
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
File: MGcPYbflDgsLiOclHeh4TAPJ5GI.mft (raw, json)
Hash identifier: hVROHn8H8JNJy9UIEJAG49nVImnL2+A3wHAUZG/sRAQ=
Subject key identifier: 25:3A:0A:AA:73:66:B1:54:6C:C6:B0:FC:C8:6A:55:32:06:94:A7:6B
Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
Manifest number: 0198
Signing time: Tue 28 Jul 2026 15:48:10 +0000
Manifest this update: Tue 28 Jul 2026 15:48:09 +0000
Manifest next update: Tue 04 Aug 2026 15:48:09 +0000
Files and hashes: 1: MGcPYbflDgsLiOclHeh4TAPJ5GI.crl (hash: HPp8f0C73hVleIrmlNvJlR/1p/dBV9Zgz6rv7WN9Bag=)
2: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (hash: CoBKPTaGKggKkbkoCo2Dk6F6z5lZTZfgxUsgOyih/d4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC, serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Validity
Not Before: Jul 28 15:48:09 2026 GMT
Not After : Aug 4 15:48:09 2026 GMT
Subject: CN=6a68cf39-583d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:0d:e9:3a:ab:45:18:0a:a7:3b:0a:b7:ab:
46:de:78:49:19:b2:a0:bd:58:db:35:e3:56:62:66:
05:3b:f7:ff:5e:1f:8c:49:7e:e6:a6:37:09:1b:db:
f8:2a:a2:e5:53:9f:fc:be:76:dc:8a:ee:b7:0f:45:
df:1a:8f:46:4c:93:ab:fb:47:a9:3b:d5:6e:11:70:
9c:49:93:6e:38:36:ed:d5:82:47:6f:34:25:0e:5b:
3c:05:2b:dd:6b:52:de:1c:c6:f9:4a:9b:e7:86:e0:
c0:4a:8e:6c:ed:6c:ac:e1:4a:1a:b1:6e:3b:42:92:
21:70:41:e7:ad:7e:0f:80:40:a8:6e:62:e9:38:ce:
b4:7c:4b:4f:8c:b2:ad:26:ef:20:56:dc:3b:26:d2:
37:8b:dc:b6:dc:9c:75:8b:70:ee:e7:3d:97:29:72:
f8:16:10:b9:f2:c5:45:82:05:fa:bb:e4:2b:cc:cb:
e1:b2:d9:04:2e:3e:7f:e8:08:6c:38:4d:99:5f:17:
6e:6f:af:4c:07:d7:12:33:b6:c2:5e:1a:12:36:e3:
d0:b0:d8:4f:93:03:0f:25:bb:2b:ea:b6:72:df:1a:
6c:27:33:58:6d:c6:1b:70:8b:50:a7:3c:15:3b:64:
2f:a0:aa:2f:12:e9:9d:9e:e3:08:e7:d0:d7:21:7e:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:0A:AA:73:66:B1:54:6C:C6:B0:FC:C8:6A:55:32:06:94:A7:6B
X509v3 Authority Key Identifier:
keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:56:f2:a6:f3:55:89:b8:64:c4:c0:1e:67:26:5a:27:84:
1b:1b:29:54:b6:76:91:5d:7c:fd:ae:07:fa:e2:4d:1b:74:3b:
ae:32:05:01:3a:5e:8a:60:32:e1:94:a8:7a:1e:80:90:2a:b2:
da:d8:85:1d:9a:7a:9a:02:2b:0e:af:70:ce:98:bf:2f:a0:0d:
3b:a3:09:09:de:fc:9e:ca:7e:8b:fa:69:11:93:29:a2:dc:05:
4a:4d:ad:2f:fa:af:b4:e6:68:4b:70:a2:e0:b9:a8:62:a8:c5:
98:ac:64:b9:39:14:dc:dd:57:8f:29:e3:eb:c6:f3:ea:f2:99:
d0:38:81:9c:e6:a3:92:3e:a6:dd:2c:b3:fd:35:dd:14:26:4e:
ad:11:c7:46:ae:09:1b:99:11:cc:94:eb:b0:b5:6f:a3:7e:8e:
98:b5:1b:80:28:96:24:e7:d0:8e:4e:2b:15:81:a7:1f:04:76:
5c:e3:d6:a6:f2:ae:ec:6b:61:e0:42:ab:5d:99:91:4f:4b:f4:
b8:d3:e9:e1:c0:24:0e:ba:0e:a0:30:98:f0:73:12:c0:8b:c1:
20:8f:75:ec:12:a7:91:88:e4:db:58:50:9c:b4:83:42:d6:62:
b5:0a:fa:e3:b0:32:da:59:1b:98:a7:eb:2a:cc:22:da:77:c7:
8d:a1:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:27 2026 by rpki-client