
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier: RU62vu5sRt0V2j4oEWrr4TTjoAGv61/mhxl1e1cFSC0=
Subject key identifier: DB:6F:0B:58:78:C2:27:13:32:87:CB:A6:0B:43:79:73:F7:36:14:F8
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number: 0213
Signing time: Wed 13 May 2026 03:08:03 +0000
Manifest this update: Wed 13 May 2026 03:08:02 +0000
Manifest next update: Wed 20 May 2026 03:08:02 +0000
Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: LXqa4sELxqFXfmzWo52b7G0+mcACalroyBoyTGDfYko=)
2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: WlT7lqcgc4c8+rWeXt+Y5JcXRKuZvK0wiGPxDwUbSb0=)
3: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: Oxk9ItIFF7Cmn++8Qhf8B9/Jba23NXxEuE7o6lYsVNY=)
4: E9874B2A16D011EF90793868C4F9AE02.roa (hash: RDszepU6uUEnaTneHbLYTo9ekedmlaHSehV5QBWdDbs=)
5: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: L4NVil8pbyS/cOY/ej3K8v/jrMsLv9IfqmTy0v9YRG8=)
6: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: /UOXs33KnAIdS9eZMavjXXvZDkm7O2iN3QjaCdMcSZo=)
7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: 7QH1OiU8+y0kM0Xbew8STqzznYlr3akTS6fkDWFomuY=)
8: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: f4OVUhW0bi1lo1n9ZSiR+RCv7DhSrpC0lFB7A/Kd8HU=)
9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: jqwk3bmRPDf7C3aKoz+TsrX90WbUHOfRvQL1M86whDk=)
10: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: bcg53TLs5nFR2EV4CBcEFe8zIM0whJbmabWS8ZS93/Q=)
11: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: XLyiIx6bH4MWL4cXY1N6tcvmekDJmpJls17+hd3FRlA=)
12: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: YUDn/ImHnu8Aga92avplp7MOrOxQVfmR+LNkM6xYKp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Validity
Not Before: May 13 03:08:02 2026 GMT
Not After : May 20 03:08:02 2026 GMT
Subject: CN=6a03eb12-fd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:04:d3:3b:d0:ce:a2:22:a5:af:90:7f:12:
d1:8f:e0:77:f0:e8:aa:dc:cf:7e:6b:bd:46:e9:77:
51:ae:3c:57:c0:21:9f:21:5d:83:e8:88:39:9f:6b:
d7:72:ea:7e:10:cb:32:de:0b:e3:ff:b5:66:86:b7:
de:ce:d6:54:71:4b:ce:f9:80:31:ac:e8:d6:7d:aa:
5d:fd:75:dc:31:f6:6d:8c:32:e2:f6:9a:73:f5:fb:
d6:5f:f4:9e:fd:c9:b4:10:ad:ec:8a:76:9f:f9:9c:
7d:d6:fa:eb:2b:29:73:5d:2c:b4:57:46:4e:0e:c2:
ae:de:18:ed:34:84:a8:fd:01:36:61:e0:fe:92:e7:
3e:85:39:94:68:03:02:db:13:c4:9e:13:81:6e:89:
ba:ec:21:bf:e3:78:77:90:14:fd:87:09:8d:8f:38:
71:0b:72:6b:8c:d3:d1:b8:29:f6:78:84:1d:68:6b:
89:4e:ac:54:ae:73:c4:02:bb:8d:1c:af:1d:0f:9b:
f8:27:7d:c0:4e:a3:07:df:c5:19:f0:ee:a9:b3:4a:
13:ab:92:cf:ab:c9:2a:cb:7d:11:7c:fc:bc:72:f8:
1d:ac:f1:08:b5:e6:92:e2:4b:0d:41:c8:c0:b9:64:
56:b1:6f:02:36:66:b3:9a:4e:17:8e:11:f7:99:4d:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:0B:58:78:C2:27:13:32:87:CB:A6:0B:43:79:73:F7:36:14:F8
X509v3 Authority Key Identifier:
keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:c0:2c:4c:3d:d7:50:30:15:40:9c:63:6a:6d:30:ce:dc:73:
b6:05:91:1d:6a:c0:0d:f1:a9:16:d3:dc:6f:43:a7:0b:06:d7:
29:fe:58:ef:dc:67:41:a3:78:81:c6:cb:80:93:09:85:21:76:
34:07:7e:eb:86:b9:36:be:bb:10:57:14:9a:a7:16:68:db:0c:
27:f8:78:ff:d2:43:3d:ce:2a:35:3f:79:e1:40:9b:83:13:44:
6e:13:61:d3:4c:1c:91:eb:8e:d3:e5:ee:93:60:b3:a0:37:d3:
b3:9c:62:16:3a:c3:26:d7:ef:95:0c:01:0f:e6:c7:6d:e8:bf:
38:fe:67:0d:82:d5:ef:fd:b8:1c:53:bb:ff:23:4f:76:a3:15:
d7:da:6e:00:df:32:8a:f8:9b:ed:03:47:20:0f:ad:fc:1e:37:
09:9a:3d:f7:2a:2d:8c:f1:2f:28:3c:d4:79:19:61:a1:76:a9:
ed:7f:49:b9:e8:6e:76:69:09:e8:45:80:48:57:bd:3d:fe:4c:
da:3a:db:c1:34:da:50:f5:ae:99:f0:a3:17:c0:b4:b0:0b:3b:
81:6a:41:3e:b8:04:11:54:5c:59:5c:db:fc:86:bb:44:e6:41:
b2:76:56:31:33:40:84:ae:24:50:87:89:2a:9c:0e:02:f0:e6:
9c:8a:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:42 2026 by rpki-client