
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json)
Hash identifier: UcKht9bKop5v98bH4mkL5BndJ+777JiK95XodgHb0/c=
Subject key identifier: 5C:09:B3:78:CB:51:74:EA:F3:A9:F3:66:F4:37:49:5A:E9:9C:F0:0A
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
Manifest number: EE
Signing time: Wed 13 May 2026 06:43:08 +0000
Manifest this update: Wed 13 May 2026 06:43:08 +0000
Manifest next update: Wed 20 May 2026 06:43:08 +0000
Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: 8Rlsj1smhn04ih0p6QocgJaOyWAS2lTT5x6Ut2yup2w=)
2: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 4J8/FZ6Z4aWtn3x7hmcoO5/BToWEDFdORTF4LOMQboM=)
3: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: 0YPbPYRmDBxvxeUZ+nCsDlhMinpUmdIW4GNWTG2+RDU=)
4: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: 4QP/rAbhyfXHecTQkzEPbUUKcaxecI63gYXrQwwXTlY=)
5: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: iEXGIsNYH311PJIgaH9OeoRGxcu7W7Wehcq1wxoUdGY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Validity
Not Before: May 13 06:43:08 2026 GMT
Not After : May 20 06:43:08 2026 GMT
Subject: CN=6a041d7c-d681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:6e:a9:4e:2c:c5:b3:b0:c4:1d:05:da:ba:
5c:ca:fd:d0:75:ba:40:1f:2e:f7:3f:6b:73:9c:a1:
47:3e:9f:7d:ce:ce:39:0f:20:d7:24:50:37:80:e5:
20:bd:ad:6f:21:0c:56:e4:10:c9:fd:25:cd:33:36:
d3:12:82:25:6b:47:41:27:a2:81:8e:c2:de:95:c6:
d8:05:58:a0:ea:40:50:a9:36:66:60:cb:4d:5b:fe:
2a:46:3b:0c:dd:53:34:72:b1:d6:22:93:1f:56:3e:
cb:a3:c8:73:62:9a:ce:aa:45:8b:4b:75:12:e0:29:
18:2c:a1:1c:09:e6:38:42:c0:f8:45:e1:49:b1:00:
2a:32:82:c0:39:09:bf:b0:3d:f8:b5:44:82:47:31:
e2:01:7f:91:2c:1b:88:83:9b:dc:62:81:3a:ae:4e:
90:90:01:0e:88:f1:dc:9a:e4:75:2a:1f:cc:6c:c5:
56:9d:d5:38:59:bc:d4:32:04:0f:49:48:28:ba:38:
5a:34:a4:dd:dd:98:c2:f4:46:79:96:be:fa:07:7d:
17:7f:7d:6c:1d:58:f0:cd:bb:7a:26:1f:b3:2b:2a:
4d:59:51:bf:cf:0e:09:93:77:3b:a7:63:30:1a:0d:
fc:a4:e5:36:7a:ff:b1:e8:61:fd:4e:b5:55:80:e8:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:B3:78:CB:51:74:EA:F3:A9:F3:66:F4:37:49:5A:E9:9C:F0:0A
X509v3 Authority Key Identifier:
keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:9e:c6:c5:55:0e:bc:0a:8c:e2:e2:63:85:81:90:b2:2a:99:
24:f5:a3:f5:0d:ee:6b:68:97:77:07:d0:cf:78:22:8f:e5:8d:
19:ca:57:a0:dc:be:a9:51:d5:f3:1a:f2:3f:a1:cd:8a:b4:af:
e0:b2:bf:b0:f6:fb:a2:0f:3a:e8:0f:6b:62:2a:62:32:54:cb:
4a:5f:63:19:b7:5c:15:20:dd:6e:d1:a5:ac:f7:10:1e:bf:aa:
fb:d6:f1:59:bc:31:06:42:c8:7f:07:61:ce:ee:ef:ba:bb:f5:
58:0c:d9:41:f8:8d:c4:f2:73:fb:85:cc:1f:cd:d1:cf:f4:05:
1f:1a:a0:d1:e9:23:70:ec:a2:ee:cb:37:b2:4e:1b:55:6b:12:
9d:c2:3f:d5:8b:e6:62:d1:6d:4d:ba:de:21:4a:80:c0:43:cc:
a0:2a:03:4c:96:f4:41:45:5b:05:52:63:6f:4a:57:86:fb:33:
e5:e7:ac:3c:16:35:85:2f:ed:82:47:e8:32:68:09:d2:90:71:
c2:94:5d:13:f1:ef:11:d6:ca:7f:e4:11:8d:85:38:c4:f7:ed:
eb:d1:59:6f:e3:91:44:49:76:96:26:51:12:f1:55:ae:05:24:
bf:0d:da:9f:ae:6a:f0:38:28:c1:87:d7:97:6b:5a:2a:72:de:
15:fa:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:58:26 2026 by rpki-client