
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json)
Hash identifier: 80GzQwqeOmvS6wAeR1ABw/4gbza1NrpRRu/rzLfNDZA=
Subject key identifier: 36:9D:4D:70:D7:D6:E2:09:DF:5D:80:39:A3:FB:40:01:AD:00:6A:2C
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
Manifest number: D3
Signing time: Wed 25 Mar 2026 06:05:57 +0000
Manifest this update: Wed 25 Mar 2026 06:05:56 +0000
Manifest next update: Wed 01 Apr 2026 06:05:56 +0000
Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: NALC7BWxnpqz7QvtBF+8Kd/ILx3J55Yre+1onga/wlc=)
2: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 9116NXLxQtwPo/GgkPoKQwC8T0+IQ5WfjdteNjA0STk=)
3: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: qxsrfe+5pZBQGouOTKIz81CtFmjMJEEOq45kP5mBjA0=)
4: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: csfLancJfK81Xm0Dpif4sZLsChi58tPYr9vQVLZNkSA=)
5: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: od/GgrkV7jF8XlgD/RNt7wyp/HQ9LjZvyL7IdTTX0j4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Validity
Not Before: Mar 25 06:05:56 2026 GMT
Not After : Apr 1 06:05:56 2026 GMT
Subject: CN=69c37b45-c534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:fe:95:ef:86:75:70:76:bf:d6:73:9e:98:
d9:f7:94:a6:1b:3a:72:b0:3b:46:ec:b4:eb:df:7b:
3a:57:b7:4f:7e:23:36:88:42:22:d5:51:25:a2:e1:
8f:92:2b:82:78:60:01:37:e1:12:6f:b8:14:83:99:
46:09:b8:df:8c:9c:d1:66:1b:ab:b8:70:ff:ac:4d:
86:ae:25:8f:6c:ed:7d:3a:6b:0f:be:46:0f:48:c2:
be:8f:01:6d:d9:4f:4c:37:6d:27:cd:59:4a:51:2f:
ad:39:16:cd:8c:e1:8a:c8:dd:f1:1b:4a:7d:76:4e:
b6:3a:2b:f8:13:7d:89:3e:ed:57:70:ac:d6:59:75:
0c:13:15:3c:5a:ab:a5:4a:4b:f1:e3:22:73:7c:54:
da:10:f5:31:f5:73:06:1a:7f:72:74:21:de:5f:a3:
43:6c:8e:89:6b:0a:29:97:5a:71:e0:68:1a:1b:3f:
23:e9:a6:d8:59:a1:89:ae:d4:ef:33:ae:66:4f:99:
57:eb:3b:ff:3d:bd:d3:1a:3e:bc:89:4b:41:17:8b:
c0:54:8e:4c:4a:00:e2:70:73:1c:cc:35:9e:92:e9:
4b:0c:58:0e:b4:db:2a:e1:e2:dc:42:31:35:c1:a7:
8a:22:6a:3e:5a:08:b3:c0:d8:2c:23:7a:f0:40:36:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9D:4D:70:D7:D6:E2:09:DF:5D:80:39:A3:FB:40:01:AD:00:6A:2C
X509v3 Authority Key Identifier:
keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:44:61:5a:19:07:7f:e6:7a:3b:fc:89:d3:42:05:5a:11:29:
bf:ed:ca:a3:bd:45:2c:3f:33:7a:ee:70:d3:23:b8:5d:2c:95:
10:b0:63:e5:00:94:05:60:98:cc:a0:72:72:97:72:31:85:aa:
c1:71:06:5a:30:fe:2c:c3:a9:e5:c8:18:e2:50:4a:4e:f5:b9:
bc:03:2e:28:ea:0b:c9:b2:8e:0b:46:40:4e:94:37:74:36:3c:
f6:ba:e4:ff:a4:24:36:a0:f9:80:6c:d6:b3:8f:fa:9f:7a:b7:
71:94:16:2c:48:15:f3:25:b2:26:19:85:f6:67:29:b0:ce:12:
0b:29:20:7a:f3:83:32:0d:fa:8d:87:22:65:af:b6:fa:58:97:
14:56:89:1f:59:30:7b:29:3a:08:b6:45:18:bd:32:90:ee:8a:
c1:1a:84:5f:69:61:87:ce:3b:ea:b6:98:c4:04:c4:42:d3:bb:
be:15:90:47:07:1d:07:ef:bb:9d:6f:36:e8:c9:10:99:5c:7c:
fa:6b:6b:88:77:3b:00:7a:42:ad:57:76:b8:4d:50:86:07:80:
d9:c1:a5:35:8c:c2:c0:d9:f9:dd:16:70:f3:34:ad:87:3e:75:
7b:db:5b:ca:76:20:24:7d:6f:a6:0f:07:0b:d2:af:18:b7:1a:
51:a1:19:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:18 2026 by rpki-client