
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier: uy13KvgsuigKFDs51vaLsY1z6hu5cqJ3dYmnP03jtjw=
Subject key identifier: E1:1C:6E:F3:C0:56:42:F7:4F:6D:74:AE:3C:70:29:A3:40:8E:3D:D0
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number: 01B1
Signing time: Thu 23 Jul 2026 05:27:10 +0000
Manifest this update: Thu 23 Jul 2026 05:27:10 +0000
Manifest next update: Thu 30 Jul 2026 05:27:10 +0000
Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: hakyAKSzFXar0CBklUGl2ZlN41RLVev2bivasNA09oU=)
2: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=)
3: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=)
4: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: i7o8yNPf+dFLOmHmy68U226YJmhJ/EmHULxlVRoo4Fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: Jul 23 05:27:10 2026 GMT
Not After : Jul 30 05:27:10 2026 GMT
Subject: CN=6a61a62e-a868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:d4:8a:cb:08:8b:95:15:31:04:4b:1f:e7:
4a:99:be:af:84:1d:1e:3d:db:24:12:d1:9e:d0:bf:
99:d8:b7:a6:76:dd:90:1a:52:34:48:86:f8:86:f8:
dd:4f:72:99:e9:34:ce:0c:65:aa:a8:f9:ac:51:bb:
c7:40:72:22:12:ed:02:3f:3a:68:88:dd:4c:39:48:
27:fd:78:e8:90:5c:67:5e:ed:8b:85:cf:67:aa:17:
55:05:f2:9b:52:57:a8:fc:69:ab:11:00:35:fc:f6:
fd:ef:04:14:9b:9c:c1:79:dd:87:f2:42:e3:dc:0c:
39:8f:1c:85:79:8f:00:99:72:69:be:39:ac:51:eb:
eb:42:3f:dc:7b:20:92:a9:55:53:b0:fb:63:5f:1f:
b3:26:12:6e:a8:f0:f4:b4:cd:83:09:a3:6b:e4:d7:
df:fb:bb:ee:83:20:ef:bc:9b:c2:8b:49:01:4c:58:
00:e3:c3:34:27:03:21:21:ba:86:a2:86:bb:c6:4b:
9a:6e:ff:05:69:9a:08:37:23:1d:38:7e:1f:87:a1:
ab:05:89:92:0b:73:4d:98:9b:80:02:42:d2:d9:57:
db:70:56:52:d5:0f:c1:64:54:db:ea:d6:16:68:4b:
81:ea:ce:83:a4:e3:00:e1:e8:41:f7:97:9a:6e:e5:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:6E:F3:C0:56:42:F7:4F:6D:74:AE:3C:70:29:A3:40:8E:3D:D0
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:09:30:4d:f4:2b:f2:46:af:4b:79:27:fb:17:a6:c4:25:c0:
2c:f1:c7:83:83:b6:2a:83:99:e3:12:b0:f1:e3:be:57:e3:ae:
96:9c:76:cd:a6:3f:56:ee:73:12:e5:46:a9:f9:ec:42:98:20:
06:10:9f:34:04:88:46:18:17:0c:ee:2f:34:dd:87:6a:ca:7e:
6b:ab:cc:1b:9e:71:b8:18:89:02:f3:ae:06:c9:cd:42:fe:c4:
8d:96:5b:ba:aa:2b:6e:2b:ed:49:da:8f:46:da:d5:dc:2b:23:
46:e3:f3:fe:50:37:56:ee:b6:1c:2c:05:8e:1d:86:47:de:da:
1d:78:91:8c:6d:70:7e:a5:8b:36:d2:4e:c0:70:80:6f:5d:f7:
7b:ab:df:d2:fa:23:a1:18:bc:c3:95:c6:c2:4f:42:01:14:05:
e2:6b:16:e8:01:ac:6d:5b:55:a1:6f:0d:a7:cb:01:63:1c:08:
44:5d:d3:54:b6:27:39:b3:88:b4:c0:6c:80:3b:42:3c:31:da:
dc:d2:4b:ea:69:d8:7b:0f:29:17:c5:43:fb:cc:37:58:70:bd:
dc:01:bf:ef:64:22:b7:30:b1:38:de:e8:61:e9:c6:e1:7b:5b:
0c:ab:b5:2a:e1:bb:10:1b:b1:b9:07:a5:ce:b1:3c:59:b9:36:
8a:ee:a1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:08 2026 by rpki-client