
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json)
Hash identifier: VnLDLBCVXTKL8FB7QKex/yM4MbiqpUOcUVlmxY2pdp4=
Subject key identifier: 36:F8:71:19:55:2C:52:BF:CD:83:6B:9A:47:43:C3:56:C6:26:31:48
Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Certificate serial: 047F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
Manifest number: 0479
Signing time: Thu 23 Jul 2026 00:54:48 +0000
Manifest this update: Thu 23 Jul 2026 00:54:47 +0000
Manifest next update: Thu 30 Jul 2026 00:54:47 +0000
Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: VlLz2QUCgQCV1vQAsuA/LMQtRo+V4kJpdpldzspKGqE=)
2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Validity
Not Before: Jul 23 00:54:47 2026 GMT
Not After : Jul 30 00:54:47 2026 GMT
Subject: CN=6a616658-2e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e6:6a:d2:c5:ba:f6:06:c1:bc:7e:dd:d5:9e:
fd:4c:f6:91:0d:d3:c1:55:4e:45:9a:bd:87:d2:96:
c3:07:66:0f:a2:e4:17:db:95:ea:0e:b5:88:b3:be:
72:49:29:e3:c9:88:c0:3d:dd:b6:68:89:9a:8d:33:
b9:93:eb:45:ca:b5:5b:c3:87:45:13:ad:f6:26:75:
e8:23:71:36:8e:dd:df:b8:55:f9:68:af:e7:9d:0e:
0c:fc:6f:ad:b6:08:aa:cd:d8:5f:9c:b0:a7:44:cb:
56:ef:1d:a0:89:d1:6d:c8:c6:12:cc:23:ba:6f:50:
51:47:86:5c:43:34:68:8a:57:7b:e8:9f:09:f6:5b:
23:82:3d:35:25:79:34:9b:af:c8:79:57:70:19:95:
49:27:b4:0f:4d:53:b2:d8:29:7b:1f:7f:bd:8a:e7:
fc:e6:fe:5b:46:b6:35:23:cc:2c:d4:dc:4c:cc:b7:
6d:38:24:c4:8f:ba:56:5f:55:18:96:f4:32:2b:3f:
d3:5c:2b:80:05:42:74:7b:1c:de:96:57:80:33:7e:
06:fc:b4:83:4c:3c:2f:d8:f8:bd:b3:68:dc:31:84:
3e:ef:1f:94:95:48:2f:12:c5:77:87:bc:41:ac:0f:
37:e9:73:e3:52:65:99:94:cf:29:dc:98:9e:f4:ef:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:71:19:55:2C:52:BF:CD:83:6B:9A:47:43:C3:56:C6:26:31:48
X509v3 Authority Key Identifier:
keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:83:8f:83:a2:4d:5d:9c:7e:22:5b:20:5f:e7:f7:90:51:
bd:01:9f:f2:27:1a:c8:70:eb:fc:7d:a4:d5:90:6d:4e:a9:5c:
00:d7:47:60:53:d1:f2:4f:72:c3:51:cf:ef:39:c5:ca:1c:be:
fe:96:37:d9:bf:90:8d:87:da:bd:2c:9f:cb:4c:f9:3f:24:e1:
93:d0:ad:54:db:65:ec:3e:64:7e:5a:0a:36:f4:ec:54:af:ca:
eb:b5:f9:1c:2d:96:44:dc:85:f3:cc:14:21:69:3a:38:71:23:
40:8b:0a:af:ca:2e:31:e5:8d:fb:64:25:d7:a1:df:2d:6f:08:
a4:24:4e:85:ea:27:56:52:4e:7f:a2:bb:73:b0:8e:2c:25:8e:
db:85:b1:b0:03:fc:15:b0:f6:0b:9e:be:fb:6e:08:a9:25:2b:
ad:f3:3b:92:f7:48:05:11:e5:d7:2a:e7:0e:26:46:6b:0b:13:
aa:42:7a:d2:6f:69:04:a1:04:d3:96:55:2e:21:27:da:71:e7:
09:e2:4d:a7:3e:43:12:50:6f:2e:c2:db:b6:e3:00:b9:fc:1b:
f5:d2:db:92:b6:c3:9a:08:6b:1b:93:71:30:92:6a:30:73:da:
72:4b:58:09:a1:54:ab:3c:23:eb:6b:72:9c:1e:64:63:0a:2a:
5d:86:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:02 2026 by rpki-client