
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json)
Hash identifier: RAhUiTHRIaWlrP/iIpBkuaRoEi7+CofZzGfsHoUKhEg=
Subject key identifier: F7:3A:C6:66:98:8B:C8:BD:CD:CF:A0:18:B8:FE:FB:DF:36:A1:0A:78
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial: 071C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
Manifest number: 0708
Signing time: Sat 28 Feb 2026 22:25:01 +0000
Manifest this update: Sat 28 Feb 2026 22:25:01 +0000
Manifest next update: Sat 07 Mar 2026 22:25:01 +0000
Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: L81MqetWRUI+8b2zWpBfPDRGC625IsxauIe+nD7RjYU=)
2: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: +yuT7yjiWmpaEtvjmmlaSTwL7TMi9upqdNU75vbgxCs=)
3: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: qDaA6jRk3lw13QGhnGcT1T1nqbYELDvWLHmixRLVCRY=)
4: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: tH/ng5ag0vcdBEOD3zF1mV/sZHYO/MkXzSArESpD2+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Validity
Not Before: Feb 28 22:25:01 2026 GMT
Not After : Mar 7 22:25:01 2026 GMT
Subject: CN=69a36b3d-4641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:22:b0:92:0d:64:b6:52:3f:b5:8d:35:a1:
b2:c4:25:b2:4b:e7:23:a4:50:93:3d:01:6b:e7:de:
1c:d0:e4:47:bf:fe:9c:ff:62:52:4a:b2:10:d4:f5:
2b:17:ac:9d:6a:32:e1:da:b2:08:cf:d9:b1:87:fb:
92:f7:e9:e7:07:f9:d9:8d:a1:6f:ad:d0:8d:c2:4e:
12:a6:38:94:4d:11:f3:db:fd:ac:e4:f0:6b:92:59:
cd:c4:40:88:bd:01:12:ee:ba:08:56:bc:eb:ca:90:
ed:b5:98:b5:39:8c:81:73:9a:ed:57:03:4f:41:d9:
b2:a5:26:50:60:7e:ab:1a:f1:5f:24:bf:b0:57:c9:
9a:30:83:42:73:23:2d:16:fe:cd:20:8b:a6:cf:ce:
a3:1e:66:43:29:38:1a:f5:37:9a:33:af:87:03:d6:
97:bd:2c:3f:73:79:eb:9e:45:4b:a5:73:ae:82:1c:
6a:a9:64:1b:8b:57:65:89:8e:95:6d:eb:af:96:3e:
4c:bf:98:ff:4d:74:ff:ca:96:55:85:48:5a:1e:a1:
63:be:ab:37:d4:23:55:dc:95:b9:70:0c:98:bd:76:
e4:64:0c:b9:cc:07:99:a6:49:16:91:78:b1:0e:43:
95:ec:af:0b:fd:ab:d1:1d:f0:85:54:8d:c8:ac:69:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:C6:66:98:8B:C8:BD:CD:CF:A0:18:B8:FE:FB:DF:36:A1:0A:78
X509v3 Authority Key Identifier:
keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:b4:5d:e7:2c:22:8e:11:5d:f0:f5:76:ab:a4:8e:24:8a:eb:
f7:b9:9b:83:e3:e0:58:99:34:cb:a6:a8:70:74:ba:0e:04:81:
2a:6b:eb:fd:8d:e7:ae:06:df:46:f8:69:d6:55:f7:7a:90:fa:
83:b9:98:71:8a:9b:8d:5d:7f:bb:d1:7c:2c:7d:b7:64:70:60:
a2:8a:0a:19:92:27:1c:29:62:93:4b:1b:96:51:f6:58:37:e1:
09:38:fd:cc:a7:f7:5f:a0:08:77:4b:d1:4a:79:5d:67:9c:b3:
d5:65:9f:fa:3b:63:e3:9e:43:7a:36:c0:2b:e7:ed:a7:41:34:
95:0a:d3:6f:3b:a5:ce:a1:aa:1d:0f:2b:23:ec:52:21:1e:0d:
9c:47:ed:45:01:52:48:79:0c:22:b8:5e:9c:b9:50:66:ae:3d:
44:e0:84:04:5b:04:e7:9f:3d:c2:bf:ed:ac:af:6d:52:ee:c4:
6b:a0:81:2c:2f:74:e9:96:95:3c:6d:7b:e0:11:31:33:6c:79:
02:59:96:4b:8d:b4:79:e7:13:34:c4:b4:a2:9c:bf:a5:77:7c:
07:ce:73:b5:f5:ea:e0:ab:b0:08:14:e2:31:81:f2:2e:62:78:
db:3d:76:08:47:fa:ea:95:da:8f:89:23:05:87:3a:62:81:35:
59:b9:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:34 2026 by rpki-client