
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier: cCeq/xNRh30VrARpeB1xv1k22NTeUChcRimdliyupP0=
Subject key identifier: A3:C5:05:09:90:A2:DF:0D:C4:11:C8:83:3E:89:9B:89:54:F8:5B:3F
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number: 01EC
Signing time: Sun 01 Mar 2026 04:12:46 +0000
Manifest this update: Sun 01 Mar 2026 04:12:46 +0000
Manifest next update: Sun 08 Mar 2026 04:12:46 +0000
Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: GZslR0VLN69zuYs7nTBX3jaNz/Az88Jxff4GYNpqIMc=)
2: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: LKz1FayrdnRrvliw00WIAS29yyi3eRFLQzN0+Q7hzDY=)
3: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=)
4: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: AVbE1i7Oy7wljsn75aLM04CYS65KFNSXwAhksX6zM28=)
5: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=)
6: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=)
7: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=)
8: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=)
9: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: XA94zE/GSTC30ijakEZif+bTFdWzgCRzrcitaE/Y5Hg=)
10: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=)
11: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=)
12: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Validity
Not Before: Mar 1 04:12:46 2026 GMT
Not After : Mar 8 04:12:46 2026 GMT
Subject: CN=69a3bcbe-f5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:4d:ff:d2:77:52:68:ae:b0:07:b6:79:f8:
75:f7:8f:7b:8c:c9:17:e8:6b:4c:20:5d:19:de:ee:
79:e8:09:25:b1:8e:86:e2:c6:76:6c:06:23:57:16:
62:48:b5:fa:98:1a:1c:76:e5:a4:80:92:96:ed:95:
9b:7b:5b:f1:99:c5:27:35:b1:19:8a:41:48:4d:7f:
c3:64:08:9c:58:12:d1:4a:43:be:9e:0a:0f:d6:0f:
0c:8f:f6:91:3f:da:44:6a:b0:ce:da:a0:ca:0f:d4:
e1:ac:11:84:09:06:b8:98:06:ec:8b:a0:2f:3d:6c:
e7:1a:60:de:37:b5:30:bc:12:8b:2a:af:f8:52:19:
26:1e:54:9b:f7:d5:8c:9c:e1:0a:60:bb:5c:40:46:
61:f5:f5:33:e0:8d:b9:f3:cf:94:91:89:2c:f0:d6:
23:d1:1e:32:5a:65:6e:4f:1d:34:fd:83:be:18:17:
1a:b2:1d:7d:87:9e:82:33:81:23:03:4e:71:0a:27:
2a:7c:4d:44:67:b6:46:b7:19:57:ca:e1:d3:96:2f:
24:72:72:b0:06:a5:d0:85:0d:bc:5a:a3:c6:8d:a4:
e6:df:ee:11:af:32:77:c2:03:6e:3e:24:37:de:91:
8e:3e:6b:61:29:b4:8c:7b:1f:49:0d:76:1f:1d:66:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C5:05:09:90:A2:DF:0D:C4:11:C8:83:3E:89:9B:89:54:F8:5B:3F
X509v3 Authority Key Identifier:
keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:f2:2b:10:e4:1f:ed:02:d2:3e:5e:d1:a0:3f:0d:17:d6:f6:
18:fb:40:9b:9c:e1:cb:53:2c:7a:6d:ff:0a:c5:ed:45:73:27:
48:6d:0b:d5:30:22:5c:b1:eb:4e:6a:20:45:a2:b8:d7:96:0c:
56:d4:33:65:15:6b:46:64:22:b0:7f:8c:e7:d8:49:13:e8:b0:
eb:a8:1c:e6:bc:17:65:cf:9f:4f:d3:73:0a:2d:65:52:9b:91:
6e:cb:54:78:5a:bf:fe:e3:f4:59:68:8d:3e:de:2c:74:c5:45:
7a:14:87:c5:69:0b:4f:4c:2e:06:c0:93:ad:a2:04:53:98:69:
2d:83:fa:a2:48:53:ee:84:4f:70:75:ab:b5:8a:92:8f:d5:a0:
fa:97:fb:9b:f9:72:f2:21:c6:4a:86:ef:b5:88:3e:2c:dd:a1:
03:be:c9:5a:a8:6a:00:82:41:02:39:c4:8b:0e:33:7f:67:fe:
c2:70:b1:ca:2f:ee:96:db:e5:d6:ae:7d:a1:39:4f:ce:3a:dd:
f7:4a:3d:1a:bc:3a:b4:28:ce:3c:8b:b8:42:ad:c7:03:30:8a:
ac:ee:d5:b8:32:df:72:4e:d5:8d:1f:2c:ca:83:d0:63:73:8c:
e9:e6:25:a4:57:84:71:f9:e5:61:33:19:1b:4c:78:a9:4f:c4:
59:67:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:58 2026 by rpki-client