
$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File: mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier: l9ha4MZ3DyRWO8q24MJiWkcgmoyesho32FCR1uuOSsg=
Subject key identifier: 3A:16:7C:C3:A7:D1:30:44:02:8E:A3:F6:02:FA:3C:52:C5:25:12:CF
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer: /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number: 013B
Signing time: Thu 23 Jul 2026 07:07:16 +0000
Manifest this update: Thu 23 Jul 2026 07:07:16 +0000
Manifest next update: Thu 30 Jul 2026 07:07:16 +0000
Files and hashes: 1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: BWrNtOOQEYREXIdypHKqXdcr1fCab0/kkPEM2A8d/mc=)
2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: mdzMDwj2X3Ua3FnRlc2HjSVQDPO8dF0xSRBjaAA05Ao=)
3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: A2j9A1LDxFn91KRfJQkzZYzQlvghcjV9LwvRtdCgpqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Validity
Not Before: Jul 23 07:07:16 2026 GMT
Not After : Jul 30 07:07:16 2026 GMT
Subject: CN=6a61bda4-7d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:7a:ce:ac:89:7c:46:bd:42:05:34:e2:c6:
90:48:27:ef:69:80:94:b6:0b:a5:2e:77:d9:c1:1c:
42:40:3e:9f:61:3d:ab:9c:d7:b5:3b:4f:b5:2f:df:
ae:f1:bc:91:25:4b:dd:ea:79:30:9d:46:79:9a:74:
64:52:b8:c3:dc:04:8b:13:e1:27:e4:c5:9f:35:13:
d8:b5:cb:88:98:54:d9:ec:df:1d:8b:b8:44:63:87:
d2:6f:e6:e0:bf:df:2e:3a:50:b6:ce:40:fc:cf:fa:
e6:66:58:27:2e:91:c2:84:1b:5e:3c:f0:9b:c3:7e:
b4:93:ae:ee:0d:09:1c:76:24:41:47:43:1a:f7:a0:
c8:39:de:5b:66:cc:45:cb:c2:01:a9:4a:c4:24:75:
b9:f5:d4:da:59:b9:72:d5:dc:f5:54:ec:fc:4f:db:
b3:14:ea:b8:90:19:4d:0f:a5:c4:13:87:62:7a:f3:
c7:a3:45:ff:90:59:2f:ba:31:b1:9b:ea:46:2e:ad:
f2:d7:31:de:41:6f:7a:08:3f:27:56:b4:af:27:61:
23:25:99:37:2b:e4:91:fb:95:8c:c9:19:38:77:51:
54:02:5c:01:1b:fc:07:44:a7:f3:a3:93:30:38:05:
48:3a:97:1e:ad:a6:9d:f8:7f:b3:fa:9f:b8:bc:93:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:16:7C:C3:A7:D1:30:44:02:8E:A3:F6:02:FA:3C:52:C5:25:12:CF
X509v3 Authority Key Identifier:
keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:07:a9:e3:86:1e:cd:f3:d9:e4:62:d9:6b:39:0d:c9:bc:aa:
69:fc:9e:d6:0d:90:ea:c8:f4:79:94:1a:24:58:ce:ab:c7:9f:
3b:23:8a:6f:c7:21:03:8a:e4:d1:29:04:f1:6c:0e:4f:68:24:
0a:ba:8c:9a:37:88:cb:ec:c0:bd:e4:34:f9:15:bd:16:16:93:
24:7e:3a:66:13:88:c5:bd:7a:24:74:ea:e0:38:7a:36:14:0d:
20:28:c2:13:4f:81:da:2c:1d:7f:27:35:29:a7:39:64:1a:90:
3c:ec:a4:18:0f:87:e1:cb:1d:14:5a:0d:2e:8b:79:2d:ad:c8:
a1:46:85:b1:53:e4:8c:94:e7:b3:9b:89:1c:41:17:a3:35:cd:
00:91:d9:a4:e8:06:17:e9:05:25:f0:67:ed:3d:82:a3:2f:db:
de:51:ee:ab:a1:78:ac:4f:a4:c1:ed:e9:dc:59:c3:1c:f2:35:
f2:a0:d6:fd:eb:a7:ab:a9:4f:9c:ec:8c:bc:5c:e9:1a:a8:1a:
17:ac:64:3c:74:1c:e0:2a:55:10:ab:a6:81:30:35:a5:be:98:
97:df:f3:55:68:d3:19:31:aa:ee:ec:86:a3:24:37:76:ec:04:
d7:0f:db:aa:6c:48:c2:d4:d1:89:b2:f6:05:bf:97:13:79:f2:
7a:da:a5:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc5QUMxMTAvBgNVBAUTKDk4Q0E0OTRERjY5REVERjYxNkU0MUQwNTlBMTRFN0Y2
ODc5Q0RGQjMwHhcNMjYwNzIzMDcwNzE2WhcNMjYwNzMwMDcwNzE2WjAYMRYwFAYD
VQQDEw02YTYxYmRhNC03ZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuip6zqyJfEa9QgU04saQSCfvaYCUtgulLnfZwRxCQD6fYT2rnNe1O0+1L9+u
8byRJUvd6nkwnUZ5mnRkUrjD3ASLE+En5MWfNRPYtcuImFTZ7N8di7hEY4fSb+bg
v98uOlC2zkD8z/rmZlgnLpHChBtePPCbw360k67uDQkcdiRBR0Ma96DIOd5bZsxF
y8IBqUrEJHW59dTaWbly1dz1VOz8T9uzFOq4kBlND6XEE4dievPHo0X/kFkvujGx
m+pGLq3y1zHeQW96CD8nVrSvJ2EjJZk3K+SR+5WMyRk4d1FUAlwBG/wHRKfzo5Mw
OAVIOpceraad+H+z+p+4vJPl4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDoWfMOn
0TBEAo6j9gL6PFLFJRLPMB8GA1UdIwQYMBaAFJjKSU32ne32FuQdBZoU5/aHnN+z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzlBQy82MDk0NkNENkE4
MDExMUVGQTQwNjc1M0JDNEY5QUUwMi9tTXBKVGZhZDdmWVc1QjBGbWhUbjlvZWMz
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21NcEpUZmFkN2ZZVzVCMEZtaFRuOW9lYzM3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzlBQy82MDk0NkNENkE4MDExMUVGQTQwNjc1M0JDNEY5QUUwMi9tTXBKVGZhZDdm
WVc1QjBGbWhUbjlvZWMzN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJgep44YezfPZ5GLZazkNybyqafye1g2Q6sj0eZQaJFjOq8efOyOKb8chA4rk
0SkE8WwOT2gkCrqMmjeIy+zAveQ0+RW9FhaTJH46ZhOIxb16JHTq4Dh6NhQNICjC
E0+B2iwdfyc1Kac5ZBqQPOykGA+H4csdFFoNLot5La3IoUaFsVPkjJTns5uJHEEX
ozXNAJHZpOgGF+kFJfBn7T2Coy/b3lHuq6F4rE+kwe3p3FnDHPI18qDW/eunq6lP
nOyMvFzpGqgaF6xkPHQc4CpVEKumgTA1pb6Yl9/zVWjTGTGq7uyGoyQ3duwE1w/b
qmxIwtTRibL2Bb+XE3nyetqlqw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:02 2026 by rpki-client