
$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File: mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier: 8xpKeoYiBolMggjt1oT4R+7a5rcQ6YNqfi85gGKUW4U=
Subject key identifier: 72:5D:F0:2B:E5:52:D6:5A:6A:C3:A4:F6:F8:67:E3:BF:C1:97:FA:A2
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer: /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number: F1
Signing time: Sun 01 Mar 2026 07:26:56 +0000
Manifest this update: Sun 01 Mar 2026 07:26:56 +0000
Manifest next update: Sun 08 Mar 2026 07:26:56 +0000
Files and hashes: 1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: 4obVFa1ozjuQwCXt7LOa6m0gVL+SXnO8TXRu4TPnkQI=)
2: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: qmsxmOiBhDvNaLiZyKp498W1rN2+Kv98L/oZoONMt10=)
3: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: SkGuNJ/4Los1XQIBHhlQL6T8tuCGf8coThqIJ2nXhq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Validity
Not Before: Mar 1 07:26:56 2026 GMT
Not After : Mar 8 07:26:56 2026 GMT
Subject: CN=69a3ea40-a159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:74:cf:61:30:6e:13:bb:0a:d9:ba:84:84:
ce:d8:38:f7:22:92:2d:77:71:d1:d5:36:18:57:77:
c1:c2:94:66:eb:11:dc:cc:58:6e:8b:b8:68:e8:a3:
16:d6:7e:70:fe:63:0b:fa:81:37:78:50:00:5f:f4:
d6:c2:ea:e0:e2:82:8e:13:99:da:92:37:e3:11:19:
57:07:e1:03:0c:ff:51:43:0d:00:b7:6f:dd:5a:f2:
a8:70:23:8a:be:ec:86:d1:62:64:c6:7c:b2:f3:66:
63:88:9a:a2:bb:2c:57:6f:61:ab:80:dd:83:2b:cf:
67:20:59:13:b9:d8:8f:25:41:69:36:50:6b:16:2e:
e9:26:cb:25:d5:d6:46:e1:44:46:82:69:9b:a7:08:
bd:f9:dc:e8:f5:15:71:5e:22:9f:13:06:12:54:55:
a0:98:70:22:73:0b:85:20:ec:8d:24:41:c8:88:ec:
d0:ab:65:36:1e:0d:e5:e0:38:47:28:79:ec:f0:3f:
cc:8e:79:0f:8e:6b:a3:ef:d2:ee:b3:df:42:0c:3d:
56:17:1b:04:52:59:15:6c:60:08:8b:f3:7e:18:87:
6b:d8:68:b9:8f:e7:a6:fd:f0:c8:dc:a6:43:80:8d:
a5:cc:f7:15:f2:53:c4:dd:47:68:09:ef:0d:c6:ab:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5D:F0:2B:E5:52:D6:5A:6A:C3:A4:F6:F8:67:E3:BF:C1:97:FA:A2
X509v3 Authority Key Identifier:
keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:cd:89:9c:95:69:b5:43:c0:37:ee:3e:6c:c2:19:02:3e:df:
d6:35:ba:e1:89:fd:c7:fa:dc:e7:86:34:81:60:9a:15:2b:43:
a0:b7:e1:61:1b:77:a8:12:52:45:f5:b7:7b:30:0b:0a:b8:07:
4d:59:8a:e8:c7:00:cc:5a:bc:0f:58:7c:d8:53:52:9d:a1:d6:
84:fe:f6:6d:96:3e:79:4b:e4:e3:a6:53:27:11:1f:f2:9a:7d:
ac:96:79:43:93:40:cd:5d:ff:4d:76:9f:25:6d:3c:8e:7c:95:
bc:4c:5c:b5:7c:90:1a:06:f8:53:12:4e:09:98:17:30:c5:05:
29:ac:bb:1a:24:61:34:30:3c:76:d2:7a:eb:49:41:04:cf:08:
6a:f7:41:e0:42:56:9f:cc:f0:74:cd:45:cc:3d:b8:33:1f:cd:
7b:be:f1:f3:0d:f2:a6:3d:b5:d7:26:d0:cc:56:bc:29:84:ed:
2e:10:58:5d:6b:a1:1e:27:ac:d4:8a:c8:b1:39:94:0d:f2:fc:
27:89:1c:0d:35:53:5c:31:80:a6:0e:17:d2:41:6c:69:9a:6f:
a1:e8:50:81:bf:e2:02:6b:c6:14:24:62:ac:64:df:33:64:e1:
86:21:0e:a0:32:66:71:d5:4f:ce:54:bd:9c:44:bd:39:ae:c9:
fe:ad:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:30 2026 by rpki-client