
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier: LRfKf3W6XKKPaXlOfylwdUnOQ/ZwL+6kUBcuR49l6iA=
Subject key identifier: DA:04:A5:70:45:03:29:5B:66:C3:2D:21:BC:57:72:33:BA:23:27:E0
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial: 10A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number: 1081
Signing time: Wed 22 Jul 2026 17:32:32 +0000
Manifest this update: Wed 22 Jul 2026 17:32:32 +0000
Manifest next update: Wed 29 Jul 2026 17:32:32 +0000
Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: giZLL4E6a4cNiLBB3/EU7so0dJ5pHGshrxp+KQXqxvM=)
2: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: RVqLv3EtRj5ErqJMVVt6m4xRrHJQaRXNG5AD8ZsgIFk=)
3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: +mWwcwjzpPjSVEv9OnV6PLbugEi6LgvVywkhj6tvDeI=)
4: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nTtKzX6nzx2xavwKMXRS2HOpDCquUtryYE0DdxLYbWk=)
5: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: 6dJXIvYHzCnEDXXSTc0Eos17d9MIrK7ku8xw5lKvqNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4258 (0x10a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Validity
Not Before: Jul 22 17:32:32 2026 GMT
Not After : Jul 29 17:32:32 2026 GMT
Subject: CN=6a60feb0-1eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:95:0f:a7:3b:b8:5a:60:e2:56:6f:17:90:
ac:de:eb:8b:e4:35:3d:21:f3:32:5f:a2:00:9e:41:
4b:a5:28:17:9a:72:8a:1d:62:99:76:a5:22:4b:85:
0d:fb:31:b1:61:9f:2e:ac:60:a2:93:c2:d6:7b:39:
e9:c0:c2:29:f1:c1:94:d7:e2:ea:e4:31:3c:26:10:
4b:6c:c9:3b:38:b6:af:f2:25:35:63:3e:f9:7c:52:
5c:21:02:5a:68:6d:ca:5f:4b:c1:50:af:82:c4:fe:
7b:c8:62:2d:ac:04:77:2d:2c:ea:35:98:79:70:3b:
77:c2:a6:dc:48:27:f6:ae:2e:43:c0:8c:01:c9:e2:
68:0b:f0:b4:ce:ea:40:5b:a7:85:49:1d:b7:0a:f0:
71:54:4b:82:08:c7:bc:51:07:33:de:27:de:d5:e9:
a3:3b:0a:eb:60:89:29:db:b4:bf:a4:ad:ee:61:67:
d7:2a:a7:85:2c:0f:60:21:52:07:30:9f:06:0b:97:
fb:1a:65:3e:1b:0a:3f:a5:a1:2e:47:9f:4a:11:3b:
ec:2a:15:5f:6b:39:8e:23:f8:c9:54:95:a8:40:9b:
b2:cb:11:20:d2:34:7b:6a:ee:dc:64:b6:6e:0c:ea:
73:c9:f1:f2:47:f3:86:3c:51:3e:54:f2:59:73:e3:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:04:A5:70:45:03:29:5B:66:C3:2D:21:BC:57:72:33:BA:23:27:E0
X509v3 Authority Key Identifier:
keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:77:76:92:6f:a2:45:b2:e6:ca:fd:e6:d6:80:31:2d:d3:d3:
32:bd:06:00:8e:96:f5:16:d0:2c:2f:a8:b9:02:a3:49:dd:54:
f6:43:13:6f:38:e8:49:29:d5:e2:b8:5c:83:46:1d:b0:21:c1:
b0:5e:fd:e7:6d:62:d0:be:08:4c:37:51:0c:54:06:35:c9:a4:
7b:55:41:61:0a:57:3f:d0:b6:1a:55:51:a5:17:d1:d9:2e:8d:
16:03:a7:3b:0c:d4:cc:65:20:af:52:a3:8a:80:65:d8:98:c0:
b8:31:77:d3:7c:1a:40:2f:e9:f8:1d:9c:9c:2c:49:56:1b:09:
cb:3c:7e:1e:1e:ec:0d:02:82:18:a6:41:cb:5a:c4:61:61:6d:
fc:2a:83:7a:21:94:8a:1e:71:ed:cc:7a:95:f0:9a:79:e6:20:
1f:da:52:f9:e1:c7:a0:84:87:7e:50:72:99:e0:1e:de:57:f7:
e0:aa:e1:a3:ce:05:59:74:a2:18:14:c9:24:69:82:2c:25:7a:
86:ab:61:52:32:bc:0e:1a:23:69:e7:4c:a3:c0:5f:48:b0:61:
8c:b7:3d:79:75:31:5e:ed:02:a9:95:79:7d:6e:b8:86:d7:3d:
c8:e2:ee:64:56:38:09:f5:41:02:b0:09:b4:4b:ef:62:4a:2e:
d1:87:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:26 2026 by rpki-client