
$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json)
Hash identifier: CJKcWG6ekBu3FRztbc6kNt/gMG+rq/4eAfCC9vl4OgA=
Subject key identifier: F3:55:3E:94:BF:69:E0:74:54:40:CA:55:CE:06:7D:08:D9:76:F3:9B
Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Certificate serial: 1C07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
Manifest number: 1C06
Signing time: Tue 28 Jul 2026 16:18:51 +0000
Manifest this update: Tue 28 Jul 2026 16:18:51 +0000
Manifest next update: Tue 04 Aug 2026 16:18:51 +0000
Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: OONsmWDsmVpJtffSR0TKjKMwv5ANZ/9IT/mhbwvh0qQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7175 (0x1c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF
Validity
Not Before: Jul 28 16:18:51 2026 GMT
Not After : Aug 4 16:18:51 2026 GMT
Subject: CN=6a68d66b-f165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:51:08:43:1d:36:5c:87:08:fb:64:1e:0c:
fe:39:23:d3:53:28:5f:19:87:18:7a:13:c7:be:a3:
eb:71:d5:35:d1:22:fa:3f:0f:d8:7d:cd:69:09:76:
a9:0c:c9:a5:ba:91:69:77:fa:7e:3a:84:c5:1b:98:
ad:bd:b7:93:b3:23:06:a4:94:0b:2d:73:9b:01:0c:
5e:ef:44:b6:f3:bc:b1:2a:b0:db:6b:97:10:16:b8:
2f:ca:c6:98:a1:2e:0c:fa:ea:10:ac:72:f4:ed:17:
82:de:5a:f4:fe:75:98:c0:31:aa:8e:91:4b:1b:ae:
aa:f1:9f:4b:d7:b6:64:84:8c:60:04:c1:e0:2f:69:
47:09:95:cc:bb:a7:03:e4:40:c3:71:ff:16:34:da:
ac:2e:bd:38:f2:81:f5:de:a0:1d:64:b2:af:b4:e6:
f8:b9:81:49:02:02:c1:23:c4:8c:c0:46:04:bc:d8:
91:75:90:b0:25:4e:0c:25:4f:33:00:55:d2:5f:a3:
bf:dd:5b:cb:91:e1:47:49:17:9d:0f:3f:4c:4b:61:
ff:fc:80:0c:df:1b:db:ca:54:d5:4e:6a:81:aa:fc:
49:dc:73:5b:86:c6:01:1e:1b:e2:aa:b3:07:7f:8c:
ec:af:e6:c6:6a:99:35:f5:e1:4e:47:ed:96:7c:43:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:3E:94:BF:69:E0:74:54:40:CA:55:CE:06:7D:08:D9:76:F3:9B
X509v3 Authority Key Identifier:
keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:a9:53:c2:5a:c7:d9:a7:1c:06:d7:33:33:01:3e:2b:eb:6c:
a4:42:1c:eb:09:93:58:e3:32:87:d2:58:a3:6e:0a:83:ad:f7:
75:80:4d:93:c3:48:f1:73:bb:7a:70:73:0b:44:63:0e:e2:9e:
5b:2a:bc:3e:a4:ec:c3:f3:37:69:26:b2:29:55:f5:70:d0:f8:
a3:89:cd:2d:a0:c6:5c:0f:8a:a0:00:35:eb:ea:62:5e:3d:60:
9a:7d:ed:b5:6c:d5:5e:83:0e:30:f9:dc:f9:95:40:1d:db:9b:
d9:2f:cf:62:fc:4e:d3:09:e7:71:f6:c5:81:95:7b:f9:ff:92:
23:31:99:23:fe:1a:46:67:61:55:de:6b:1f:bb:0d:1e:3a:c6:
df:25:5f:7e:1b:7b:71:ba:03:53:89:72:27:cb:d0:4f:1f:13:
1d:64:35:1c:1b:97:51:a9:cc:a7:1c:b4:fd:83:f7:ea:8b:c0:
52:34:b0:b3:60:e6:63:81:50:e9:d2:5a:12:af:38:47:a8:b5:
d7:53:41:1d:af:1d:f2:d8:f4:da:e0:18:fa:89:b6:42:d0:54:
ca:90:04:9e:fd:a7:e3:b2:1f:d4:9a:e5:c8:11:3a:62:11:5f:
f7:a9:d7:7e:d7:87:e5:66:06:7b:ad:3f:66:b0:88:de:39:b4:
fe:a0:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:36 2026 by rpki-client