
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier: wN2RrfvoZfnhSAwR+0XdffCjyut3uO6XwOz7/uDobvE=
Subject key identifier: 65:86:2D:FE:F2:DB:7F:DA:E0:99:32:7F:6B:70:80:77:99:BF:F8:1E
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number: 0250
Signing time: Wed 25 Mar 2026 02:00:26 +0000
Manifest this update: Wed 25 Mar 2026 02:00:26 +0000
Manifest next update: Wed 01 Apr 2026 02:00:26 +0000
Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: MWq8eQ5zQcZ5qdn/c2VVApkmfMY+pGUEU5LoZQpUmTw=)
2: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: HzpFQGz5CVxBl9sbcVJvLDzRvcHkaj2Jp7niriD1Y/8=)
3: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: gHUta7y8pC3d2TOZ0QshxXr62KyKz6DtLyfNYCQhLTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Mar 25 02:00:26 2026 GMT
Not After : Apr 1 02:00:26 2026 GMT
Subject: CN=69c341ba-9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:2f:08:e8:81:32:88:d8:d2:df:7a:33:6e:
6e:06:fa:05:f1:a4:17:26:c5:8b:2c:e7:d0:70:cf:
8e:e9:ea:7e:70:91:82:ad:ab:5c:36:e4:0e:2b:97:
f5:23:68:3a:84:5a:d4:fc:b7:b8:44:02:d0:d8:1e:
7c:22:0f:a4:40:2a:10:aa:c3:7f:ba:ed:57:e2:9e:
b5:22:7e:81:0f:5f:a1:eb:6b:e8:a6:09:e3:0c:b3:
18:53:5d:6f:f0:b8:de:a1:b2:e9:09:b8:7d:2e:90:
ce:33:5a:4e:59:e1:42:2f:bd:1b:47:f0:d9:b6:81:
fe:7c:0c:15:ec:49:e2:1d:5d:30:eb:72:b7:02:23:
6b:f8:68:72:79:9a:6d:53:3d:79:99:1f:34:70:b7:
93:b4:42:f3:c0:fa:68:f5:77:6b:2c:2b:a6:0d:39:
3a:1f:52:00:05:d4:17:a8:28:99:0e:28:68:05:55:
99:67:bb:f0:40:af:be:d1:a1:9b:a4:0d:06:f7:72:
d3:99:35:56:fe:8a:c9:94:97:e2:ad:1d:ae:47:c0:
ff:7d:59:59:9b:9a:f3:67:4b:c0:48:f5:76:2b:16:
cf:5c:90:c4:07:95:8b:9b:10:09:1f:a6:b8:73:b8:
d6:85:d7:d1:71:f3:dd:fd:ad:d1:c4:3e:16:e9:95:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:2D:FE:F2:DB:7F:DA:E0:99:32:7F:6B:70:80:77:99:BF:F8:1E
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:83:ef:d2:0d:6c:0e:1c:82:ce:d5:77:8b:c7:78:b3:da:db:
ba:a4:2d:14:f6:07:40:1d:da:d1:d9:d3:66:5c:ee:c7:eb:4a:
79:0f:af:d9:01:d4:59:b6:9a:9b:9b:35:c4:ad:78:14:28:ba:
b3:be:a2:f1:51:ad:b2:fc:c5:35:e1:66:02:45:cb:3b:f7:0c:
b7:0f:f5:c2:b4:86:18:6c:0e:5a:4b:fb:e6:86:40:d3:c9:42:
df:67:8f:b2:9e:6b:03:bc:09:84:f8:db:b5:e0:87:73:9d:d2:
58:73:d7:95:4d:8f:b7:3c:19:27:0c:73:21:2f:81:33:3b:b7:
2a:b9:e8:c7:b4:56:4e:4d:ed:0e:97:a4:76:a2:5a:d4:63:41:
33:ab:a6:37:76:6e:20:8b:a2:c1:ba:f6:39:b0:d4:57:06:e1:
7a:7c:3c:1a:2c:97:2e:45:14:d0:27:c6:b0:fa:fa:8e:26:d2:
78:ff:9f:ba:11:e8:cc:20:90:12:42:68:e9:2c:80:dd:56:29:
15:ec:84:7c:df:4d:90:95:14:17:db:53:a0:eb:7d:2a:1e:1c:
c0:28:d0:d0:6d:d6:09:60:11:e3:c8:a8:eb:b4:dc:5f:56:66:
a5:32:09:73:ed:77:61:6a:34:62:d4:2d:ba:98:56:23:8a:a6:
57:fc:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:41:29 2026 by rpki-client