
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json)
Hash identifier: mT8DIUIF1fVyk70ONF52Gw6Dkj3cYeDZVh9Ldi/nLl4=
Subject key identifier: 3E:1B:04:E6:B3:97:98:E8:89:E1:EE:D8:25:7D:39:1D:ED:E7:84:CB
Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
Manifest number: 01F8
Signing time: Thu 21 May 2026 03:18:47 +0000
Manifest this update: Thu 21 May 2026 03:18:47 +0000
Manifest next update: Thu 28 May 2026 03:18:47 +0000
Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: cAJGvKeZ67bFGZm32URK+PzkrHoA/okPR6+fkHEFN8c=)
2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: F1vpQpUV3bw/FrQH9h0dEOMw7zfdTnJwa9DPHf/lxCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8
Validity
Not Before: May 21 03:18:47 2026 GMT
Not After : May 28 03:18:47 2026 GMT
Subject: CN=6a0e7997-22bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:04:dd:6e:03:df:7b:1f:35:3b:e0:2d:ad:
00:fe:7c:d6:5c:9d:af:5e:b8:e7:ce:1a:b8:da:20:
9a:8f:51:d6:d9:21:51:45:cf:ec:5f:76:55:1a:07:
6a:7e:01:52:5d:06:98:34:f4:99:7a:f5:9c:6f:f5:
fc:ee:71:91:b8:34:45:37:c8:12:a8:ca:c0:5f:be:
14:05:27:7a:cd:47:7c:83:c7:13:30:fd:ca:da:8b:
af:ed:71:0a:4d:b1:1b:9e:62:24:d9:bd:9a:4c:ee:
65:b5:ed:e6:9a:58:db:7c:64:16:d6:6c:7b:19:13:
bf:a0:22:0c:73:be:80:2e:47:8a:72:d1:e3:1a:63:
2f:7c:2a:dc:03:2d:30:b3:2c:a9:64:db:50:17:96:
93:d4:30:a2:bb:d7:3d:40:f3:12:65:df:32:bc:78:
4f:59:e6:77:b3:57:75:7b:d1:3e:cb:34:8d:54:0c:
3b:47:20:dd:0e:3f:67:f5:26:04:d4:c7:d9:40:74:
50:ca:bb:8f:87:94:13:b4:a2:b3:b7:9d:50:3a:c5:
29:08:73:f1:75:cd:a2:f8:8a:4e:a3:40:97:38:a4:
4f:b7:35:4c:3d:ea:94:c5:92:7f:d5:ab:c6:00:9a:
16:a9:b5:76:90:9f:d9:72:a9:32:59:2b:4a:9b:47:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:04:E6:B3:97:98:E8:89:E1:EE:D8:25:7D:39:1D:ED:E7:84:CB
X509v3 Authority Key Identifier:
keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d8:4a:d9:fd:f5:11:39:be:77:5c:ce:8c:bc:d9:8c:2c:84:
8f:23:a3:9b:d5:2c:48:ca:4f:47:cb:0c:17:e5:7e:d7:d1:3a:
9c:b3:9b:29:36:09:42:32:9d:37:0c:b9:ea:b5:ee:db:26:78:
05:01:14:23:0b:b6:ce:57:85:5e:88:71:76:db:42:06:4c:0d:
92:53:ff:1a:5e:5a:74:21:93:60:fe:a3:70:bc:35:e1:d8:ce:
8a:dd:f4:23:de:bb:d4:f8:83:4d:a4:97:aa:f8:26:61:88:24:
18:68:44:61:ce:05:d1:78:c4:fe:5d:c8:5f:9a:99:48:72:fa:
4c:7b:a6:ef:95:ae:aa:12:ef:ac:c9:91:15:55:44:8f:9f:16:
f3:6b:13:78:45:55:f0:f9:a0:c9:17:0d:bb:b1:82:18:13:c3:
28:d1:9e:1c:c5:0a:b5:9c:60:a0:ef:73:01:84:29:10:fe:fa:
1d:4d:8b:90:eb:51:c0:1f:d4:8b:2b:ea:12:09:93:75:99:c5:
e3:06:dd:cd:00:38:20:63:24:a6:da:d1:f9:dc:97:54:21:fd:
5a:6d:bd:d5:ac:dd:d2:9d:88:fe:f2:44:1c:d5:d0:b0:ff:9c:
74:7d:29:f6:e4:73:95:23:2d:40:3b:3d:d3:69:36:dd:2c:46:
b1:62:c3:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3QTM3RjgyNDRE
OTM3MDJFQTgwHhcNMjYwNTIxMDMxODQ3WhcNMjYwNTI4MDMxODQ3WjAYMRYwFAYD
VQQDEw02YTBlNzk5Ny0yMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TkE3W4D33sfNTvgLa0A/nzWXJ2vXrjnzhq42iCaj1HW2SFRRc/sX3ZVGgdq
fgFSXQaYNPSZevWcb/X87nGRuDRFN8gSqMrAX74UBSd6zUd8g8cTMP3K2ouv7XEK
TbEbnmIk2b2aTO5lte3mmljbfGQW1mx7GRO/oCIMc76ALkeKctHjGmMvfCrcAy0w
syypZNtQF5aT1DCiu9c9QPMSZd8yvHhPWeZ3s1d1e9E+yzSNVAw7RyDdDj9n9SYE
1MfZQHRQyruPh5QTtKKzt51QOsUpCHPxdc2i+IpOo0CXOKRPtzVMPeqUxZJ/1avG
AJoWqbV2kJ/ZcqkyWStKm0cdxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4bBOaz
l5joieHu2CV9OR3t54TLMB8GA1UdIwQYMBaAFDAU3Th7F/M4hzoqejf4JE2TcC6o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkUxRS8yNzg4MTdDMDVD
MTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6aUhPaXA2Tl9na1RaTndM
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkUxRS8yNzg4MTdDMDVDMTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6
aUhPaXA2Tl9na1RaTndMcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqNhK2f31ETm+d1zOjLzZjCyEjyOjm9UsSMpPR8sMF+V+19E6nLObKTYJQjKd
Nwy56rXu2yZ4BQEUIwu2zleFXohxdttCBkwNklP/Gl5adCGTYP6jcLw14djOit30
I9671PiDTaSXqvgmYYgkGGhEYc4F0XjE/l3IX5qZSHL6THum75WuqhLvrMmRFVVE
j58W82sTeEVV8PmgyRcNu7GCGBPDKNGeHMUKtZxgoO9zAYQpEP76HU2LkOtRwB/U
iyvqEgmTdZnF4wbdzQA4IGMkptrR+dyXVCH9Wm291azd0p2I/vJEHNXQsP+cdH0p
9uRzlSMtQDs902k23SxGsWLDfQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:42 2026 by rpki-client