
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File: MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier: M2aqHdJonO4bTi/eg2dl4+5GeSRznrqxRXCG8piW8nU=
Subject key identifier: A1:C3:EA:7D:BA:CB:77:B1:30:41:27:46:01:AD:F7:27:A6:87:A8:9C
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer: /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial: 075F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number: 0755
Signing time: Tue 28 Jul 2026 15:15:50 +0000
Manifest this update: Tue 28 Jul 2026 15:15:49 +0000
Manifest next update: Tue 04 Aug 2026 15:15:49 +0000
Files and hashes: 1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: IZ2grparSTAgxIzcuypkZIQjPBtIzzA9+3MUSpTDU18=)
2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: dWX5BlXnJUAo9dHvNX1RgcAB0PkL/ZoFYS5PfP1NoaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887 (0x75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Validity
Not Before: Jul 28 15:15:49 2026 GMT
Not After : Aug 4 15:15:49 2026 GMT
Subject: CN=6a68c7a5-f9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:b6:f2:f0:eb:c0:ef:c9:ba:74:9b:64:d8:
6b:5b:ec:0b:52:3b:04:24:3b:92:47:92:67:13:a6:
74:ab:c3:2b:8a:98:1b:0f:2c:42:3d:55:4c:aa:d9:
de:de:a6:26:08:07:5b:74:1a:17:8f:f8:b2:b2:44:
02:f3:fe:4e:8e:ee:46:6e:a3:1e:61:9d:30:fc:66:
e8:2a:b9:ef:ac:38:d6:bc:a5:60:8f:9a:28:0b:6b:
de:10:a4:23:4d:32:90:a2:37:35:58:cb:c5:1a:e3:
bf:bf:6c:62:5a:a6:19:a4:3d:a9:d5:54:9f:01:49:
e4:a3:f5:4f:47:c3:45:57:45:4d:ab:5d:66:3f:2f:
da:7a:c3:e7:e4:27:15:9f:e2:02:3d:d8:81:46:78:
45:70:fe:80:2b:1b:84:be:00:aa:e8:6e:4c:92:e3:
9d:8a:1e:83:3d:8b:88:ce:10:3d:84:de:9a:35:af:
2a:b4:8d:4a:58:2a:0c:f8:56:80:65:84:5d:fe:eb:
56:1f:fb:5a:00:35:83:13:c9:0d:0e:79:4c:32:cf:
0f:98:51:9e:73:5d:a5:3f:84:fa:f4:86:17:dc:4c:
35:54:92:a6:1c:97:6b:50:a9:c4:60:05:82:75:9c:
d5:25:60:a5:d3:51:e1:2a:3b:50:57:83:3b:f6:56:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C3:EA:7D:BA:CB:77:B1:30:41:27:46:01:AD:F7:27:A6:87:A8:9C
X509v3 Authority Key Identifier:
keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:a3:62:c8:66:bc:c4:dd:bf:81:ba:4a:dd:ee:85:60:5e:f4:
d0:00:9c:2b:82:66:9c:ee:56:f5:47:6f:d3:64:78:03:ce:2b:
e7:7f:d3:0a:c3:02:d1:2c:00:46:b2:af:47:20:d8:c6:6c:3c:
54:c7:79:b2:32:67:34:34:84:8a:1b:ea:8e:b4:4b:f0:2b:db:
6c:8d:d3:59:c2:42:e8:84:e0:bb:3e:3d:09:b4:44:d9:7b:12:
20:49:77:0d:41:40:f1:4a:20:06:65:bb:7a:b8:8b:3b:0b:3d:
a1:4e:fd:da:03:a4:7d:97:22:aa:6d:cf:17:6f:5b:38:11:f0:
7b:ba:39:5f:06:29:6a:0f:78:f2:0a:ac:3d:53:d4:10:87:7f:
95:4d:55:37:4e:4f:00:d9:b2:3f:ea:39:b0:3e:7a:cd:46:2c:
f0:16:2c:e1:d0:4a:87:d9:00:40:7b:7a:ee:d1:70:67:c6:23:
f3:2d:28:4a:4e:9d:df:64:56:45:ae:65:52:65:17:1e:40:ed:
34:10:b4:de:cf:9d:25:22:5f:fd:a4:85:6b:d6:ba:2b:c5:41:
bd:18:1b:8e:31:57:1b:2f:4b:60:9a:b4:5b:92:2d:c5:82:5a:
c7:01:a9:11:fb:20:35:02:9c:42:1a:27:5e:f8:7e:81:23:3f:
8a:6f:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:28 2026 by rpki-client