
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json)
Hash identifier: p0AXvqrV8m+/IpdP8pQo7RuY186oycxiJ7ow2d+svPw=
Subject key identifier: 8E:69:F2:99:48:78:31:F0:87:E3:A9:62:B0:4E:42:A0:11:39:C1:D5
Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
Manifest number: 010E
Signing time: Mon 31 Aug 2026 06:29:14 +0000
Manifest this update: Mon 31 Aug 2026 06:29:14 +0000
Manifest next update: Mon 07 Sep 2026 06:29:14 +0000
Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: 9zoYnRRuU6p668wd64Coxrx6QSptP1AZBXEBpOSR/aI=)
2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: kS//3dTOTrM7yUJmDDxRTEV4J2aIX0y6Eq3RVYtn7qg=)
3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: 5jsdXF6s05KmKUh4GwJf4zmDmvtnxukC7D1ccx81YGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 06:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D
Validity
Not Before: Aug 31 06:29:14 2026 GMT
Not After : Sep 7 06:29:14 2026 GMT
Subject: CN=6a951f3a-0e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:b2:47:ed:5b:d4:b1:5a:77:c6:c0:ae:31:
9f:48:f5:5e:d0:46:40:bb:e6:65:b3:bb:59:ca:97:
fd:53:00:1b:79:55:cf:52:a2:fb:96:56:82:37:d4:
77:dd:dd:27:b2:0d:27:b2:ac:76:96:e5:a6:9c:73:
55:8f:b0:36:5d:47:1d:2d:33:75:7d:6a:0d:63:0d:
4c:e8:ff:84:78:00:6c:7c:59:c0:96:a7:7f:bd:ef:
cd:75:c6:bc:01:5d:7c:18:54:61:9d:ed:2d:49:2c:
56:64:3c:29:82:2e:02:c4:a2:de:4c:71:7e:2d:fc:
82:91:5f:87:33:dd:2c:55:79:f4:5d:fb:48:e6:62:
31:0e:14:28:75:75:46:15:3b:51:db:b5:03:ce:e7:
38:91:bf:81:fd:0d:c6:3a:90:65:fb:c0:1e:6a:c1:
8e:c7:37:f0:64:c4:5a:02:bf:b2:0f:b1:29:77:6d:
f8:6d:1b:e2:fa:1f:1e:d5:17:5b:48:89:07:f8:91:
f1:98:dc:b7:97:9d:d9:a9:28:76:1b:04:a9:38:39:
48:56:11:01:63:39:92:4f:bc:0f:a6:82:1b:b7:b3:
d6:c4:da:6a:d3:a9:2e:f0:53:b2:09:f4:26:80:c5:
0c:e9:8b:64:67:9d:3b:91:a0:ac:bd:03:6f:cc:f9:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:69:F2:99:48:78:31:F0:87:E3:A9:62:B0:4E:42:A0:11:39:C1:D5
X509v3 Authority Key Identifier:
keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:71:a1:84:0c:36:b6:d9:ff:c0:d8:d5:9f:be:8f:bc:fe:63:
35:d1:d7:14:d0:98:50:67:c6:c7:bb:0f:4f:e4:c4:81:8e:1a:
49:04:04:7a:fb:90:81:d8:1e:06:a9:e6:cb:05:c8:d1:20:b5:
08:cf:8b:f7:6d:aa:cf:69:16:e4:cd:9a:a4:d1:49:41:bd:09:
b1:0d:98:91:69:18:e8:af:47:8a:b3:60:a3:79:1d:fc:43:00:
cc:0a:d9:9e:11:e4:99:05:60:0b:0a:2b:71:27:26:22:4c:5b:
f2:5f:db:b6:8e:04:35:68:26:80:7e:a6:17:ea:34:7f:6b:1e:
2f:e7:d3:9f:a7:24:8d:cf:2b:2a:5e:f1:ee:90:a2:84:77:26:
b5:b6:57:41:d9:42:48:73:fc:8e:8e:66:1f:04:d3:a7:2b:bd:
31:81:e8:cb:1e:26:4d:22:90:10:c6:40:87:a1:fe:33:31:d7:
ba:7a:c4:0a:7f:61:d8:2b:01:a3:a0:c5:41:9b:00:81:0f:a3:
76:7f:95:89:86:af:8b:0a:f5:37:6b:3a:26:fb:e1:73:58:4e:
49:48:33:04:be:d1:bc:f8:19:d7:eb:f1:1c:e2:1d:bc:a3:2f:
4c:1d:9c:cb:26:71:e3:61:66:28:7c:50:63:bb:41:d3:af:df:
35:d0:76:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDMDgxMTAvBgNVBAUTKDMyMUVFRkI4MDg1MUZGODJGRUI3Q0I2QzA4QTk0RjVE
RDJEOTI3MEQwHhcNMjYwODMxMDYyOTE0WhcNMjYwOTA3MDYyOTE0WjAYMRYwFAYD
VQQDEw02YTk1MWYzYS0wZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3qWyR+1b1LFad8bArjGfSPVe0EZAu+Zls7tZypf9UwAbeVXPUqL7llaCN9R3
3d0nsg0nsqx2luWmnHNVj7A2XUcdLTN1fWoNYw1M6P+EeABsfFnAlqd/ve/Ndca8
AV18GFRhne0tSSxWZDwpgi4CxKLeTHF+LfyCkV+HM90sVXn0XftI5mIxDhQodXVG
FTtR27UDzuc4kb+B/Q3GOpBl+8AeasGOxzfwZMRaAr+yD7Epd234bRvi+h8e1Rdb
SIkH+JHxmNy3l53ZqSh2GwSpODlIVhEBYzmST7wPpoIbt7PWxNpq06ku8FOyCfQm
gMUM6YtkZ507kaCsvQNvzPkMKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5p8plI
eDHwh+OpYrBOQqAROcHVMB8GA1UdIwQYMBaAFDIe77gIUf+C/rfLbAipT13S2ScN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0MwOC9BRkZDMERFNDEx
N0MxMUYwQjIzNENENzhDNEY5QUUwMi9NaDd2dUFoUl80TC10OHRzQ0tsUFhkTFpK
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0MwOC9BRkZDMERFNDExN0MxMUYwQjIzNENENzhDNEY5QUUwMi9NaDd2dUFoUl80
TC10OHRzQ0tsUFhkTFpKdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYXGhhAw2ttn/wNjVn76PvP5jNdHXFNCYUGfGx7sPT+TEgY4aSQQEevuQgdge
BqnmywXI0SC1CM+L922qz2kW5M2apNFJQb0JsQ2YkWkY6K9HirNgo3kd/EMAzArZ
nhHkmQVgCworcScmIkxb8l/bto4ENWgmgH6mF+o0f2seL+fTn6ckjc8rKl7x7pCi
hHcmtbZXQdlCSHP8jo5mHwTTpyu9MYHoyx4mTSKQEMZAh6H+MzHXunrECn9h2CsB
o6DFQZsAgQ+jdn+ViYaviwr1N2s6Jvvhc1hOSUgzBL7RvPgZ1+vxHOIdvKMvTB2c
yyZx42FmKHxQY7tB06/fNdB2EQ==
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:22 2026 by rpki-client