
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier: hNnTTexqfwEoQY2jOmllyNYHIMfsENh3NEdbcfwKYyQ=
Subject key identifier: 0F:01:0C:41:C1:FC:E2:63:A2:2D:1A:6C:0A:A5:98:18:BC:49:75:C1
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 02CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number: 02AF
Signing time: Wed 23 Sep 2026 01:37:44 +0000
Manifest this update: Wed 23 Sep 2026 01:37:44 +0000
Manifest next update: Wed 30 Sep 2026 01:37:44 +0000
Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: Jx+ZXwlhbfk/h7Lf/Q8SRg4k6weAF2nD6yMvrG/Nsbc=)
2: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: QbYcHC8sEaaqzKI4aZ+szj1qFExhkAsjpip5wt7ACvM=)
3: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: eeLCdmHI4DVoBIKt5fe2w5/hqqdnpeD4LytUQmmILxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Sep 23 01:37:44 2026 GMT
Not After : Sep 30 01:37:44 2026 GMT
Subject: CN=6ab32d68-aa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:87:52:8b:74:d6:6d:ec:c8:cb:bd:b7:7a:
32:a5:8a:3c:23:15:99:dd:01:4d:06:0d:81:f8:a7:
3a:fa:6a:28:6c:f0:8b:bc:03:ff:0f:dc:68:a4:d7:
cd:16:bf:c3:5b:49:00:b7:8b:f0:2a:ed:66:ea:76:
70:6b:5e:53:9b:c1:1b:88:61:76:7a:93:8e:aa:e7:
28:c2:11:db:74:df:05:e0:56:ce:9f:0c:1a:06:8b:
4a:38:54:fd:ed:fa:5b:2d:a0:48:b7:bc:fb:ab:e9:
8c:0f:c7:75:bc:4b:e2:9d:6c:3d:7e:89:91:30:cd:
47:30:c4:fd:86:d3:56:3c:be:f3:94:a0:9d:af:ee:
0e:28:a7:f8:f7:d2:e3:76:90:2d:44:a5:ab:57:94:
c7:33:8b:2b:06:4a:b8:52:6f:39:5d:2a:53:63:01:
f6:ae:82:cf:e3:73:94:8e:7e:17:49:55:2d:bc:63:
a3:a2:a0:cf:09:34:8d:11:7d:4e:48:43:1f:df:c5:
91:40:c1:89:38:da:8f:b5:dd:ad:43:15:2e:c6:cc:
a0:cd:25:73:a4:d0:7c:29:a9:32:35:a8:e8:02:dc:
1f:2d:e8:8f:a0:72:9c:fc:d9:a9:58:e2:36:bc:47:
1e:0f:d9:0a:50:13:8f:b3:27:f6:46:09:f0:cc:5e:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:0C:41:C1:FC:E2:63:A2:2D:1A:6C:0A:A5:98:18:BC:49:75:C1
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:98:d7:3f:64:dd:e9:64:2d:5a:2e:9e:d3:ff:2a:fa:15:94:
08:55:6b:00:d8:3f:12:78:b3:dc:6b:10:63:0a:5a:88:f2:ae:
ad:5c:0f:72:b5:e5:13:5c:01:c8:fc:b3:24:4c:2a:cd:fd:87:
25:d1:44:0a:75:74:af:62:af:0a:b8:b6:12:6b:24:b8:59:66:
17:58:3a:af:fd:45:67:4d:30:d4:e1:5b:b7:61:e9:0d:e1:97:
3c:6c:ab:b3:5a:c9:c3:44:71:2f:01:d1:9c:21:15:1d:54:d2:
a1:8a:50:8f:78:2e:9d:1e:3b:b5:5f:61:b3:17:32:d6:19:98:
0c:ed:3e:24:62:f0:c1:5c:e7:d6:2d:ac:89:46:6e:dd:86:4c:
47:a0:e6:5c:44:98:17:c9:b2:55:8c:48:ca:84:17:c5:9c:86:
35:9f:e6:c8:c9:c0:d6:6a:d9:dc:5f:02:8c:6e:bf:73:88:e9:
ea:74:88:72:e7:e1:5f:d5:36:af:a5:de:48:a2:3c:57:66:0a:
a3:a6:ec:55:13:5f:cc:ba:21:3d:bb:8f:df:77:fc:83:1c:6f:
ee:1c:d4:87:e8:c7:1d:72:15:70:ba:f1:5e:a8:e6:5e:36:79:
1b:2c:86:61:bb:da:d7:ec:89:8b:e3:4c:69:01:c3:52:59:9d:
07:ac:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:42:05 2026 by rpki-client