
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json)
Hash identifier: W5NBei0n1wUra9wZzu1FaVq1+0B7czL9Pu//Nrylaw4=
Subject key identifier: 02:CC:48:03:7B:B3:8C:7F:7A:5C:68:79:03:42:9D:E5:EB:AE:A3:1F
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial: 078C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
Manifest number: 0772
Signing time: Sun 20 Sep 2026 21:32:06 +0000
Manifest this update: Sun 20 Sep 2026 21:32:06 +0000
Manifest next update: Sun 27 Sep 2026 21:32:06 +0000
Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: 9AO48jnBZhrrRpo/bec0DMTFdwse1R2HPEdhlbcxcx8=)
2: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: b91CN8KbCA7CsKadVYDYS+4haRrVejoxjdnfqbIrH3A=)
3: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: p8nOzs2MGPpJBZ2dYf3NfouwimR2DwXOeH0VUZbqjmA=)
4: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: z3vfFzyCiPp7COCzQy7KY/5fnPoAbILohbFaBxoPiG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Validity
Not Before: Sep 20 21:32:06 2026 GMT
Not After : Sep 27 21:32:06 2026 GMT
Subject: CN=6ab050d6-2cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:1e:e6:1e:b4:88:e5:e2:4d:ce:81:a1:8a:
df:f6:03:fc:dd:5f:41:45:50:78:9a:b2:09:41:71:
94:06:99:8e:ab:16:df:dd:cf:1e:b6:b8:c9:ea:fb:
d8:0e:c4:42:fd:a9:51:79:d4:bd:ff:ac:8b:a5:49:
8d:a6:67:e5:99:c2:9a:ae:fb:bf:55:db:7f:9b:b1:
6b:25:19:30:85:ff:50:22:07:f7:6a:f9:34:a9:fe:
c3:c1:19:eb:36:c8:af:bc:c2:93:4c:ba:05:69:16:
10:d1:67:2a:77:ac:51:3f:a9:fc:4d:71:4d:e4:5f:
42:47:ef:05:d9:f5:d4:ed:f7:f6:3b:2d:7a:ef:4d:
21:a6:1b:36:23:cb:03:ae:c3:c4:af:75:e8:e0:47:
30:4e:ba:10:7f:0e:aa:37:a8:2c:d4:d6:24:f5:22:
be:21:c0:bc:15:11:ee:87:ab:a3:25:fe:c1:51:c5:
79:bd:da:14:f4:7d:7b:f5:da:4c:79:13:95:f6:ae:
ad:7e:91:3a:c4:d1:b1:a9:ba:f1:43:b6:d7:cb:34:
2a:98:fd:e4:b3:f8:3c:f0:b0:a0:9d:d9:36:a4:89:
28:8c:fe:42:48:58:90:68:f3:d9:71:60:9f:87:bd:
68:72:30:9a:09:ec:cd:c6:38:19:d7:f5:dd:f5:28:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CC:48:03:7B:B3:8C:7F:7A:5C:68:79:03:42:9D:E5:EB:AE:A3:1F
X509v3 Authority Key Identifier:
keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:62:cf:f9:c0:66:f1:44:ee:ec:91:50:01:cd:d1:aa:6c:6f:
37:34:0a:b0:64:ac:bf:cc:c7:b8:f7:b2:75:b9:3e:f8:e3:3c:
15:29:3c:9a:da:aa:22:fa:7a:ad:dc:fe:37:2f:6b:ab:5e:d5:
5c:e1:8d:b3:5d:ac:fc:76:60:fa:95:c4:b9:b0:a3:03:c8:33:
7d:d4:8c:bd:3f:d8:1a:f5:fc:8c:34:6b:f6:a0:e9:a4:f6:3b:
bb:2c:2c:fe:d7:3d:0b:a5:08:da:fc:65:7f:b5:a8:68:a2:56:
d9:3a:9c:24:30:5d:72:ae:20:47:ac:fe:da:08:98:78:ba:33:
a2:96:54:ca:3b:69:9b:63:f3:2a:62:7a:96:56:83:fc:8e:af:
67:77:34:11:20:06:f9:06:6b:68:f0:97:f5:31:67:7e:a5:4d:
28:34:b4:80:3f:01:50:48:18:c1:b8:15:4d:4b:d5:96:67:4a:
02:6b:07:b7:df:4a:11:28:e3:a1:d9:0c:4f:e3:9e:ef:a5:1c:
30:db:7e:35:28:ed:7f:58:b7:2f:71:4b:ef:ad:c7:2e:ab:bd:
ba:2f:c7:0d:0f:23:54:4a:18:77:ba:77:32:6e:77:96:c9:69:
49:7f:46:3c:f5:b2:3b:c2:77:6d:53:73:e2:ee:6a:3f:aa:42:
f4:7c:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:48:32 2026 by rpki-client