
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File: mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier: R9M8EhTAF17tvkdOkaQeFDrnYNIEukUTV+/cTqP4TWA=
Subject key identifier: 85:A8:18:7E:17:2C:AF:02:B9:6B:8E:EA:61:24:14:88:A6:93:04:FE
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer: /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial: 1261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number: 123C
Signing time: Sat 04 Apr 2026 17:01:00 +0000
Manifest this update: Sat 04 Apr 2026 17:01:00 +0000
Manifest next update: Sat 11 Apr 2026 17:01:00 +0000
Files and hashes: 1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: +fw5KsAPR3XYE20pX55ZP3X5iXa1+Xqj6IOV0YwimDs=)
2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: V0cr8aX14uWEEWz5HgA49PAr418Rwt7O1IgwtljgIiE=)
3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: uw3x4cCrEOXVGSx9HLNoaCGi5i7d3mdJuRAyyNS0hCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4705 (0x1261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Validity
Not Before: Apr 4 17:01:00 2026 GMT
Not After : Apr 11 17:01:00 2026 GMT
Subject: CN=69d143cc-5968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:b2:2c:d7:6c:fd:1b:1d:d1:9c:d0:11:73:
58:5e:c6:97:0a:71:33:65:2f:48:25:2a:f1:bd:47:
8f:a5:57:41:ad:38:a0:a3:0d:ba:5d:e5:93:b6:46:
97:cd:7f:ce:af:d5:00:60:8f:33:fa:f9:e3:8d:1c:
51:65:3d:87:af:22:b9:28:da:4d:11:33:ea:5f:20:
3d:c7:f8:54:8b:43:5c:b6:d2:e2:47:ed:f5:72:99:
3b:6c:0b:be:cc:84:75:5a:af:d6:1f:c8:02:b6:74:
31:ac:4a:91:5c:fa:b3:91:62:53:ed:94:e6:da:fc:
06:73:76:2d:41:6e:60:94:e1:75:95:78:de:47:5a:
0f:ee:38:61:71:9f:b0:07:ca:43:b0:ec:f5:78:81:
8e:a5:f7:7e:05:61:2a:b8:89:7e:93:c0:63:9a:53:
c7:c1:3a:13:e9:43:c4:0b:12:19:fb:fe:69:81:15:
0d:26:20:ee:0b:b4:67:53:77:ec:02:f9:33:74:5c:
73:7f:82:bd:28:6b:f1:e2:61:03:65:94:f6:50:56:
3e:36:5a:46:55:e3:e1:a1:c9:9e:7e:86:ae:fb:fe:
24:5c:94:ca:5f:35:1e:46:9e:4a:af:81:d1:6c:3d:
e0:a2:15:52:0e:3b:43:03:6d:1d:f1:70:bc:06:d1:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:18:7E:17:2C:AF:02:B9:6B:8E:EA:61:24:14:88:A6:93:04:FE
X509v3 Authority Key Identifier:
keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1c:c7:cb:f5:70:6c:16:db:32:f9:49:c9:4f:bb:71:ed:e7:
7d:96:6b:81:ce:6b:1c:b1:b6:3f:7b:2f:de:5c:7d:d0:c9:76:
50:ae:0b:ee:4c:fd:ab:9b:b1:e0:f3:fc:23:3b:de:cb:41:e6:
ae:c6:9f:77:37:6f:2b:f1:f3:ec:4b:24:3b:b5:4d:34:da:30:
31:89:41:3a:9d:32:e1:f7:3c:aa:46:b5:aa:e2:62:1d:23:fd:
de:1c:c0:f9:b9:f0:4a:c2:87:16:0c:a1:c8:d2:7c:78:56:63:
47:2d:38:5f:29:fc:9f:03:d2:9e:38:08:2e:37:b8:bd:da:60:
06:aa:cc:29:5d:ef:7d:3c:d8:ed:ad:3a:8e:1f:ed:b9:62:98:
e2:ca:69:7b:a1:42:97:be:4c:a0:2d:4c:7d:67:04:b0:c9:fa:
3f:93:68:e3:7f:36:76:44:27:7f:0b:0c:b5:0b:3c:39:a8:7f:
9b:12:0a:3e:33:d8:37:7d:bd:be:0a:60:1c:86:31:6e:1c:90:
f5:66:d1:d2:3a:1a:cb:6d:04:26:73:3f:0e:3b:6c:7d:3d:b9:
e4:26:1a:37:e3:65:8b:3d:aa:17:7f:ec:ef:bd:29:13:ed:0f:
06:89:23:fd:c6:d2:7e:c5:d5:da:ea:33:12:83:b4:c7:48:bf:
3f:0c:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:16:34 2026 by rpki-client