
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json)
Hash identifier: GefuovuXREHTaUDqeHtF/vFpufaWeIJ7q7DXU5viP5Y=
Subject key identifier: 7E:85:D1:00:AF:2A:84:80:4A:88:E6:6E:B6:B3:D0:AD:8F:E0:CC:82
Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Certificate serial: 087E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
Manifest number: 0866
Signing time: Mon 02 Mar 2026 03:02:02 +0000
Manifest this update: Mon 02 Mar 2026 03:02:01 +0000
Manifest next update: Mon 09 Mar 2026 03:02:01 +0000
Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: FBFdVJ/GBxA4wpM/6yxtKARTLfs4oirjvjEHPg1pLQ0=)
2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: 4+lHA5+XA6q3WA0a7feDPb9rgvNk8uk4zcP3rt42nhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Validity
Not Before: Mar 2 03:02:01 2026 GMT
Not After : Mar 9 03:02:01 2026 GMT
Subject: CN=69a4fdaa-b45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:9a:de:dd:17:6b:ba:cd:86:39:c7:b1:c3:
64:ab:af:75:bb:96:03:12:d7:70:0d:6d:7d:0b:0f:
96:52:ab:ec:05:7f:31:2b:8f:88:ec:a1:62:06:e5:
c6:fb:4b:96:79:37:91:b1:bc:46:f6:7d:a8:65:eb:
f5:2e:ba:ae:90:2e:a6:bf:3d:e2:7b:fa:80:da:5f:
c5:a2:ad:48:ea:d1:8a:fd:f5:0c:91:51:59:06:2e:
e6:60:58:9a:e9:eb:d7:6c:d3:f7:78:67:6a:e9:01:
16:e1:fc:e8:2c:18:f0:43:08:36:72:26:c7:cd:57:
9f:bb:0c:c7:60:09:44:53:15:92:20:5e:e9:3c:82:
44:9a:0c:87:50:d5:db:05:c9:2c:1f:69:6d:91:b3:
89:32:4d:24:c4:b8:f4:fb:24:29:5b:88:5f:8c:41:
3d:6c:e1:86:2a:fc:2c:f1:13:08:e9:6e:c1:b1:fa:
97:6c:96:ff:c2:25:c2:dd:44:a7:c3:7a:0a:e1:5c:
ba:37:a2:dd:f8:ca:e2:0a:16:11:ed:94:29:3a:91:
55:77:a3:38:1a:7f:4c:d5:dd:a4:00:55:0e:ca:e8:
6b:7c:fe:f0:54:eb:da:aa:49:e7:53:51:95:35:99:
59:5f:70:3b:d1:72:c1:61:78:e6:bb:e0:fc:b1:5f:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:85:D1:00:AF:2A:84:80:4A:88:E6:6E:B6:B3:D0:AD:8F:E0:CC:82
X509v3 Authority Key Identifier:
keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:4d:25:68:cf:74:f5:0f:d8:5e:d3:c6:cd:cc:00:d8:87:34:
c7:13:7a:e4:cc:34:fa:23:98:23:dc:88:22:05:80:65:55:35:
bc:03:15:c7:7b:3f:09:0d:af:80:5f:f3:ca:a4:14:15:a5:74:
5c:43:78:af:1a:e2:69:ec:df:7a:20:d1:a9:8e:c6:2c:95:cc:
b9:9e:08:6c:50:2c:ff:d6:3a:cb:68:4d:8d:85:8e:4f:68:09:
13:76:27:88:b4:14:0f:60:18:33:3f:db:7e:87:66:a4:b4:8c:
56:1b:cb:26:0f:28:82:79:4a:b9:c9:e9:57:88:c4:e4:30:31:
34:29:cf:98:29:bf:5f:d5:af:4b:03:cc:d5:b3:47:bc:51:5b:
b7:3d:d8:dc:5e:93:68:43:89:bb:df:8a:06:77:bd:ca:63:11:
f6:13:14:3c:be:51:02:f7:63:e6:f5:31:f8:5c:22:00:64:88:
00:c7:3e:3f:92:cd:a3:83:d9:52:30:ea:94:d4:81:3d:40:70:
a2:70:cb:a4:7d:90:1e:71:1a:d7:d2:a3:a6:7a:44:ef:17:f0:
06:ed:61:1f:a2:2e:37:6e:33:a5:89:70:09:9f:c9:fd:c1:00:
17:8f:c7:7a:06:54:d3:55:20:ee:e6:41:89:30:93:7f:7c:11:
61:0c:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:54 2026 by rpki-client