
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json)
Hash identifier: SEwla7qTQTvzIVEGKHtwl/LI5AJZIPSIicL1oIkc94Y=
Subject key identifier: FD:47:C6:DA:11:3B:C1:C6:4E:40:AA:C7:97:B1:C9:A7:C3:7B:19:6A
Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Certificate serial: 045B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
Manifest number: 0455
Signing time: Wed 13 May 2026 00:17:17 +0000
Manifest this update: Wed 13 May 2026 00:17:17 +0000
Manifest next update: Wed 20 May 2026 00:17:17 +0000
Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: aUwVLEGnaWef8vMCu3gSk1u9eaB+iyMEMmK+jnjIjrI=)
2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Validity
Not Before: May 13 00:17:17 2026 GMT
Not After : May 20 00:17:17 2026 GMT
Subject: CN=6a03c30d-0be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:39:1f:5e:c0:c7:9e:e7:74:c8:19:d3:24:
40:a3:1e:2e:9c:0c:d2:35:a9:09:4d:3e:27:32:80:
c9:9d:e4:2b:7a:77:7d:8f:7e:9b:ae:90:58:dd:fc:
64:41:bf:23:e7:4a:48:14:bf:e6:7d:ff:03:49:0b:
9d:d8:29:6e:a6:0f:f3:40:13:7a:9d:81:c9:da:2a:
9a:c9:31:f1:99:2a:ce:0c:88:89:cf:e9:42:d2:b7:
08:ad:ab:88:a6:cd:90:82:05:5b:a9:9c:71:d2:26:
7d:68:2d:1d:a6:a8:87:a6:0c:05:d5:05:d9:5d:ed:
3b:f0:49:e3:a7:65:f1:f2:e5:87:c9:7e:3d:15:db:
78:bb:1d:3c:37:2e:78:9c:88:5c:70:fb:15:3c:6f:
e7:4b:3b:7d:91:f6:80:97:c1:3d:fd:05:99:7e:1a:
db:4b:50:4d:c3:7a:e9:fb:78:20:ff:07:f9:8d:67:
c9:12:e1:b1:d8:60:96:cc:0d:c4:79:24:c7:02:b9:
96:8b:9b:64:cb:cf:96:f4:36:ea:ef:e6:19:38:36:
f5:3e:bc:37:19:0a:d1:05:e1:11:90:cc:de:da:db:
aa:89:65:b9:0e:db:c8:a4:e6:e9:bc:52:91:09:43:
2e:d7:6a:bd:f4:74:2b:44:f6:70:4b:e9:bc:eb:c3:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:C6:DA:11:3B:C1:C6:4E:40:AA:C7:97:B1:C9:A7:C3:7B:19:6A
X509v3 Authority Key Identifier:
keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:75:70:9e:2a:82:28:4c:d3:b5:1d:a5:50:36:09:8f:d3:1d:
35:f7:ab:f3:8d:a8:fa:fc:ac:b8:d2:b5:5e:d8:ee:f5:c2:58:
d8:24:93:80:91:d6:6d:02:99:d0:eb:cc:72:05:44:a8:2d:94:
3d:8b:d7:c3:56:2c:aa:b7:e3:f0:fa:a1:b0:e9:a8:0c:22:be:
df:95:70:2d:ed:78:f3:14:62:fe:c2:f8:9a:f5:f6:e9:f4:2e:
fe:77:58:c0:fa:68:7a:4a:1e:81:4d:c2:41:5c:79:3e:9d:72:
86:f8:e5:ed:b7:04:b3:07:17:ee:1e:80:02:b3:80:5e:18:59:
bb:b5:f4:08:f1:84:bd:26:c1:9d:c1:3b:ae:59:49:14:bb:26:
9d:d2:22:b3:76:0d:7b:63:d3:08:b1:15:20:02:41:f3:1f:3e:
eb:48:36:85:fb:0b:f4:04:e3:af:b7:44:8b:d4:c0:7a:26:c8:
29:01:3d:f5:fe:24:8b:e9:45:37:24:80:3c:8e:d7:35:b3:5d:
2e:1b:20:fe:ca:d9:c5:09:99:f8:bf:d6:4a:8d:32:55:85:c3:
2c:5c:f6:74:c6:ab:58:18:5d:7f:e3:c3:1a:9b:c6:33:08:3c:
90:56:42:bf:27:ba:6c:72:ce:70:be:19:e7:0b:76:e0:25:ab:
ef:12:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:23 2026 by rpki-client