
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
File: MGcPYbflDgsLiOclHeh4TAPJ5GI.mft (raw, json)
Hash identifier: 0edcCOPW+W0Gdow9Vf66uanR3UHIHiyce5SlQeiRMTY=
Subject key identifier: 57:AD:09:45:F1:F5:1B:7D:68:61:26:06:40:89:D5:F5:CC:DD:C5:1D
Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
Manifest number: 0148
Signing time: Sat 28 Feb 2026 15:44:38 +0000
Manifest this update: Sat 28 Feb 2026 15:44:38 +0000
Manifest next update: Sat 07 Mar 2026 15:44:38 +0000
Files and hashes: 1: MGcPYbflDgsLiOclHeh4TAPJ5GI.crl (hash: VpVbPXp+JU8Lrj9s0Zz48oCB0PYIV8Cj4YDxoSQyVJ0=)
2: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (hash: fWZETNQO/nq4+BYBCH9MSAL8N1aF88n2/dhae6ZuhiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC, serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Validity
Not Before: Feb 28 15:44:38 2026 GMT
Not After : Mar 7 15:44:38 2026 GMT
Subject: CN=69a30d66-1cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:26:62:05:3d:01:98:3e:9f:e7:e1:58:b4:
97:9e:e8:7a:4c:40:51:14:c2:6d:d4:31:cd:d0:a7:
6b:44:fc:24:3d:0d:96:b6:7e:98:02:c6:26:e4:8c:
09:bf:f9:23:1d:b8:fb:dc:ed:74:8b:cd:4c:1a:21:
7d:60:36:f6:df:7b:e9:5a:7b:86:04:83:0d:4c:9d:
71:5b:52:f5:7e:82:67:1c:44:8f:60:c8:cc:73:a7:
da:05:3b:d2:51:db:2c:f9:1f:34:a4:51:08:2e:c0:
e9:a7:13:9b:69:b1:65:b3:57:94:d4:df:82:a4:67:
52:cf:aa:2b:77:32:08:bd:20:51:72:8f:e4:7a:03:
3c:db:9f:27:3b:da:49:3a:d6:06:4a:9b:32:2b:12:
35:87:0e:a4:48:61:34:0d:aa:17:f8:92:12:17:46:
72:d8:5c:16:d4:65:37:43:73:22:eb:c3:08:2f:81:
7f:ea:cb:3a:26:04:8a:0a:9e:3b:11:5e:31:25:8b:
b4:31:99:61:b3:3c:7a:c3:b4:10:b9:68:b3:ec:3e:
96:c2:01:3b:23:18:b1:bb:79:55:e2:dd:fb:7e:80:
db:a7:7e:50:e7:f5:c6:7d:13:61:9f:0a:6e:16:b8:
ba:36:18:63:08:c4:39:83:8d:17:e4:94:f1:76:ae:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:09:45:F1:F5:1B:7D:68:61:26:06:40:89:D5:F5:CC:DD:C5:1D
X509v3 Authority Key Identifier:
keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1a:db:07:66:5b:66:e4:63:72:16:a6:7a:36:5c:1f:c0:80:
a0:e5:19:2d:4f:e8:b1:1a:64:ae:e9:a1:80:50:5c:12:dd:4b:
52:78:5e:bf:bb:b9:88:68:ee:8f:35:a5:3d:af:60:a7:92:94:
6a:47:34:80:4f:88:bf:23:f3:33:47:a8:5a:f8:92:41:7f:6d:
97:6c:c3:cc:6f:2e:c4:95:3a:c6:06:c5:cf:68:a2:f0:08:6a:
fc:8c:96:5f:26:dd:3d:65:a0:f7:93:eb:e3:3d:c7:b3:7e:a6:
47:68:ae:7e:df:a2:18:8d:f8:49:92:c1:fd:b6:a8:25:22:f3:
52:4a:ba:b7:3a:0c:c9:d5:8a:4c:47:3a:2e:90:94:49:12:98:
e6:1d:41:c0:e1:30:37:74:29:30:61:3a:16:70:89:dd:20:bb:
9c:eb:8a:10:3e:80:1b:86:da:61:1b:09:fb:15:2a:9b:54:a9:
ca:63:3f:91:15:a3:31:b1:2f:9a:3f:8b:ab:49:5e:42:64:98:
cc:40:3a:39:f5:31:19:8b:97:9e:01:16:a2:82:be:f2:55:8b:
63:f7:34:ba:0b:2c:f0:e9:00:dc:cb:a2:b9:d6:02:24:87:d6:
34:a4:6f:48:89:25:cf:26:18:94:2a:8e:2e:4b:8a:27:d3:b8:
0a:eb:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:53 2026 by rpki-client