
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier: MD17nEEQ/u6n0vDXRK+FOGYrNACr0fM115/mYp7NLpA=
Subject key identifier: AA:D6:C5:BF:0F:5D:8E:AC:7A:C8:05:98:26:9D:1E:40:DA:24:24:4B
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 02CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number: 02AE
Signing time: Mon 21 Sep 2026 01:48:34 +0000
Manifest this update: Mon 21 Sep 2026 01:48:33 +0000
Manifest next update: Mon 28 Sep 2026 01:48:33 +0000
Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: 5UpDJtv3JCPpSlMYJRh4US7KHKFQBPjtPaq4puDGhZM=)
2: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: eeLCdmHI4DVoBIKt5fe2w5/hqqdnpeD4LytUQmmILxA=)
3: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: QbYcHC8sEaaqzKI4aZ+szj1qFExhkAsjpip5wt7ACvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Sep 21 01:48:33 2026 GMT
Not After : Sep 28 01:48:33 2026 GMT
Subject: CN=6ab08cf1-42ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:4f:07:61:20:f7:26:6d:34:1e:09:8e:bf:
65:da:41:b9:b1:55:07:97:e2:35:f0:03:eb:d4:f6:
56:67:98:bc:63:df:c6:60:3e:ed:f7:ae:a5:59:46:
1e:14:97:b4:18:85:32:cd:cf:c0:22:98:0a:3f:42:
17:ee:27:e6:b2:fd:7a:b2:d7:34:ea:db:f4:0a:34:
b9:f5:3b:e6:ef:7a:27:09:df:7c:67:e7:4a:fb:61:
dc:fe:cd:67:8a:df:7c:c7:c7:f0:59:55:ca:16:94:
9a:31:de:68:58:c7:e1:bf:b6:13:0b:f8:ec:a5:99:
b8:c3:b2:11:75:7b:11:b4:24:4d:75:93:4f:53:78:
86:42:4e:51:15:b1:ce:96:37:05:30:67:e3:24:7a:
6c:0b:f4:ba:70:bb:39:57:81:c8:94:07:5c:57:6f:
9d:fd:e6:6b:c5:75:00:5c:c5:a4:27:4c:33:c0:9e:
0d:81:24:e0:66:2b:61:4a:c3:61:b1:c3:96:dd:13:
a5:98:66:01:f3:2a:ef:6e:d3:06:e3:da:f5:47:dc:
fc:4d:1f:c9:50:57:96:4d:71:45:f4:6b:4e:fe:34:
65:d5:dd:f7:c7:8c:c2:99:8f:1d:ff:46:48:17:a4:
de:21:98:17:fd:2a:60:47:78:a6:43:7c:85:21:c5:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:C5:BF:0F:5D:8E:AC:7A:C8:05:98:26:9D:1E:40:DA:24:24:4B
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ac:77:35:f3:db:d7:44:d1:48:95:e3:2c:f6:41:a3:bd:e7:
52:3a:29:ab:a5:fa:d0:dc:4f:db:ab:e8:b0:fd:e2:a5:7f:0e:
9c:0b:54:3b:16:3e:b2:08:c4:12:9c:c3:4a:9f:a6:ee:15:eb:
07:f8:41:25:69:b7:e3:4c:00:ec:e2:71:ab:d7:e0:ad:de:7b:
a4:72:c5:29:a2:ee:89:00:2d:bf:42:01:b5:2d:ae:bc:21:df:
e4:dd:c1:8a:a3:dc:97:a5:6f:45:91:75:b0:db:bc:05:f9:5c:
56:05:9e:f3:0d:e5:34:89:3c:c9:c2:b6:45:81:52:6c:c8:c7:
a0:ea:89:72:54:b9:60:52:a1:f6:ff:33:a0:63:9c:26:ba:34:
46:92:76:d0:e0:95:84:86:71:20:f1:56:83:a6:b9:55:e3:82:
c3:76:06:26:2b:07:e6:7d:f8:f3:5c:73:ec:bf:4f:8e:19:1d:
7d:ed:35:6a:33:4e:d5:12:a9:57:4b:f3:61:45:1a:69:68:f6:
6a:79:4e:e1:04:68:d7:db:e3:13:4b:71:21:89:24:f1:47:ee:
9b:a0:53:05:ba:b3:5c:04:57:0b:ce:e1:56:46:98:d6:93:64:
20:93:b9:67:55:21:ab:e5:6d:a5:37:0a:b1:25:28:54:4d:26:
23:30:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:38:25 2026 by rpki-client