
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json)
Hash identifier: G4F8Vj0gn8I9VXdfBY+btDyzlmINylmCsGl7kYmWtxA=
Subject key identifier: 8E:5A:E1:F8:E4:0D:AB:EB:0C:16:9D:51:C9:32:D1:CD:F5:D0:15:58
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
Manifest number: 0111
Signing time: Thu 23 Jul 2026 07:53:19 +0000
Manifest this update: Thu 23 Jul 2026 07:53:18 +0000
Manifest next update: Thu 30 Jul 2026 07:53:18 +0000
Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: YU9rfiTXS6F9CFelgR/e7eyb066BSUPSDEnUl+k3Wb8=)
2: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 4J8/FZ6Z4aWtn3x7hmcoO5/BToWEDFdORTF4LOMQboM=)
3: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: 0YPbPYRmDBxvxeUZ+nCsDlhMinpUmdIW4GNWTG2+RDU=)
4: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: iEXGIsNYH311PJIgaH9OeoRGxcu7W7Wehcq1wxoUdGY=)
5: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: 4QP/rAbhyfXHecTQkzEPbUUKcaxecI63gYXrQwwXTlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Validity
Not Before: Jul 23 07:53:18 2026 GMT
Not After : Jul 30 07:53:18 2026 GMT
Subject: CN=6a61c86f-53ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:4c:85:17:e7:7f:61:72:ee:20:07:f9:43:
8f:cf:42:22:11:9f:71:54:71:73:7e:6a:ba:db:86:
49:50:fa:a8:9e:2b:ff:3e:50:b2:f2:3f:f7:36:3d:
9a:df:ac:b8:96:e0:da:07:8f:d3:e3:ab:3b:42:f9:
fa:42:4a:27:e4:ea:12:c3:93:ca:e6:d4:0d:a7:38:
02:24:83:d0:3c:7d:8b:a6:c8:52:cc:ea:83:28:cf:
44:f1:2e:57:0e:5b:bf:f6:9b:21:67:a2:da:6b:b0:
c5:54:b4:ff:00:04:68:93:d4:1a:36:14:86:69:14:
2f:81:78:0a:89:19:17:81:39:bc:d9:5e:fe:3f:c3:
3d:8e:84:51:4b:3b:2b:9c:f2:da:01:18:37:ac:9c:
e3:33:e0:2c:39:86:f3:b2:cb:e6:ce:3c:6c:1e:23:
2b:4b:8b:1f:d5:ff:29:bf:31:b7:61:2c:d8:0f:be:
09:84:b0:03:de:5a:20:d5:fb:bd:58:6c:d4:af:bd:
ee:0b:70:d6:b2:a1:5b:14:86:52:b2:78:f0:b1:8e:
00:c2:cf:4f:69:bd:70:0f:2a:5e:83:d5:a8:0c:ec:
b1:8f:2f:e0:c1:89:87:e7:35:2c:f2:fb:37:05:23:
61:1b:12:da:23:d1:14:fd:2f:03:5a:6a:80:38:fc:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:E1:F8:E4:0D:AB:EB:0C:16:9D:51:C9:32:D1:CD:F5:D0:15:58
X509v3 Authority Key Identifier:
keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:95:e5:88:25:8b:c0:ab:04:65:eb:b0:ee:ea:53:8a:68:2e:
01:4c:9c:51:f0:ba:14:16:4c:2a:e4:f9:66:f5:be:8f:e2:da:
63:01:00:1e:e9:61:bb:d2:42:f2:b8:de:43:02:84:dc:14:b9:
a8:4e:84:09:37:77:8f:25:3b:e4:93:b1:14:ac:3a:b1:5a:13:
be:05:2a:05:84:bc:9e:72:34:41:d3:0c:64:e4:c7:43:6a:2c:
34:99:c9:4d:43:30:32:20:67:f0:a1:77:c0:97:11:af:88:1b:
84:7d:73:b8:5e:6d:a0:f1:a5:68:98:05:07:42:08:35:85:e8:
21:8e:a9:5d:ee:25:c5:2b:1e:1b:f6:3e:37:59:79:7b:a7:60:
3d:58:22:65:c2:7c:7d:14:d2:9a:bd:66:30:ab:b4:33:04:4c:
00:74:ef:09:1f:65:9b:7a:92:73:fd:c5:c7:b6:b7:d5:cb:5e:
42:08:77:af:5e:57:75:9e:9c:0f:a8:6c:88:55:28:ae:40:5e:
84:44:4d:28:e7:cf:1b:9f:3d:44:85:ad:87:01:54:39:e7:9a:
6c:21:8c:a8:fb:ad:86:d3:83:7f:52:88:96:56:47:a9:95:df:
57:fd:a4:48:0b:81:ca:42:87:1c:20:d3:29:6f:e5:6c:73:56:
04:c3:fa:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE4MEMxMTAvBgNVBAUTKDMxMjQ0MDIwMUIyRUY3NEI3Q0FDNkMzMUZCODVGNDFF
OUM0Njg2QTAwHhcNMjYwNzIzMDc1MzE4WhcNMjYwNzMwMDc1MzE4WjAYMRYwFAYD
VQQDEw02YTYxYzg2Zi01M2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4JMhRfnf2Fy7iAH+UOPz0IiEZ9xVHFzfmq624ZJUPqoniv/PlCy8j/3Nj2a
36y4luDaB4/T46s7Qvn6Qkon5OoSw5PK5tQNpzgCJIPQPH2LpshSzOqDKM9E8S5X
Dlu/9pshZ6Laa7DFVLT/AARok9QaNhSGaRQvgXgKiRkXgTm82V7+P8M9joRRSzsr
nPLaARg3rJzjM+AsOYbzssvmzjxsHiMrS4sf1f8pvzG3YSzYD74JhLAD3log1fu9
WGzUr73uC3DWsqFbFIZSsnjwsY4Aws9Pab1wDypeg9WoDOyxjy/gwYmH5zUs8vs3
BSNhGxLaI9EU/S8DWmqAOPyDfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5a4fjk
DavrDBadUcky0c310BVYMB8GA1UdIwQYMBaAFDEkQCAbLvdLfKxsMfuF9B6cRoag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTgwQy9ERTk4RUFGMEZC
NjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkwdDhyR3d4LTRYMEhweEdo
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTgwQy9ERTk4RUFGMEZCNjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkw
dDhyR3d4LTRYMEhweEdocUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuZXliCWLwKsEZeuw7upTimguAUycUfC6FBZMKuT5ZvW+j+LaYwEAHulhu9JC
8rjeQwKE3BS5qE6ECTd3jyU75JOxFKw6sVoTvgUqBYS8nnI0QdMMZOTHQ2osNJnJ
TUMwMiBn8KF3wJcRr4gbhH1zuF5toPGlaJgFB0IINYXoIY6pXe4lxSseG/Y+N1l5
e6dgPVgiZcJ8fRTSmr1mMKu0MwRMAHTvCR9lm3qSc/3Fx7a31cteQgh3r15XdZ6c
D6hsiFUorkBehERNKOfPG589RIWthwFUOeeabCGMqPuthtODf1KIllZHqZXfV/2k
SAuBykKHHCDTKW/lbHNWBMP61Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:07:17 2026 by rpki-client