
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json)
Hash identifier: 0ZNB0rveEcBm6dLXwJZi/8Wa+sN2XFnSri7JhtXaNTw=
Subject key identifier: CC:31:47:FE:D3:AE:CF:99:5F:34:95:AB:00:97:B9:E6:DF:8E:2B:FB
Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
Manifest number: F1
Signing time: Sun 05 Jul 2026 07:07:36 +0000
Manifest this update: Sun 05 Jul 2026 07:07:36 +0000
Manifest next update: Sun 12 Jul 2026 07:07:36 +0000
Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: cxC9Ar3VG7/Ufm+FFCai10i/xTE6s/j81h1x5vsXhtU=)
2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: kS//3dTOTrM7yUJmDDxRTEV4J2aIX0y6Eq3RVYtn7qg=)
3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: 5jsdXF6s05KmKUh4GwJf4zmDmvtnxukC7D1ccx81YGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 07:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Validity
Not Before: Jul 5 07:07:36 2026 GMT
Not After : Jul 12 07:07:36 2026 GMT
Subject: CN=6a4a02b8-2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8c:80:4d:03:df:04:eb:27:05:6d:f7:18:21:
ef:8a:f8:ac:b1:a6:f8:64:14:97:27:35:53:b0:24:
16:0a:3c:4b:b9:34:6b:5b:b9:20:65:ca:fa:3c:88:
53:0e:2f:fa:2b:09:1f:5c:05:92:1b:1b:4d:99:f1:
6f:73:41:41:5d:c9:95:09:04:83:bf:b6:e0:e2:eb:
d4:d3:0d:ce:a2:7a:64:3b:65:22:69:7a:c7:4a:00:
87:f9:f3:ee:0c:90:94:2c:3d:68:5f:d0:6b:8d:93:
04:fc:09:50:09:2f:ab:cf:ec:59:d5:16:85:f1:16:
50:27:f9:17:72:b3:28:22:eb:14:8e:af:3a:a2:44:
d5:08:a7:1d:53:cc:08:1a:6d:c8:74:35:4b:a1:23:
ac:f5:2d:f1:97:ef:c8:b7:30:aa:4b:48:20:8d:23:
30:c7:4b:f3:84:83:e0:7b:26:7f:58:2c:26:42:27:
36:df:1f:e7:4c:06:2c:d5:a0:da:83:f0:76:9a:75:
26:77:13:02:fd:3e:92:36:6a:28:a5:75:de:17:c4:
e5:fc:45:3f:22:d3:25:2b:b6:97:97:5d:3a:cb:d1:
78:90:1b:79:27:46:08:13:00:90:cb:79:e6:68:dd:
4f:5d:c7:bc:17:41:c4:e4:6e:4b:e6:47:f5:a9:cf:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:31:47:FE:D3:AE:CF:99:5F:34:95:AB:00:97:B9:E6:DF:8E:2B:FB
X509v3 Authority Key Identifier:
keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1d:fc:74:d2:5f:ca:6f:c5:bb:7f:a0:b2:c8:bb:d4:ff:db:
37:ea:11:4d:2e:18:eb:9f:02:96:8f:52:b3:98:4a:00:08:a9:
3a:9b:a4:18:bb:72:18:11:12:8d:b7:6c:ed:75:ba:83:e4:1f:
76:83:38:0b:b8:37:40:88:f8:98:f7:cb:ea:f3:b3:14:be:91:
72:e7:67:e9:b9:8c:5b:43:b3:03:30:16:57:64:63:a3:d1:5d:
03:58:15:cb:34:f7:ab:2b:12:5e:76:97:44:8f:3f:c9:9b:36:
2a:de:d1:41:29:61:13:38:39:b8:8c:88:10:10:e1:32:60:c0:
44:b8:65:8b:9f:da:9d:f4:69:f2:09:13:e6:b0:74:da:fb:fa:
82:f6:2b:1f:6d:38:7b:65:46:42:88:fe:e7:d2:0e:89:9a:54:
a0:2d:01:36:6b:2e:21:30:be:31:03:db:50:8c:57:22:0b:0f:
96:00:77:82:f6:31:60:58:d2:fc:ca:35:31:e5:4b:ae:ca:61:
67:38:ba:f3:14:4a:41:45:9d:02:d9:e9:74:52:7a:e2:86:34:
94:70:93:ae:26:75:8c:5b:88:fa:5b:a0:83:b5:e7:56:41:83:
52:de:28:84:81:e3:66:b4:4c:75:3f:b8:54:31:ef:fd:be:e4:
af:4e:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:59:48 2026 by rpki-client