
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json)
Hash identifier: s4Ebl8JJowwxJD1+HwqYD8DGR3Ll9S2t0QVsunYWSLA=
Subject key identifier: 3C:4D:A9:40:D6:B2:36:13:16:CF:B1:B2:19:D2:3E:90:A1:F8:59:57
Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
Manifest number: 9F
Signing time: Thu 16 Jul 2026 23:51:19 +0000
Manifest this update: Thu 16 Jul 2026 23:51:18 +0000
Manifest next update: Thu 23 Jul 2026 23:51:18 +0000
Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: kof8pik3CawKUXf/ApD5PHdP1SF66zBkTqWNOYw+t4U=)
2: 3D85F9E653BB11F19AC0B954B9833773.roa (hash: kXyzSAEuWraJGLeRl8Ev4HWfqkONz/RaOPivNONbhAA=)
3: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=)
4: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=)
5: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=)
6: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=)
7: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Validity
Not Before: Jul 16 23:51:18 2026 GMT
Not After : Jul 23 23:51:18 2026 GMT
Subject: CN=6a596e77-0378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:ad:f2:a7:fd:db:f2:5d:d4:76:6f:bf:ca:
94:f2:ca:63:36:49:dc:ed:c7:24:92:60:99:ed:2a:
08:fd:13:99:87:3d:9d:2a:85:70:6d:2d:a4:6a:87:
8b:8c:f3:cb:00:de:c4:64:6d:54:66:87:7e:da:de:
86:41:ea:53:ad:ff:52:d1:89:bf:74:93:30:c3:9d:
2d:27:99:a5:74:57:52:d5:6c:33:99:dc:35:a5:9e:
c1:0e:30:e4:f2:72:09:d5:f1:68:64:7c:36:b7:43:
7e:d2:0e:b2:6a:72:df:3a:40:46:d5:b5:bf:1a:3e:
cd:41:06:18:6d:12:84:46:8d:63:0e:08:98:92:76:
63:a2:a2:54:e1:b1:d1:e6:fd:9e:b5:a6:12:87:b4:
b1:5e:55:fc:1e:34:8d:5f:8b:5b:11:64:ba:8e:18:
50:82:bc:20:d5:f5:fe:00:79:b3:8b:f1:14:4b:f3:
91:65:46:db:bf:7f:89:6c:7c:91:e7:29:53:43:96:
d7:1b:9a:32:ca:3d:2e:ad:1c:48:1d:eb:79:a2:08:
ef:ea:92:25:09:8a:c2:9f:15:88:56:30:6a:40:c1:
45:80:db:9c:92:ec:60:25:e7:18:19:4d:b8:95:2e:
90:60:d4:f5:0b:10:2c:ec:4f:62:f2:3f:3c:91:4a:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4D:A9:40:D6:B2:36:13:16:CF:B1:B2:19:D2:3E:90:A1:F8:59:57
X509v3 Authority Key Identifier:
keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:1a:46:9b:40:d3:6f:ba:d6:0e:07:55:39:e8:b4:48:0d:3a:
c3:b0:1a:3e:58:d7:7f:40:d8:6f:2f:da:61:77:c6:62:8b:34:
97:8d:81:dd:4d:00:36:88:49:6d:10:65:21:67:bc:d6:4e:9a:
10:7e:7b:8c:a2:8f:a5:db:70:04:3d:20:4b:e2:10:e4:74:d4:
b6:46:39:90:1a:4d:7f:95:bb:fc:1e:6d:a0:ca:51:b3:ec:16:
61:41:e9:7a:7f:9f:09:7f:a7:87:b6:6a:f0:cd:be:e0:0b:c5:
2d:c1:00:45:f3:5e:c5:9e:ef:2b:ad:f1:62:1e:21:a2:ec:b8:
31:db:eb:7c:2f:3b:ea:e5:b2:fe:60:a5:fc:18:14:cb:5d:4b:
02:32:6b:f2:dc:23:f3:ef:44:ff:86:92:93:7f:b8:d3:ea:65:
72:58:ac:83:f0:6f:d5:10:c6:5e:c7:8c:f5:84:51:ae:47:2a:
45:4f:28:b6:b8:d9:e7:ee:54:89:76:79:9b:3e:c3:6a:5b:99:
b6:09:84:4e:9c:2f:1a:04:32:d2:07:01:b0:d2:c0:0f:a7:71:
3c:75:45:42:a4:fd:9a:48:5c:b9:95:0b:7b:d7:0b:41:bd:0e:
a0:4d:0f:6c:9e:b6:d0:67:b9:e1:13:16:f0:d2:7f:d3:6b:03:
cc:34:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:23 2026 by rpki-client