
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json)
Hash identifier: qrVfCzqhcjjJr0LGt9FJ1uSfgySDs2+zpr7ZwQr92pg=
Subject key identifier: 84:1E:59:09:C3:ED:4B:08:85:47:79:B7:A3:50:4D:E6:FD:41:B6:E5
Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Certificate serial: 0D4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
Manifest number: 0D45
Signing time: Thu 10 Sep 2026 18:04:20 +0000
Manifest this update: Thu 10 Sep 2026 18:04:19 +0000
Manifest next update: Thu 17 Sep 2026 18:04:19 +0000
Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: EwGokJXGC1hhJlss2yDixFJc0ypFvQDPJtvDPtnML2A=)
2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: 6RXCUtuNRAX3VWDYFd4VJq3F82wcddefS/3XHjReS6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CAC7, serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224
Validity
Not Before: Sep 10 18:04:19 2026 GMT
Not After : Sep 17 18:04:19 2026 GMT
Subject: CN=6aa2f124-d746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:75:06:c1:30:18:34:14:5e:87:8e:cb:80:
c2:26:78:f0:46:85:3a:56:b5:41:bc:f9:09:e3:13:
5c:c0:68:4d:c4:c8:e4:2b:aa:52:79:52:10:bf:a0:
f1:bc:a4:47:32:94:ec:7d:27:b5:d8:af:41:10:35:
ee:2d:7e:c5:f8:71:50:0c:cd:7f:58:50:f3:c3:a9:
d7:f0:a5:46:e6:18:13:c9:0a:44:ab:40:b9:a1:3b:
24:6b:e0:34:31:f5:8c:dc:41:b3:af:12:12:b2:de:
9d:dc:33:48:46:e3:84:b4:14:37:09:86:5d:32:d1:
35:88:d7:6a:26:ce:71:35:c7:a8:f2:94:ce:50:b0:
ad:bb:25:b9:52:63:d7:36:1e:d5:10:f9:f3:33:64:
52:15:bf:86:8c:85:f0:de:e0:42:3a:1e:68:05:88:
19:d7:38:6c:e6:66:f8:d9:83:2f:db:67:e2:28:94:
74:f2:a8:b7:5d:52:c1:8c:7a:cb:d7:45:d7:5f:42:
a5:3f:d9:3d:5c:99:c7:97:74:53:15:76:b9:6e:0b:
89:0e:9a:a8:60:24:b4:eb:03:41:e6:12:97:db:3d:
b9:7c:ac:f3:a7:a0:71:0d:c4:0e:37:5d:c0:ba:b9:
c6:00:61:c1:a8:45:79:fe:80:06:08:e7:69:2d:d0:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1E:59:09:C3:ED:4B:08:85:47:79:B7:A3:50:4D:E6:FD:41:B6:E5
X509v3 Authority Key Identifier:
keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:b3:c6:d4:1d:39:dd:10:92:d5:19:63:a9:81:7c:e1:f9:
12:46:1e:75:c3:e6:d0:eb:5e:35:d5:98:7f:2b:2f:25:e5:b4:
35:dd:58:2f:db:66:47:08:db:19:98:b2:0a:43:8c:1b:54:96:
a7:a6:7b:b0:13:72:68:48:46:be:86:9e:6b:63:03:93:92:ba:
da:fa:0f:b8:06:ff:0b:c2:0a:14:dc:c7:9c:d3:92:31:89:97:
5e:46:ad:58:65:58:33:ed:cf:c8:bf:e6:c9:fa:94:fa:68:f2:
fb:09:3c:f1:7c:1f:ba:1f:c9:99:b3:0a:67:b4:4f:f2:e8:2e:
9f:b0:e7:31:78:c5:b1:37:01:c9:3d:18:cd:5b:57:bb:1a:81:
fb:51:bd:ef:c7:f7:f9:eb:6b:63:67:f1:7c:17:56:65:0d:42:
34:d1:39:00:c0:b8:86:db:11:ec:fd:5e:e7:cd:e9:1f:37:7e:
ce:84:fd:d4:3a:0e:bb:7b:6e:89:c7:f3:b7:ed:5f:15:61:07:
9a:81:5f:1f:84:e2:2a:41:6b:38:24:ff:60:73:ef:f3:be:3f:
78:ca:74:cd:19:c9:bf:fa:bf:6c:9a:70:6a:1e:6c:07:84:72:
06:ac:85:1c:b3:0f:0b:a6:6e:70:99:74:d5:f7:c0:d6:b7:86:
ea:2c:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:15:44 2026 by rpki-client