
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json)
Hash identifier: 9nDK64KdZenAXBnELB52WVd4LrlI54m6BX/ElvZuQ7c=
Subject key identifier: FB:13:38:30:04:2F:DD:5D:D9:BB:F7:54:13:CE:58:04:2F:C2:9F:5F
Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Certificate serial: 05C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
Manifest number: 05B7
Signing time: Sat 24 Oct 2026 23:06:06 +0000
Manifest this update: Sat 24 Oct 2026 23:06:06 +0000
Manifest next update: Sat 31 Oct 2026 23:06:06 +0000
Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: nL3UqEqwDasu+BbtyS8VYkLgwz/wGD/L7vxliZocm8g=)
2: FA73196C6DE711F1AA720C725CA30FBC.roa (hash: pCO2JAGPlXln8a9u0qBW16Bj24ZR218132+aPis8m+k=)
3: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: I6IT2owDLfV5TvMKrbrd8HwemeT+BKI0jfx24fbp7QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 23:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1473 (0x5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Validity
Not Before: Oct 24 23:06:06 2026 GMT
Not After : Oct 31 23:06:06 2026 GMT
Subject: CN=6add39de-aa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:7b:de:d5:17:29:7f:7c:25:4e:34:ca:13:
65:23:42:6f:18:ce:c0:25:f1:9a:e1:1e:eb:fa:df:
76:ce:05:61:a9:16:08:90:2c:b0:6e:aa:54:5b:79:
6f:6f:1f:86:95:18:f7:5b:70:e9:90:3d:1d:5b:29:
82:96:5b:33:9a:ad:7a:10:d6:c9:ec:4c:56:40:33:
d9:eb:8f:f1:9c:d6:8e:b3:74:3b:bf:05:3d:cb:fa:
82:6f:5a:0f:cc:76:a0:c5:37:05:13:bf:23:69:07:
eb:e0:8f:97:aa:f4:c5:b5:06:8b:be:1e:87:a4:23:
a0:53:55:fd:8e:01:47:af:a3:83:f1:f1:f3:81:c5:
c7:1f:0f:a8:10:45:c7:f8:3b:c9:99:e4:47:e9:4b:
58:ae:9a:b7:ea:c7:e0:6b:cf:bc:1c:68:a4:1c:8f:
ed:eb:83:e6:0c:df:5f:82:38:66:ee:95:9f:c5:7c:
22:6e:1d:f8:f3:33:24:7f:85:dc:24:df:e0:2a:1f:
98:1a:d5:fe:4f:e4:91:41:ae:a1:df:8d:75:8a:27:
68:ab:ff:d6:a3:34:cf:56:31:0d:60:e3:5b:92:54:
6a:e3:f4:90:76:8b:64:fd:c2:01:4f:4c:6f:61:42:
e0:80:42:0b:81:74:99:37:8f:82:40:5b:25:3e:e0:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:38:30:04:2F:DD:5D:D9:BB:F7:54:13:CE:58:04:2F:C2:9F:5F
X509v3 Authority Key Identifier:
keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:83:79:9c:ff:2a:58:fa:6c:90:10:b6:cd:97:69:19:56:68:
89:fe:0f:a3:0d:be:b8:f1:73:8b:5b:6e:f3:5b:7b:9e:11:41:
66:7b:a3:98:ef:c0:fc:08:6c:7c:ec:58:b8:e8:f6:b6:bc:e8:
f9:08:d7:a8:2b:ec:e6:f0:c0:cc:20:fb:9c:90:fa:b8:60:0f:
a8:5d:8c:af:43:8e:6d:a1:15:a0:0a:d9:9b:99:54:42:86:6b:
63:35:78:17:8d:1c:5e:a6:34:42:f5:22:42:3f:3f:57:82:fd:
54:ff:61:00:e6:81:72:43:1c:5f:9e:4e:41:2f:2a:07:70:18:
7a:c1:be:5f:4d:09:3c:51:de:a9:dd:5c:ab:54:00:94:41:09:
41:8b:42:e6:aa:b0:5e:a8:a3:eb:1b:2f:28:37:d3:98:08:28:
54:7f:de:cb:b7:fc:94:5e:14:7f:3e:05:6b:9e:bf:fb:9c:c6:
b5:b8:a2:73:38:c0:e4:8a:1d:a9:ff:0d:b7:00:67:64:d2:64:
e4:2c:ae:87:c3:fc:4a:cc:d6:eb:03:fe:99:95:2b:af:57:9a:
cb:d7:3f:e9:f7:c1:86:c3:b3:b8:c2:6b:60:45:03:d9:dd:0a:
7e:4b:63:1d:54:90:37:b1:f2:dd:78:47:2e:f8:60:62:7b:40:
b8:c3:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:02:32 2026 by rpki-client