
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier: 0RVXMaQGe6DI7Dnms08oNNCCQWE5Lcxs7mFODyLqqiI=
Subject key identifier: 95:E1:ED:F7:CE:8E:5B:6E:94:BA:85:78:41:5E:E7:89:19:64:C4:4C
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number: 0171
Signing time: Fri 27 Mar 2026 04:13:08 +0000
Manifest this update: Fri 27 Mar 2026 04:13:07 +0000
Manifest next update: Fri 03 Apr 2026 04:13:07 +0000
Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: W6MBWLUGwaJcJDZmtEU9t3PVd4oRfLtjFWUr9RKK6nI=)
2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: AJJ92VGVLucsvsIdaZU0nKfuQXZ8cJi9IfizP5I2ais=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Validity
Not Before: Mar 27 04:13:07 2026 GMT
Not After : Apr 3 04:13:07 2026 GMT
Subject: CN=69c603d3-ce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:0b:ab:e6:e3:96:c1:66:76:5e:3f:f7:3f:
3d:c9:44:80:47:ae:68:28:28:1f:d1:f2:00:58:97:
96:7a:a1:e4:15:2d:9f:29:11:6a:ae:64:0b:0f:2c:
ed:c3:82:86:04:8f:5e:56:a9:ab:27:2a:c5:d7:8c:
6d:62:ce:d2:47:c4:69:5d:77:16:11:6f:c6:10:75:
31:d8:38:09:28:a4:dd:db:88:57:b4:96:a1:16:d8:
a9:87:10:a2:95:db:cb:0b:7d:4f:41:8a:c8:88:db:
9e:52:89:b7:65:93:df:8f:be:70:2f:e1:ad:60:83:
3e:86:d8:18:c2:db:56:ad:ef:e6:e8:66:2f:1a:6a:
7b:aa:74:fe:b8:db:11:9f:5d:f6:d4:35:40:bc:90:
8c:4e:17:02:05:39:87:02:c4:38:a3:1e:0a:2b:f2:
b7:ec:67:29:2a:08:60:65:60:55:25:28:22:4e:34:
36:c7:79:06:94:0a:b8:92:6b:ad:b0:81:e8:ce:54:
be:aa:89:3c:01:a7:54:a2:f0:ec:02:96:54:6e:2f:
1a:1d:10:43:23:99:cd:58:fa:a2:4b:5c:3e:8f:8d:
9e:f9:a5:58:b3:bb:d9:36:f0:82:b6:8f:c1:e7:2c:
a0:93:39:42:99:40:7f:fe:59:65:3f:a7:d5:dc:f4:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E1:ED:F7:CE:8E:5B:6E:94:BA:85:78:41:5E:E7:89:19:64:C4:4C
X509v3 Authority Key Identifier:
keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:9e:39:02:a5:91:41:4f:e3:c9:ec:28:ee:75:5a:b2:b3:43:
ea:aa:d7:7d:48:55:e9:9d:88:ef:eb:fd:ef:e2:46:6e:de:91:
61:59:8d:6b:fb:7d:dc:96:da:bd:be:5b:d1:f1:e1:97:ec:e5:
44:3f:49:50:8e:e7:39:99:a5:61:a2:2f:fc:d0:61:c3:48:6f:
22:7d:18:3d:4d:df:1b:6b:c8:53:b4:d0:4c:0c:2f:56:69:8f:
35:c0:da:9f:70:b3:db:4b:96:bf:ac:37:b4:0f:fd:d5:4d:25:
2a:ad:ec:35:76:b3:28:ad:13:6e:d7:52:80:44:bc:24:93:ef:
37:74:6a:f6:18:b1:e5:2b:a7:46:bf:77:11:f1:06:b9:87:2b:
7d:24:20:8e:d8:be:d6:40:77:86:e0:cf:85:f3:f9:92:2d:a6:
4e:20:15:77:a0:62:74:73:a0:d9:19:f8:fc:d8:9f:7a:da:72:
07:6e:6b:80:aa:99:0e:ec:b8:eb:9f:21:0d:80:79:39:c4:3a:
67:45:4f:5f:50:93:1b:fe:c7:32:0d:6e:f8:a6:25:0c:38:b3:
73:8f:9e:16:d4:91:70:0a:6e:41:9d:65:3e:63:0f:d2:a0:53:
df:11:6f:f4:72:bf:77:50:af:d3:fe:c5:d6:69:e9:eb:25:30:
12:1b:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:38 2026 by rpki-client