
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json)
Hash identifier: CJnJmIbRwwaCFfaqICvi30OUlGKraGkA34T0dPubYyU=
Subject key identifier: 84:D0:EB:5B:8A:D3:06:80:4A:48:D4:32:9B:26:FC:A4:3E:2F:08:8A
Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96
Certificate serial: 3577
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
Manifest number: 356E
Signing time: Fri 24 Jul 2026 14:34:47 +0000
Manifest this update: Fri 24 Jul 2026 14:34:47 +0000
Manifest next update: Fri 31 Jul 2026 14:34:47 +0000
Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: AQYI8ejBD4RVi8BgGKUTrZ2DuFmKS/DKS1Ela2wST40=)
2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: rxf3DHMFewfYjEmU/j0BdMyIOehzcE11rbLSMoX1rKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 14:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13687 (0x3577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96
Validity
Not Before: Jul 24 14:34:47 2026 GMT
Not After : Jul 31 14:34:47 2026 GMT
Subject: CN=6a637807-7234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:ca:c2:7e:8b:c3:3a:44:62:f0:dc:77:6f:
ac:1e:83:02:79:93:bf:1d:58:f0:52:0a:7e:cf:44:
cf:bb:2c:10:fe:2e:57:67:56:7d:47:7c:8d:2f:75:
1f:9a:ce:13:ac:77:fa:b6:d2:c8:db:44:64:fe:26:
89:f2:6e:94:65:cc:20:9a:ca:51:41:2a:99:86:0a:
89:26:ec:32:a8:e5:76:2a:da:9a:3b:ca:44:0b:d6:
82:47:0d:90:33:9f:14:96:f3:04:d9:8e:b3:64:21:
73:b9:d6:d0:db:47:6a:cf:da:d9:6f:f5:37:0a:fc:
74:a3:ba:51:01:85:e5:e6:78:f0:c9:a8:54:4b:67:
66:fa:84:0f:a8:8d:e0:e3:24:07:61:8d:56:2c:91:
ed:17:14:79:5e:15:a6:e4:55:6a:40:f6:48:c4:79:
23:90:d2:1a:2f:0c:42:2d:85:12:0f:bb:ca:31:da:
59:6c:f3:58:99:6f:d4:72:9d:57:7f:7c:08:3f:9d:
ca:3b:6e:65:46:04:e2:c6:0f:06:67:ed:1a:b4:f5:
ac:56:6b:1a:29:6d:a7:2d:44:25:86:bb:6f:41:2d:
6c:4b:70:59:73:08:af:11:fa:48:76:0c:b2:2e:96:
99:48:83:2c:30:5e:cd:05:78:50:41:68:c9:8b:36:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D0:EB:5B:8A:D3:06:80:4A:48:D4:32:9B:26:FC:A4:3E:2F:08:8A
X509v3 Authority Key Identifier:
keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3c:b9:ed:80:33:47:04:d3:50:ca:18:de:d6:5d:ac:d6:18:
63:71:78:3d:17:95:31:b3:64:83:85:9c:96:c4:50:07:f6:a6:
dd:c4:47:cc:28:75:49:9c:ce:08:01:14:f6:bb:14:70:22:e5:
db:37:89:f2:79:b9:cf:8d:d3:9f:be:95:4f:56:da:4f:7a:5e:
79:11:d4:72:2c:fa:1e:a4:7e:a8:8f:9f:a7:95:ec:af:77:b0:
06:e3:52:45:a1:5d:f1:6b:60:a5:6a:dd:1e:7d:c9:f3:85:57:
9a:6e:f3:12:84:97:cd:f8:28:ff:01:18:f3:7f:0e:7d:48:9f:
a1:96:0a:8d:10:aa:73:1c:bc:ea:2d:2f:20:a5:c2:64:a3:8c:
a5:e3:ad:93:28:3a:68:8f:ee:7c:22:b0:02:e2:3b:08:88:6b:
5a:a3:af:c0:a5:fa:ac:96:17:5c:f9:84:64:f5:ba:64:83:f7:
20:28:36:8b:51:e3:7f:f1:f8:f7:1a:83:c8:32:1f:95:a3:bb:
42:8b:d1:a8:a5:f1:4c:8d:cb:e1:48:b9:47:59:ec:07:e0:04:
a2:07:98:e5:02:5c:dd:1b:4d:94:5f:5f:a9:30:49:00:12:16:
46:c3:26:50:6e:3d:14:73:13:aa:dd:62:82:f5:2c:83:73:59:
a3:24:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:14 2026 by rpki-client