
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier: NTzOGfdzsMMtxewSE6kccycESoYsbWptkv8N45fbrT0=
Subject key identifier: 5C:4B:8B:35:A4:73:27:F0:40:27:4E:FA:39:05:E5:3D:78:21:C9:43
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 02AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number: 0291
Signing time: Wed 29 Jul 2026 03:03:20 +0000
Manifest this update: Wed 29 Jul 2026 03:03:20 +0000
Manifest next update: Wed 05 Aug 2026 03:03:20 +0000
Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: RMlFIcKZbJcmwa7LN1JZHWRCnjEp5d1ASx9Tr2CkLqM=)
2: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: QbYcHC8sEaaqzKI4aZ+szj1qFExhkAsjpip5wt7ACvM=)
3: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: /Xmk4tz+mCwExZGnlLqC5Zkmn9dPaTMI2+1ZySEn0OI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Jul 29 03:03:20 2026 GMT
Not After : Aug 5 03:03:20 2026 GMT
Subject: CN=6a696d78-ebec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:29:5b:22:01:2f:50:e5:68:d9:50:c6:a3:
46:f2:f0:a7:3c:28:dc:95:d2:d7:53:d1:f3:41:c6:
f9:4b:d1:9e:51:13:11:02:2e:48:2e:a8:f9:27:df:
43:77:24:3e:49:ca:d7:a1:05:ec:08:fa:38:65:a9:
1b:11:82:37:8f:ef:49:03:66:f5:68:5f:60:64:9a:
d9:17:26:ef:0a:68:3e:24:85:cc:bb:dd:1f:7d:41:
77:c4:53:ce:35:fc:e8:70:b1:1c:ae:ff:b7:26:54:
a7:6c:65:b8:37:5b:c1:ca:e8:d2:ec:84:fb:f3:f8:
7d:ec:67:78:48:83:5a:1a:63:96:66:14:0c:5d:72:
7a:eb:78:80:ee:b0:86:5b:b4:72:dc:0a:8a:a4:89:
50:95:f0:90:e2:71:49:22:ee:6f:9f:7e:e0:00:ef:
4b:4c:73:7c:5e:74:6a:06:4a:4d:b4:22:a8:ab:56:
f1:f6:80:de:fa:4f:cc:09:b4:cd:72:1a:42:52:e9:
5d:d7:4b:d7:b9:94:ba:ef:c8:42:5b:f1:99:b0:f2:
90:1c:64:cd:28:41:33:03:24:6b:24:c0:9f:5d:09:
88:df:7c:24:57:bf:c0:07:85:b6:cf:ac:10:19:b8:
4b:68:a3:18:50:4b:ed:7b:e6:bd:56:65:7d:95:e8:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:8B:35:A4:73:27:F0:40:27:4E:FA:39:05:E5:3D:78:21:C9:43
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:39:b5:c4:ce:27:76:5a:23:a7:1a:36:e4:cd:a9:23:40:
87:66:97:4a:8c:2f:b3:ad:e0:57:71:c5:27:4d:4d:33:b6:2a:
d7:d6:70:a1:dd:e0:52:4f:23:61:d3:d7:bd:ec:fe:b9:c5:8d:
6a:0b:79:27:b5:8d:be:2d:90:76:50:a2:86:ed:e3:c4:46:21:
55:99:d9:07:27:d4:a6:00:d6:65:84:3b:6b:c2:87:1f:ac:99:
9b:0f:77:4a:63:00:0c:f7:19:d7:e1:ce:9e:74:4e:e5:5c:56:
d2:81:bf:2f:13:aa:4e:21:4d:9a:30:1a:6c:c3:da:f1:19:2b:
31:a3:83:4c:6d:a5:29:39:cc:53:42:65:e9:14:cb:f3:2a:62:
0e:a7:7e:0e:91:4c:c9:5a:93:45:a4:5a:cb:4b:a7:41:91:57:
4e:72:18:4f:df:3f:3b:05:b8:38:69:50:86:2d:6c:82:67:77:
28:53:7d:24:63:3c:38:38:f2:79:a7:65:75:f3:9f:37:92:08:
6b:09:ed:63:fc:7b:4c:0b:4c:bf:7e:3a:0d:e6:81:15:e8:e2:
2a:dc:c3:b0:82:30:f3:eb:3e:f7:bd:e0:35:25:8f:3e:ee:b0:
44:2b:6c:0f:26:19:a7:61:ba:db:3b:f8:df:20:30:f9:57:8b:
f5:f6:4c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:42:41 2026 by rpki-client