
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
File: -v1MzrYU4itCRPcgJe_Ck4QAq8E.mft (raw, json)
Hash identifier: eQBuWMmMB+SL+twqfhzkXYrYpFFKu/h44570Xy7vScU=
Subject key identifier: 67:71:32:3E:FE:1F:4F:99:5C:7D:39:98:4D:E1:FE:B2:F3:29:01:B8
Authority key identifier: FA:FD:4C:CE:B6:14:E2:2B:42:44:F7:20:25:EF:C2:93:84:00:AB:C1
Certificate issuer: /CN=A91C8AE7/serialNumber=FAFD4CCEB614E22B4244F72025EFC2938400ABC1
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
Manifest number: 10
Signing time: Sun 01 Mar 2026 10:37:15 +0000
Manifest this update: Sun 01 Mar 2026 10:37:15 +0000
Manifest next update: Sun 08 Mar 2026 10:37:15 +0000
Files and hashes: 1: -v1MzrYU4itCRPcgJe_Ck4QAq8E.crl (hash: yH++LUiAhnhN2x4Sk57bcIqJtgvo6P3v+oPezigNfRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.crl
rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8AE7, serialNumber=FAFD4CCEB614E22B4244F72025EFC2938400ABC1
Validity
Not Before: Mar 1 10:37:15 2026 GMT
Not After : Mar 8 10:37:15 2026 GMT
Subject: CN=69a416db-25d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:21:8a:dc:f9:d2:90:1b:16:03:b3:ce:d3:
83:d0:c8:93:c4:05:d3:e1:74:8f:03:43:71:ed:61:
a1:6d:9c:97:5d:14:27:c1:e6:09:6f:8d:cb:ab:8a:
1e:a6:8f:f6:d9:b6:55:3a:e2:1d:d0:26:1d:2d:b1:
47:6f:45:18:c6:28:e0:c4:29:2a:b1:22:dd:af:de:
75:7c:32:12:65:11:18:e4:12:07:b5:87:31:dc:21:
39:ba:83:38:bf:f8:26:20:da:fc:5c:93:a5:f1:f3:
1e:49:cc:fa:85:45:f7:e9:d2:49:49:ec:9c:8c:67:
1c:cf:bc:08:7d:2c:fe:90:b0:c6:bc:57:3e:5f:f7:
13:19:db:cd:8a:4f:de:6f:8d:c5:ce:ca:3d:c6:36:
ae:ac:d9:e5:f4:99:43:8d:db:bd:b9:5d:6d:51:d1:
55:75:1c:56:78:ac:dc:8b:7b:08:79:f2:32:48:99:
49:b0:55:0e:e7:0a:1b:6d:08:a2:92:45:7b:58:34:
c5:60:71:08:5f:b4:89:95:85:5a:e5:f0:7f:23:fa:
27:46:86:75:b1:6c:13:48:df:dd:aa:e6:01:bc:a2:
22:cd:06:4e:73:e5:3d:99:5f:d5:41:d9:bc:ff:ec:
b0:25:a7:5d:33:2c:8c:c1:ad:5b:cf:70:f1:62:c5:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:71:32:3E:FE:1F:4F:99:5C:7D:39:98:4D:E1:FE:B2:F3:29:01:B8
X509v3 Authority Key Identifier:
keyid:FA:FD:4C:CE:B6:14:E2:2B:42:44:F7:20:25:EF:C2:93:84:00:AB:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e9:1e:dc:7c:a8:58:03:cf:ba:c1:05:8e:1b:da:51:f1:93:
e5:0e:97:1a:df:02:17:fe:4a:b5:d7:ba:43:32:2b:6a:5e:d3:
db:90:23:78:05:75:00:9c:54:81:a1:a8:ce:a9:0c:4a:44:40:
44:57:1c:ec:3d:c8:86:76:f7:53:17:2d:9b:b1:93:db:4d:b8:
5e:e6:3c:52:6e:ba:ec:47:ae:73:3c:e7:7c:ac:c2:75:ee:67:
6c:1a:22:4c:81:75:8f:39:75:7a:a7:e6:c2:18:44:0a:70:02:
c7:e4:01:18:13:2b:f0:7e:91:da:1d:92:7e:62:58:68:89:8f:
aa:86:83:52:0a:74:fb:b1:2e:c8:31:13:8c:95:09:c5:49:b3:
42:2d:e3:33:28:07:b3:c1:8f:18:65:eb:76:e1:01:cf:50:ae:
7a:40:dd:cb:3b:b4:23:0b:30:fd:52:56:2a:45:ca:47:a6:2f:
4d:c5:25:af:f8:af:28:a2:10:fd:5c:5c:31:b9:25:a8:02:7e:
97:81:09:e5:fe:bd:41:a0:ac:28:d8:d4:fe:be:ee:37:60:4f:
4f:84:83:b9:30:63:82:0e:5b:c4:76:14:79:26:52:87:2f:95:
cf:0e:92:33:e6:1e:0e:f3:1b:d5:2e:32:76:18:61:41:45:f8:
db:5a:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:05 2026 by rpki-client