Ia9yD2NO+HYAk0z5qZhvaZNdK38cs+RBiNuXZzhN
dMh+PaCSxQrLQGg9HWoEhKYDy/lRZ+oWPurj4Kb0FPQGuN2dFeBqfnrQE9aHeL4m
9VJWuP1JujrCgvA+6Dpd81wVXtUUXjnJWwqfrpoKJljIy9ZDNL66du1SmbkZTm+L
KiybwYXujn59qZDl5WUJI0v22eEhAgQuhKKaioeTMn4QhxhHzkBDoLyT+kI/AckK
u8P+pRFakBD1CY6XelmHh+s0olHzNJbxHB0gQudPaj8IG21gvnNhy7YQMEK2YKqx
rJd4rGOZLe2dAiZtWnlaciVIrA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:05:36 2026 by rpki-client