
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File: MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier: sVsYTq6UtmfyTR9GK7mVVdM38q/j/MzwGzgAqNOwQss=
Subject key identifier: 25:CB:06:24:28:F0:40:1A:50:CD:E8:A8:99:2F:2A:D5:F4:47:3E:DD
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer: /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial: 077E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number: 0774
Signing time: Sat 26 Sep 2026 15:11:42 +0000
Manifest this update: Sat 26 Sep 2026 15:11:42 +0000
Manifest next update: Sat 03 Oct 2026 15:11:42 +0000
Files and hashes: 1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: c3jbd2RMZ1qn2R3mCXlp1nhF2ilovXV4NO7o9h733wo=)
2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: dWX5BlXnJUAo9dHvNX1RgcAB0PkL/ZoFYS5PfP1NoaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Validity
Not Before: Sep 26 15:11:42 2026 GMT
Not After : Oct 3 15:11:42 2026 GMT
Subject: CN=6ab7e0ae-7978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:0b:82:91:83:53:0e:3f:39:ef:de:bf:07:
f7:4a:34:dd:fa:f0:39:ca:97:74:15:57:01:d9:ae:
95:19:3a:3d:df:73:86:a9:c7:f9:72:b8:58:68:9b:
80:de:c9:d4:4b:26:c1:5d:fc:44:e2:da:50:9b:b0:
89:e6:be:f1:48:d9:1e:70:12:fb:e7:f4:2f:42:d3:
d1:d7:8f:2d:22:aa:1c:0b:0a:11:73:fd:32:d6:88:
91:36:e9:95:d7:0e:06:4e:82:f9:db:e7:e4:ed:29:
30:b7:02:e9:9d:29:e6:40:a7:ea:5b:55:e9:15:bd:
84:f5:fe:18:e5:1d:33:0b:1f:c9:8e:93:90:4b:e9:
d0:e7:0c:7f:c8:71:15:56:73:65:38:06:fb:44:b0:
e9:96:cc:a7:8e:63:05:02:04:34:cb:c6:27:61:7e:
8c:d9:6c:4b:34:cf:c0:65:a8:d0:bb:ce:18:84:10:
ff:c4:03:7f:c7:f4:4c:95:aa:e4:41:ab:5f:74:97:
29:2c:2a:ad:6e:83:5e:64:c9:3e:a6:63:5d:91:db:
0d:4e:77:39:f1:ee:ec:1a:4d:98:b0:6a:a8:b0:4b:
c1:57:bb:33:27:82:3c:3c:9c:5f:fe:fa:f2:c7:dc:
a0:e5:77:75:ec:fe:c7:05:d2:4e:9b:32:75:2a:6a:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:06:24:28:F0:40:1A:50:CD:E8:A8:99:2F:2A:D5:F4:47:3E:DD
X509v3 Authority Key Identifier:
keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c5:49:6b:e5:84:cb:b3:d2:12:1a:85:09:26:75:9f:b8:bb:
64:1b:de:e5:f5:bb:19:51:86:49:0f:c4:5e:25:e3:22:3c:cc:
c7:8f:53:ad:c2:ca:21:70:65:41:e1:4b:f3:a0:35:a0:6e:ba:
be:00:a8:ba:a7:9a:77:5e:82:34:bd:2c:93:2a:7b:27:3c:71:
d5:5f:32:94:fe:ec:90:4e:93:26:59:c7:87:51:be:f2:cc:88:
c7:74:46:23:5c:ca:6a:a9:5f:42:94:f4:6a:1b:5d:ce:1f:1b:
72:09:1b:63:a3:ce:0e:1e:59:74:34:80:7c:39:9b:ff:ec:52:
6a:f5:6d:44:b9:6d:bc:94:94:d3:d0:9b:19:31:37:82:b6:f0:
ff:22:04:aa:b9:09:1a:ef:d8:e6:8e:ff:24:98:92:c3:ee:f7:
37:4e:b0:9a:3b:10:f7:90:8a:7b:79:0a:14:bc:e4:82:21:09:
2d:8e:78:df:69:fd:6d:0e:72:2b:86:5e:97:56:68:b4:5e:e7:
f5:27:35:d8:fd:0f:4b:97:18:2b:91:a9:64:25:cc:0f:03:1e:
a0:99:e6:6c:3c:60:24:74:1c:cd:5a:37:b4:96:cf:84:71:ae:
2f:a9:2d:37:e3:c9:4e:4e:da:09:9b:13:3e:3a:91:b2:f0:70:
66:0f:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:11:51 2026 by rpki-client