
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
File: MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft (raw, json)
Hash identifier: 5trGMjORql6j0Zpkc5aCuA+6pm/ezqiBu2NwIGSB0T4=
Subject key identifier: D4:F4:F1:52:3E:DB:D9:E1:6A:CE:51:41:19:E3:B4:A9:4B:F1:71:55
Authority key identifier: 32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76
Certificate issuer: /CN=A91C1D71/serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
Manifest number: 4C
Signing time: Fri 09 Oct 2026 09:08:11 +0000
Manifest this update: Fri 09 Oct 2026 09:08:10 +0000
Manifest next update: Fri 16 Oct 2026 09:08:10 +0000
Files and hashes: 1: MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl (hash: 7OZvny1HvzHuSG35HzDfqaPjMpDnwhDNVX7AkYJjGGQ=)
2: FE3124A04E6A11F19EF4B4E9A9833773.roa (hash: 5G0WnfmhAWln0DoFaMqx4jKc4Si31Bq5mzX8fwHCaN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl
rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1D71, serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
Validity
Not Before: Oct 9 09:08:10 2026 GMT
Not After : Oct 16 09:08:10 2026 GMT
Subject: CN=6ac8aefb-7795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:a8:23:5e:eb:ee:cb:86:54:05:25:f2:d2:
29:87:c8:72:9b:11:22:7e:87:e0:b5:90:c4:7a:59:
7a:b2:40:a1:51:76:08:dc:fe:87:ba:f1:90:99:52:
66:eb:19:ca:33:35:52:35:c1:76:d5:17:04:b6:2b:
16:a4:c7:0f:7e:e2:d8:00:50:d6:64:7e:90:97:4f:
fa:ec:c7:94:c1:45:89:d7:57:eb:1c:f4:c8:78:67:
64:f9:86:e3:69:05:55:e0:ae:28:46:76:9a:e1:a2:
92:50:bf:e1:c9:10:87:27:d4:bc:4d:29:62:e2:29:
bc:c5:4c:65:d9:01:15:7d:73:a6:2f:76:3f:01:c3:
c2:27:7c:fc:cf:06:a3:90:3b:23:b5:fd:1e:ad:10:
b2:44:35:ae:e0:d6:ca:50:ea:ad:5e:fc:2a:3f:7d:
fb:27:b2:2b:37:10:c1:f7:1e:6a:e6:5b:4e:29:cd:
64:35:3c:29:ce:d2:a5:36:33:3e:0a:08:55:9c:74:
ba:01:42:34:c2:72:30:b5:64:36:5a:d0:72:0b:ae:
3f:66:ce:cf:e8:59:ab:6a:42:03:96:0e:dc:bc:a6:
77:bd:18:a8:c3:37:04:8f:d0:ae:1f:94:6f:fd:8a:
39:73:3e:01:f5:76:60:69:d7:19:3f:4d:31:cb:f3:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:F1:52:3E:DB:D9:E1:6A:CE:51:41:19:E3:B4:A9:4B:F1:71:55
X509v3 Authority Key Identifier:
keyid:32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:e7:c9:e0:23:f1:4f:2b:18:ab:2d:02:47:ef:29:bf:fd:5a:
b8:e8:1d:ee:4a:82:0d:9f:12:ba:18:5b:a8:cb:95:20:88:83:
99:38:ff:93:e8:88:1f:35:aa:51:1b:8b:f0:aa:5f:e5:db:4d:
4a:5e:20:b1:a6:a5:10:8a:26:66:88:65:65:08:58:48:41:53:
3a:3f:60:89:6f:e6:ae:80:da:44:b7:c9:fe:2e:62:e9:54:0d:
a1:c6:13:2d:30:35:39:39:4c:9f:ca:c3:ef:78:66:e4:ba:63:
d4:39:6d:10:01:1a:37:e5:41:a8:f6:17:20:5a:d3:b3:67:e3:
23:e4:b5:74:e2:74:cd:99:ed:b9:94:39:20:65:ef:ad:4a:1b:
68:67:b4:d7:2a:d2:07:5b:eb:d7:40:45:2b:8f:5c:db:b6:87:
32:12:25:94:2e:ed:50:59:08:0d:56:d4:f9:06:87:2b:99:55:
ac:7a:bd:e9:22:0e:86:37:3b:3d:2c:e2:3e:96:2f:bc:ad:e6:
5b:b4:45:7f:4b:79:fe:91:16:b1:5d:18:2a:cb:49:aa:a9:59:
db:b1:41:64:0e:97:8c:66:d5:74:8c:3b:3b:69:17:a1:de:ea:
f0:5c:ee:c2:1c:70:da:85:06:08:db:e8:3c:83:f5:7f:99:62:
08:6a:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:39:48 2026 by rpki-client