
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json)
Hash identifier: lzVSxadQfqVEV6gzjQfwnWYLBBer69SdMjqV20Hp7Wg=
Subject key identifier: 04:15:FC:59:90:A2:61:64:72:29:0F:8E:7B:FF:A8:71:E4:28:D3:15
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
Manifest number: 0206
Signing time: Mon 19 Oct 2026 03:38:15 +0000
Manifest this update: Mon 19 Oct 2026 03:38:15 +0000
Manifest next update: Mon 26 Oct 2026 03:38:15 +0000
Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: CwONSsEtWFdh8C+Jg88RzB2zRMMDezYhBU/dHPo28M8=)
2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: 70legGmeGWDJLjLTpZoQ9AL6l+i0i0dYyab0cFhZx6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 03:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Validity
Not Before: Oct 19 03:38:15 2026 GMT
Not After : Oct 26 03:38:15 2026 GMT
Subject: CN=6ad590a7-f4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:64:d7:d3:ff:d8:f4:70:bb:9c:de:57:a9:
52:8f:9d:ee:4b:27:51:4f:c5:d7:0f:6c:8b:fb:89:
c2:1a:76:88:65:8d:3b:1a:6d:22:32:b2:7f:d9:7a:
03:98:6e:f4:70:75:76:60:4f:d1:00:77:5e:96:6d:
bf:28:11:37:b0:e4:6c:66:51:72:42:1e:35:1d:12:
5b:2f:ec:29:93:0a:46:61:6d:2a:bc:3f:d8:b4:be:
73:f3:da:0a:c4:f1:f9:c0:da:da:f9:e5:5c:a0:b6:
89:4b:09:fb:28:b1:88:d2:8c:5c:b8:ca:13:e0:98:
3d:92:80:fc:34:5c:48:42:9a:d2:5d:53:ca:64:e4:
38:4a:ca:4c:43:a7:35:1a:ef:0a:15:bd:56:12:f8:
53:f5:ec:a9:2e:90:42:51:20:a0:6f:35:00:83:36:
25:d1:78:82:38:fe:f2:fb:73:6a:06:a4:c8:d3:81:
59:88:71:d2:ac:ac:d9:e6:17:f4:3c:5e:30:85:1d:
ef:67:90:9b:93:04:ef:64:26:15:b6:87:cd:1e:4a:
a8:73:cd:08:30:50:9a:ab:46:3d:dd:c3:b7:9e:f5:
97:01:68:75:ef:58:61:86:8d:39:57:36:f4:eb:3c:
a6:d3:8c:5f:2b:6e:e0:b2:6f:a4:64:00:8f:c6:5a:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:15:FC:59:90:A2:61:64:72:29:0F:8E:7B:FF:A8:71:E4:28:D3:15
X509v3 Authority Key Identifier:
keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:8b:4d:1a:ad:73:2a:ed:e2:64:c3:ae:c1:0f:1c:71:4d:96:
38:9c:16:bb:b1:3a:51:70:db:da:1b:b9:81:21:66:db:c2:59:
c4:e2:44:49:ab:d8:21:74:51:f3:52:50:e1:fa:6b:a3:f6:70:
57:e6:1e:c2:25:51:26:39:bb:bd:97:fe:7f:75:0b:4d:62:04:
d0:88:7c:83:87:54:fd:9b:7a:e8:8a:99:35:0c:6c:d2:48:8c:
31:39:0a:8f:ea:83:dd:8a:8c:a0:d2:4a:01:67:1b:15:c6:89:
0a:56:e4:d0:51:89:99:41:ea:5b:f0:b8:d7:3c:92:5b:0a:be:
2d:df:2f:45:30:53:bf:9d:94:8d:d8:91:e4:82:26:b2:d4:77:
2f:84:c2:cf:03:32:90:38:64:bb:50:04:c1:e7:23:e2:09:e6:
7d:6f:5a:4b:39:1e:1d:df:6c:77:04:a3:24:93:3b:95:f8:4b:
6a:e5:a3:85:34:6e:d0:f8:c9:2c:cf:d4:04:97:0b:40:99:be:
0d:a7:34:60:03:9b:34:b5:8d:56:6c:e0:38:8f:c9:34:7d:ac:
d8:d0:cd:d2:c1:fe:71:c6:7f:3c:d0:5a:5e:a9:cb:d8:86:d3:
17:ca:0f:3a:3f:20:cf:c6:3e:dc:f1:da:8b:ac:26:76:10:09:
40:09:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:04:49 2026 by rpki-client