
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json)
Hash identifier: WYMDTTSOsjV/g4rB0AbGmo6KiyxqjCE9Quv6CDZipv4=
Subject key identifier: 12:7A:24:31:E6:DE:B9:1C:28:81:96:20:ED:85:56:80:33:01:10:16
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
Manifest number: C5
Signing time: Sun 01 Mar 2026 08:16:25 +0000
Manifest this update: Sun 01 Mar 2026 08:16:24 +0000
Manifest next update: Sun 08 Mar 2026 08:16:24 +0000
Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: HkMCgcQtp4Eu23XV2l3S3pd7StCfLrTrZ/mZvkfoKwI=)
2: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: 1OAyMVa0XBUo/ryUsoyI81mxhEqjOM4w6I8EktKs9g0=)
3: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=)
4: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: d3Ztp/QXe6hyPV/VR1BVSJgcfduo9pSnhik7tX10cpI=)
5: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Validity
Not Before: Mar 1 08:16:24 2026 GMT
Not After : Mar 8 08:16:24 2026 GMT
Subject: CN=69a3f5d8-e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:1e:ed:e6:4d:a6:46:fc:4f:e2:da:20:47:
04:bb:b9:c4:18:24:31:4a:85:c9:63:9f:de:93:9e:
9b:48:82:8f:fa:52:0f:c0:7d:d5:3a:88:12:be:de:
bf:f9:c6:c8:f6:df:e3:65:6e:5d:ae:8e:27:21:b4:
91:58:eb:38:a9:06:a0:23:61:b4:ff:5c:73:a8:ad:
f3:9a:ce:01:df:3a:5c:a2:74:e6:90:1a:ba:67:e7:
67:53:c1:1e:52:fe:b7:d6:02:bb:89:dc:6b:fc:37:
d9:0e:42:69:dc:f8:b8:bb:6d:80:de:96:40:76:d3:
d0:6e:79:60:50:77:a2:51:63:7f:64:f2:14:7f:d8:
8b:8d:a7:f4:ca:0a:9e:ee:a1:b3:c0:82:32:ef:b2:
d3:8f:c9:f9:c4:a9:bc:fe:c0:e5:31:3c:13:91:5b:
8b:0f:c0:34:63:70:61:07:69:22:95:30:8a:c0:f5:
d0:e2:3e:1d:ef:c2:b6:8d:bd:8e:f3:69:1a:a8:73:
68:e5:73:3b:d3:d5:cc:17:30:09:b0:cd:ad:35:c8:
45:f4:01:df:84:2c:24:99:0d:c7:ea:e3:cb:d9:8c:
5e:23:cd:3f:79:2d:f8:f5:17:dc:33:d5:c0:65:94:
18:36:71:e7:5b:56:b1:51:91:33:76:f5:48:c7:7f:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:24:31:E6:DE:B9:1C:28:81:96:20:ED:85:56:80:33:01:10:16
X509v3 Authority Key Identifier:
keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:46:75:99:5e:8b:be:88:0d:ba:d9:23:0e:6a:b0:d1:fe:4b:
24:d3:cd:3a:a2:b2:72:b3:97:53:bc:8f:3a:50:91:e3:27:8b:
29:da:2f:18:69:f6:c6:39:90:68:31:df:11:d1:ad:9f:89:4d:
4c:b0:4a:69:9d:21:2c:8f:8b:84:b4:6b:40:8d:64:3c:fa:db:
8e:6c:56:30:e6:0f:a7:37:7e:64:de:c6:37:a4:79:61:d3:d6:
1e:be:63:f9:40:84:ee:b3:60:b3:ba:12:b0:50:6b:0f:ab:fb:
46:37:7e:39:21:e2:8c:3f:9e:18:5c:ce:24:a0:f6:b3:14:f6:
ae:6a:87:aa:c6:24:6a:dc:f6:f1:6a:30:e2:f5:13:e5:82:f6:
56:e6:73:16:af:e4:9a:66:56:82:8c:28:fb:5b:27:f9:5c:54:
4d:cd:c1:91:fc:fa:2b:ad:ed:b7:d5:af:42:f5:e0:9f:da:2e:
50:4a:ed:62:5f:53:21:27:a1:dc:46:93:75:99:af:ff:63:61:
f5:af:73:03:6a:b0:5e:8e:33:a6:41:90:62:e1:01:a7:6c:55:
30:49:ad:7e:dd:63:4e:c9:ba:b7:c8:11:b1:3b:16:24:c9:bb:
c0:aa:77:75:9c:df:5c:53:7e:55:e6:44:46:1a:6c:08:ce:1a:
cb:db:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:31 2026 by rpki-client