
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json)
Hash identifier: OWZv2z5M191VFDhOIxgYNhMkZ0xe1cF/om9nHjqEYvU=
Subject key identifier: 01:0C:86:27:09:49:CA:46:68:1F:A5:01:F9:47:69:59:5F:7A:6F:E8
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial: 0749
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
Manifest number: 072F
Signing time: Tue 12 May 2026 21:53:49 +0000
Manifest this update: Tue 12 May 2026 21:53:48 +0000
Manifest next update: Tue 19 May 2026 21:53:48 +0000
Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: X7K1UR/RC8+4ai8qBL1m+12J7aoMAURyDD8XllpP+5A=)
2: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: b91CN8KbCA7CsKadVYDYS+4haRrVejoxjdnfqbIrH3A=)
3: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: p8nOzs2MGPpJBZ2dYf3NfouwimR2DwXOeH0VUZbqjmA=)
4: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: z3vfFzyCiPp7COCzQy7KY/5fnPoAbILohbFaBxoPiG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865 (0x749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Validity
Not Before: May 12 21:53:48 2026 GMT
Not After : May 19 21:53:48 2026 GMT
Subject: CN=6a03a16d-8d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:dc:70:3f:bf:3b:e5:36:38:b1:14:42:7f:
92:36:a5:5c:34:89:1e:1e:79:c7:d3:b4:4c:ea:98:
a2:50:f6:cc:3b:61:5a:51:0e:01:4b:d4:e4:40:95:
7a:36:40:cc:57:0d:a1:7e:26:30:be:52:b7:69:a5:
be:91:c9:61:31:fc:9f:f5:93:5f:5f:21:f9:aa:b0:
04:35:83:1c:fb:78:aa:1d:85:54:02:84:aa:0a:eb:
18:7c:db:ff:a7:22:13:2b:3a:ce:7c:8b:32:18:21:
af:64:8f:e8:6e:47:fc:6c:f5:ae:39:4a:d9:2d:68:
77:dd:2c:c5:c5:71:b6:cb:9e:d4:e6:68:8d:78:a2:
65:f9:d8:4f:bd:aa:74:1f:8a:44:77:d2:17:ae:26:
cb:8c:21:79:d8:9a:87:8d:ba:dd:51:1b:1e:15:22:
d2:fc:ee:d7:c3:f2:f0:d4:88:6f:86:e6:a7:2e:df:
80:35:b3:d1:38:e9:51:0e:9f:06:e7:d2:0a:67:33:
05:5e:bd:c8:65:63:ce:38:8d:4a:73:eb:43:5e:0c:
c2:cd:22:3c:c3:0e:af:8b:2f:d5:4b:45:36:74:b9:
78:3a:bb:ba:c5:41:53:a8:df:32:ca:0f:5d:5d:ca:
ba:ff:94:76:32:dd:77:73:f1:ea:0c:35:40:d1:18:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:86:27:09:49:CA:46:68:1F:A5:01:F9:47:69:59:5F:7A:6F:E8
X509v3 Authority Key Identifier:
keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:3f:b1:ba:b9:f3:7d:c7:a2:91:71:2c:a1:a0:3a:45:bd:f9:
f8:61:48:87:2c:28:05:7d:90:2a:b4:b8:8c:ce:80:fa:23:50:
87:77:31:79:6a:c9:05:f3:11:11:9b:7a:6e:46:dc:65:79:35:
a4:62:a0:76:cf:0b:90:e9:07:4a:4e:a8:3e:5f:c9:9c:ac:c5:
74:e6:2c:05:b6:1e:61:e2:1d:a3:81:65:ec:ed:51:43:b4:d1:
8f:f1:a1:f2:fc:16:b2:dd:a6:aa:a3:d2:47:2b:15:bc:2e:b1:
71:74:55:6e:38:e4:88:19:5e:00:85:e1:1b:0f:df:ad:d0:5f:
49:1f:11:ab:2f:f4:8a:cb:6c:a9:93:cb:19:49:ab:09:40:80:
a4:96:b4:a6:b4:2f:06:a2:8f:e2:9b:ea:12:d8:c3:00:0b:51:
7e:79:6d:05:35:4a:02:eb:c6:68:21:80:85:6f:0e:f0:58:20:
74:6e:83:53:97:0c:6a:bf:f3:44:13:6f:19:2f:2f:24:5e:49:
93:20:5f:cd:5b:13:7e:54:85:96:1b:71:39:ac:08:f2:16:60:
71:57:07:79:5c:be:86:92:bc:92:f3:68:2e:62:69:8d:55:90:
76:99:64:65:d4:8b:44:a1:1a:38:53:3d:50:7e:30:b4:aa:3b:
d5:13:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:18 2026 by rpki-client