
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json)
Hash identifier: oLiBoWSSsaguzZxyEWbWuKSiCHRYYEYkA39EZnnKoUA=
Subject key identifier: D0:75:B5:FA:E9:81:57:BC:DD:FA:9F:BF:14:10:B5:FF:D4:9C:EF:3A
Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96
Certificate serial: 3522
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
Manifest number: 351E
Signing time: Sat 28 Feb 2026 14:34:17 +0000
Manifest this update: Sat 28 Feb 2026 14:34:17 +0000
Manifest next update: Sat 07 Mar 2026 14:34:17 +0000
Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: fSN8DKBeK3EHMTqhRQJncmegVvsUykojlajwqPvR28Y=)
2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13602 (0x3522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96
Validity
Not Before: Feb 28 14:34:17 2026 GMT
Not After : Mar 7 14:34:17 2026 GMT
Subject: CN=69a2fce9-07a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0b:ca:d6:3a:c6:6f:0f:78:50:ab:7a:e1:32:
1a:dc:dd:9f:7d:7f:3f:bb:80:13:3d:9a:9c:32:b2:
e7:ce:68:b5:e4:26:5e:e5:5d:1b:31:17:29:c8:94:
86:cc:2a:eb:40:99:a8:cb:5e:53:15:20:32:6e:3c:
83:18:7a:43:62:59:e1:b5:77:65:5f:73:2e:93:4d:
9a:02:04:c9:8f:b8:8b:4e:0e:cd:cb:63:b7:f3:14:
27:e7:56:8f:49:7b:6b:13:68:d1:75:2e:d4:d5:55:
13:2a:a3:f0:f6:01:50:fa:29:8a:83:00:d7:1d:91:
89:14:dd:b2:45:99:ec:1d:13:97:a0:34:57:28:e3:
c6:32:33:4b:f0:b9:e0:c4:23:35:81:42:1a:28:22:
a2:0a:63:ee:5b:7f:fe:33:cf:5e:e5:10:64:68:03:
da:c3:52:18:b9:05:3f:c5:22:cf:9a:99:c7:33:75:
f8:38:12:5e:a4:b5:c0:3e:fa:e2:1f:d9:ec:d9:a6:
9b:8b:21:4b:ff:c1:cf:2f:98:ba:04:94:21:35:8e:
2b:e3:a2:d0:61:d6:bb:12:04:5b:2c:f4:d0:f1:c2:
88:35:18:3b:58:16:01:77:fc:65:f0:aa:ab:97:1d:
31:b2:17:79:c8:02:a2:b8:6b:06:2c:2c:c0:f3:2f:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:B5:FA:E9:81:57:BC:DD:FA:9F:BF:14:10:B5:FF:D4:9C:EF:3A
X509v3 Authority Key Identifier:
keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4c:d0:35:69:b5:e2:68:03:69:26:07:1f:8f:61:b2:20:16:
7b:d4:dd:3a:67:45:13:14:b3:e9:25:8e:8b:16:09:ae:a8:82:
ba:a8:9e:f8:03:07:46:10:51:1e:56:25:ea:cc:38:5e:14:b1:
e9:5e:32:e2:ef:6f:b8:ac:be:d9:7a:0d:94:ab:b9:a9:54:d6:
9b:21:1a:2f:21:f5:7e:a1:d3:3f:35:95:99:14:dc:15:d3:51:
06:12:18:86:04:55:28:40:60:52:d5:f1:b6:c3:b6:07:d2:7e:
c6:da:9a:5d:f3:8a:fd:34:90:b1:c7:86:92:20:3f:46:b4:6e:
9b:37:2a:44:82:e1:c1:84:04:e6:7f:3f:e7:9e:4e:2b:a2:22:
37:26:b6:58:ac:9a:18:c9:57:a8:c9:e3:a5:d7:6f:a0:d7:ca:
6a:c4:0a:43:25:18:55:a3:00:b6:ad:5b:65:7a:66:90:5a:36:
f6:d2:2e:b0:8d:67:76:0a:fc:db:8e:18:16:23:6f:80:7d:28:
c1:d5:08:ff:f0:f5:88:2a:8a:27:db:36:26:f6:cc:6d:72:3a:
b1:b3:f8:f3:fe:ed:aa:f5:3c:5a:d4:63:af:a8:95:2e:17:93:
32:67:6d:f3:19:22:05:63:83:d8:7f:10:6a:94:51:e6:cf:fa:
b5:4c:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:15 2026 by rpki-client