
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier: dAd482sigO8pm1eliLmO2R+IZkdF9+A88jDiozhGOVg=
Subject key identifier: C3:F9:95:7A:75:1A:A5:12:91:2B:DD:64:3C:28:C9:BD:ED:8A:19:C1
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number: 028E
Signing time: Thu 23 Jul 2026 03:12:25 +0000
Manifest this update: Thu 23 Jul 2026 03:12:25 +0000
Manifest next update: Thu 30 Jul 2026 03:12:25 +0000
Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: iAIJl24CLIxxIENJgWfXjPnx3cNX0IVhzrdsAMqDZD8=)
2: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: /Xmk4tz+mCwExZGnlLqC5Zkmn9dPaTMI2+1ZySEn0OI=)
3: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: QbYcHC8sEaaqzKI4aZ+szj1qFExhkAsjpip5wt7ACvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Jul 23 03:12:25 2026 GMT
Not After : Jul 30 03:12:25 2026 GMT
Subject: CN=6a618699-3183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:ef:ad:2e:32:97:8e:62:43:bc:fc:3e:70:
f9:7f:44:bd:b8:5b:7d:15:87:d5:9b:a7:32:73:57:
13:ec:f1:5a:f9:da:28:e8:46:c5:ec:22:4b:0e:47:
eb:f9:1b:6d:b9:d6:d6:9c:c1:97:8b:16:c6:3e:86:
ff:3d:ab:f8:08:0d:92:3a:6e:64:03:c8:7b:6c:8d:
cf:f6:d4:90:d6:55:94:90:89:8e:35:75:5e:38:00:
d7:7d:5d:fe:f7:40:d6:9b:b9:70:56:35:de:08:28:
fc:fd:4d:f7:0e:d7:a9:52:28:04:af:87:cc:6e:62:
ec:7e:c1:6d:12:dd:ae:88:73:83:88:36:80:49:aa:
33:6f:35:97:3c:e2:97:2d:9c:aa:7e:37:89:93:cd:
db:04:51:23:5c:44:7a:59:a0:b4:4d:2b:99:0d:e0:
08:9f:2d:41:1a:67:55:f0:05:38:52:50:ee:80:5f:
79:e8:19:53:d4:5c:c5:4f:15:c0:13:60:b1:eb:00:
5b:67:9d:d1:61:db:4a:4f:06:39:61:84:6b:65:1b:
c6:e1:a2:22:a8:17:47:b7:df:88:84:44:4e:41:a7:
92:6a:7a:7a:ea:e7:06:3a:13:8b:45:4d:81:dc:90:
1a:bc:9c:56:d4:2f:0b:9e:55:64:f9:ab:67:c2:33:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:95:7A:75:1A:A5:12:91:2B:DD:64:3C:28:C9:BD:ED:8A:19:C1
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:43:c2:32:88:ac:3e:d6:b9:52:3c:ad:db:5e:4a:7e:ce:9b:
49:d6:a1:af:9a:22:0b:40:4c:a1:e5:d2:fb:ca:77:f8:0a:61:
ab:3e:bc:4a:60:05:23:39:1c:cb:d3:35:ba:53:bf:50:4b:0e:
46:50:31:f8:66:63:15:ec:5a:27:dc:fc:12:90:74:0f:d9:5e:
7d:aa:e0:f7:d4:82:53:bf:b7:7e:fc:08:ab:f1:ce:41:90:23:
bc:5b:73:24:fa:56:9d:e0:b9:f0:c7:5a:b4:a4:a3:b7:ef:89:
97:09:0c:79:6c:77:55:63:44:f3:4c:51:22:6c:3c:76:28:22:
c2:92:84:c0:c1:8c:2d:96:fc:99:26:f1:b5:bc:70:c2:59:5f:
ae:42:42:27:96:9e:91:48:e1:a3:25:ba:e7:a4:d8:02:7c:c1:
5c:cc:09:a8:aa:1e:3b:ad:b6:a0:22:7a:3c:ab:2b:6f:d1:87:
6c:43:aa:75:98:06:11:9a:70:37:9c:b5:03:3d:d8:ba:c8:50:
b6:ee:b7:8c:70:ce:97:30:d2:a9:8b:58:b9:9a:ac:18:9a:0a:
a2:d2:76:2b:75:0a:ac:27:b6:12:45:b4:a6:87:bd:17:3d:b5:
01:c0:44:52:14:3c:08:14:68:45:74:10:89:bd:6c:32:34:de:
15:1b:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:23 2026 by rpki-client