
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier: kOfYNAP5xQj34pqarN7guE5L4P3dd/KeNlpxNPCHQsg=
Subject key identifier: FD:6F:C6:98:22:A1:C0:E3:BB:E7:CE:EE:79:38:41:BB:C3:A2:9B:40
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial: 0A03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number: 09F1
Signing time: Sun 20 Sep 2026 19:46:56 +0000
Manifest this update: Sun 20 Sep 2026 19:46:55 +0000
Manifest next update: Sun 27 Sep 2026 19:46:55 +0000
Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: tbPNsIPromycvJpZXGcrOnc2dMywaqfrJTVCThxr9xw=)
2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Hj2gvQPptbIyBsk+GZQr8HEa82gNIwoOpKASxetT7F4=)
3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: H91fXqxV7rY9zHcxYCuUe8A5mKb0ae920Vx4iWfH6XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Validity
Not Before: Sep 20 19:46:55 2026 GMT
Not After : Sep 27 19:46:55 2026 GMT
Subject: CN=6ab03830-4c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:c9:76:47:eb:6b:87:83:30:cb:f5:76:45:
27:74:65:2f:31:27:60:32:3a:31:2a:b8:b4:fe:0f:
68:d6:13:ce:60:0e:fe:d9:4c:cd:4c:46:c2:01:a6:
64:07:7d:60:41:0f:40:ff:70:40:4c:d7:11:41:06:
d7:59:0c:ad:84:d9:7a:18:95:1e:fd:e0:0e:27:d9:
47:cb:8b:be:b5:e8:e0:16:18:08:32:30:46:d7:53:
63:c7:e5:ee:92:9a:dd:4c:da:cf:e0:5a:2e:88:41:
6a:45:65:db:f9:b8:6d:ad:06:59:ca:64:cc:60:18:
a2:4e:50:82:97:0a:70:8b:ad:7d:fb:dd:80:2c:b5:
97:35:fa:be:00:ca:2f:6f:22:e3:4a:17:42:ee:9e:
68:b7:a4:4c:31:e7:54:49:71:fb:59:76:65:b0:0d:
8f:a0:56:d2:0d:c5:d7:15:2e:87:06:30:d6:5d:26:
0e:02:f1:f7:ff:3b:54:a5:f6:03:95:37:08:7d:70:
35:c5:7c:d8:02:9f:e6:b9:32:e3:a6:93:d4:e0:64:
ef:27:af:ec:e7:eb:e6:e8:8a:1b:93:98:e3:59:47:
bf:92:78:79:21:3a:f7:4a:3f:e8:7d:95:d5:c5:3d:
7b:45:61:28:4c:df:d2:8f:b4:6d:a9:56:f4:83:c5:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6F:C6:98:22:A1:C0:E3:BB:E7:CE:EE:79:38:41:BB:C3:A2:9B:40
X509v3 Authority Key Identifier:
keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:ec:9e:3a:18:1f:65:d7:05:e5:79:e7:d9:df:58:03:a6:ab:
dc:40:cf:fc:5c:3f:e3:d8:d4:9f:25:2b:06:c7:fd:52:c0:91:
e4:ab:9e:1f:c7:e7:a4:1a:9b:e3:d2:3b:99:e1:fd:d2:e2:71:
1a:07:00:1d:ad:e5:ef:e8:9b:d2:62:8e:64:a3:79:20:de:a9:
62:08:93:6e:eb:2c:e0:2d:04:bf:47:7d:03:60:22:0a:5a:54:
5a:8f:92:52:2c:ce:f6:51:12:35:48:13:48:fc:1f:5b:7a:37:
b2:99:73:8c:ee:b5:15:67:80:c6:e3:e5:3d:24:cb:3c:89:08:
8d:ee:a9:74:ad:1f:a2:a1:4b:6c:c6:3d:ee:bc:84:c6:ef:17:
d7:45:c6:79:61:63:aa:ee:cd:90:97:c1:e9:3d:61:e2:02:61:
33:ce:38:4a:08:98:c3:e3:b7:cc:0a:70:2d:a3:c0:5c:71:76:
9f:72:2a:65:35:06:8d:37:b9:ce:7a:44:83:53:5d:7d:de:2f:
ef:ec:e6:e3:b2:00:ad:29:7a:26:38:6d:d8:4e:0f:51:84:d0:
fa:0a:5c:ab:f1:9c:cd:ee:b6:bd:b4:63:39:c2:19:57:55:b6:
60:69:1b:31:8d:9f:65:69:d9:d2:fb:39:81:bb:7a:9f:57:be:
72:63:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:58:31 2026 by rpki-client