
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
File: MSV13k1GQ_rfrkiHbfRWfX18aFY.mft (raw, json)
Hash identifier: ujcPzdoXSEC3OwUD7OYVTMzDB9aQXWjW5BGxY0+Fwh8=
Subject key identifier: F7:F8:32:22:67:36:05:A5:A6:E4:D2:35:8F:9C:AD:B0:A1:DB:DB:DC
Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
Certificate issuer: /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
Manifest number: 36
Signing time: Sun 01 Mar 2026 09:57:48 +0000
Manifest this update: Sun 01 Mar 2026 09:57:48 +0000
Manifest next update: Sun 08 Mar 2026 09:57:48 +0000
Files and hashes: 1: MSV13k1GQ_rfrkiHbfRWfX18aFY.crl (hash: AnjI/eBeT/A6Jtf2VYX2iwbRlVIvxHsjADGcniMRdYg=)
2: 127C35B4C52511F09456F21BC4F9AE02.roa (hash: wyxXuyIC5WUaxAyzD2PyMOcBQ4OB6Gp2VhwVjUIddbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Validity
Not Before: Mar 1 09:57:48 2026 GMT
Not After : Mar 8 09:57:48 2026 GMT
Subject: CN=69a40d9c-5b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:6d:68:b9:b5:e6:14:bd:84:8e:85:03:34:
be:97:cf:6d:31:4f:7e:cc:d6:e0:49:8a:a2:82:e1:
57:51:39:44:bb:be:9f:8d:ab:fa:4e:3e:df:3c:ec:
dd:7e:34:dd:ce:67:38:ce:cc:11:f4:fc:4b:ac:8e:
2e:d4:39:c0:7d:14:24:91:91:d9:ec:a3:6e:55:7e:
0d:30:2d:16:01:f6:08:e4:66:9a:73:56:cb:ad:bb:
80:b9:43:6c:84:17:9c:b4:90:71:7c:b7:a0:62:a3:
9d:dc:e7:e7:9e:58:62:69:83:2b:d4:24:ae:97:37:
5c:d7:10:98:fd:85:6d:81:39:72:89:a8:64:f7:30:
55:4b:0f:c5:57:27:56:83:5e:39:a0:b3:7e:a0:c4:
3c:06:60:2e:38:c1:82:5b:47:25:43:a3:d6:6b:96:
fb:35:f5:e7:dc:d7:b5:52:8a:0b:32:aa:b3:86:64:
8c:b9:91:e5:0e:df:c4:7d:31:5e:eb:69:c8:d2:3e:
3a:12:83:d8:66:e2:fe:64:b7:f1:d7:c1:f4:c7:53:
67:32:4c:6d:b0:8b:70:c7:69:85:28:17:29:2a:cf:
0c:46:9a:e2:02:5e:e5:86:6b:59:5f:bc:38:fc:2e:
25:8f:cd:2c:36:58:1e:05:f1:f6:30:98:df:47:d9:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:32:22:67:36:05:A5:A6:E4:D2:35:8F:9C:AD:B0:A1:DB:DB:DC
X509v3 Authority Key Identifier:
keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:95:fb:06:15:15:83:2a:bf:71:94:f9:dc:b4:8a:bf:75:44:
21:81:a5:04:e2:f8:02:ee:b6:15:74:5b:9a:5b:74:b0:0c:e8:
59:5c:de:62:8b:c5:e9:75:ed:02:4a:10:50:a9:f1:17:7b:01:
07:80:ed:0e:cb:3a:df:bf:51:9d:98:33:73:ec:09:1b:2a:c7:
25:81:e6:f0:96:ac:a5:be:0c:26:54:71:37:ea:f6:3e:dc:ec:
a1:c7:88:71:19:23:ce:5b:0e:6f:a1:54:e9:d9:31:c6:29:cf:
56:4e:b4:4b:05:c5:3b:a5:25:e2:fe:ca:ce:cd:5f:25:4a:3c:
c9:39:2d:4d:15:b3:77:24:26:0e:1f:52:3b:c4:b9:91:30:e0:
e4:1f:9a:79:80:43:20:bf:92:c9:60:1d:d4:ea:30:dc:72:db:
71:11:1b:10:67:b3:c3:da:53:f3:01:a6:84:01:99:87:90:02:
99:dd:78:5c:65:f4:5a:ed:f5:29:3f:f8:7e:3f:21:0b:03:a1:
a7:95:89:42:55:0a:25:6f:d3:99:fb:c3:50:33:a9:8e:f9:8c:
c1:5a:33:ba:de:17:e3:cf:49:92:e3:5e:81:e4:26:b9:e5:d5:
41:7d:8f:91:d8:fa:63:8d:df:cf:fd:29:43:06:21:41:e9:51:
c1:fd:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:43 2026 by rpki-client