
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json)
Hash identifier: jj6ZcGB3m9mAULTdgFRFsAl5Du0XPa7bpfrzsjBA3yw=
Subject key identifier: 2B:07:C5:1F:1E:E9:49:46:0C:8D:7F:F5:1C:1C:34:D3:23:50:1A:A0
Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Certificate serial: 04A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
Manifest number: 049B
Signing time: Sat 26 Sep 2026 23:59:49 +0000
Manifest this update: Sat 26 Sep 2026 23:59:49 +0000
Manifest next update: Sat 03 Oct 2026 23:59:49 +0000
Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: OQ5hv6Tw6yHQwey4QltRv4zx2b17BTLxa4bZlORdH+U=)
2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1185 (0x4a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Validity
Not Before: Sep 26 23:59:49 2026 GMT
Not After : Oct 3 23:59:49 2026 GMT
Subject: CN=6ab85c75-758d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:2b:e9:db:73:be:9c:41:be:8e:b6:70:a2:
ac:53:04:d3:40:56:54:d7:c2:a5:0a:a7:bd:44:0f:
b2:b7:86:76:7d:87:5a:c4:4a:af:a5:85:c6:4b:91:
97:74:d2:9b:60:f5:d0:84:87:3c:4e:3d:24:76:da:
d6:ab:0a:47:8f:b8:1b:99:5e:bf:2f:a8:1c:5c:9f:
7c:dc:ab:29:d2:09:01:21:00:9b:4e:57:29:64:86:
d5:5f:03:90:dd:0d:2a:57:a2:6e:36:1a:27:73:57:
48:32:ed:d7:a1:47:97:88:23:2d:83:94:f8:94:ae:
08:ab:06:44:77:0e:e3:f1:1c:62:3a:40:54:85:79:
c5:c3:6f:78:68:c4:e2:11:1f:16:43:21:6f:a3:2f:
d5:61:b2:c9:c6:68:17:c1:c2:d3:82:5a:f7:35:c0:
9c:ea:a9:76:d5:36:27:38:67:8a:0b:d3:f4:ca:dc:
e3:da:02:45:a6:4f:fc:c7:93:d9:51:12:4d:22:83:
b8:67:ac:e5:b8:70:ff:e8:d5:34:d2:27:cb:7a:aa:
2c:e0:02:03:79:2c:b7:39:e6:cc:d7:69:e3:b1:74:
75:5f:07:46:08:62:9e:5b:fb:60:53:44:18:ce:ac:
86:fc:8f:1f:a4:6a:d9:e0:05:2c:a1:12:a0:2f:27:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:07:C5:1F:1E:E9:49:46:0C:8D:7F:F5:1C:1C:34:D3:23:50:1A:A0
X509v3 Authority Key Identifier:
keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:aa:1f:29:09:54:34:fd:03:0a:ca:e5:d5:8b:7e:e9:ef:68:
ea:f0:38:86:ed:02:eb:30:2f:88:c9:e2:1c:82:13:93:36:a3:
c6:61:05:34:26:dd:2d:ca:d0:73:99:1e:f9:b7:16:f0:be:a7:
8f:a4:66:c7:fc:b5:92:65:f9:8b:37:5e:37:79:ab:52:df:df:
78:27:a0:e4:9a:d8:49:f3:e4:00:4d:c6:df:da:45:51:88:61:
3c:0e:97:40:fd:34:05:df:37:1a:9d:4e:43:60:a5:8d:e6:1f:
2e:2d:19:79:dd:39:48:d8:fd:ef:e1:57:e0:4e:94:17:08:a2:
a2:a7:91:25:19:8b:19:86:5b:a3:b7:96:36:49:8c:55:d6:a8:
e3:a9:ea:93:72:c6:57:16:36:49:10:d8:df:31:18:b9:e7:b9:
74:71:75:49:c2:1a:3e:b0:94:7f:40:00:12:04:05:53:73:26:
9a:5d:00:ef:8d:0a:e5:94:fc:18:fe:4d:22:c6:9a:55:56:9b:
12:98:07:58:0c:2d:ca:3e:7b:13:e8:d2:bd:35:97:56:ea:c6:
a7:68:f0:b8:df:90:1c:fd:1d:3b:71:b5:66:9b:ca:13:ca:54:
f6:a2:63:b3:89:74:3c:33:60:cf:be:ca:ef:ee:af:61:29:4f:
2e:da:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:31:55 2026 by rpki-client