
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json)
Hash identifier: Mx4aJMYkzto0FW4rqBlYz2FYf4+5rr7DxZfFX1dzY0U=
Subject key identifier: 01:29:93:F9:42:4D:BC:7C:E9:5A:7D:CD:13:74:E4:CF:43:BF:6E:FC
Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Certificate serial: 046D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
Manifest number: 0467
Signing time: Wed 17 Jun 2026 00:12:58 +0000
Manifest this update: Wed 17 Jun 2026 00:12:58 +0000
Manifest next update: Wed 24 Jun 2026 00:12:58 +0000
Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: o5hExp8SnuWOFnwLqy44VX8i5KTNsof+Hwei72Qh8ZQ=)
2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Validity
Not Before: Jun 17 00:12:58 2026 GMT
Not After : Jun 24 00:12:58 2026 GMT
Subject: CN=6a31e68a-83af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:3d:10:29:cb:ac:3c:f0:f2:b7:67:2c:bd:
42:79:4b:7b:34:bc:00:51:81:86:bd:1a:c9:39:c9:
3c:11:f4:0f:6e:d9:52:6b:ec:f1:ea:f5:aa:1a:c8:
59:6e:6b:c5:c5:ae:65:06:ab:79:90:94:28:ee:01:
06:6e:c2:72:3f:f8:f1:01:f6:55:86:ea:1c:2e:63:
84:12:4e:41:00:db:b1:38:db:fd:31:71:48:e8:13:
a3:33:20:5c:78:b8:bc:56:c8:e1:8d:eb:1e:4c:e9:
a3:6a:bb:89:99:3f:c1:ba:60:d0:85:50:06:c4:9f:
ad:a1:8b:d8:ce:0d:67:eb:53:e1:96:0e:23:78:d9:
80:a6:bf:06:ae:79:6b:9e:fd:6e:62:ac:53:8e:34:
1a:50:34:36:3a:cc:d7:d0:9e:07:6f:2f:51:25:66:
35:47:b9:23:f0:ec:0d:9e:d7:20:7d:94:3b:3d:3b:
a5:87:f9:20:2d:3c:6f:fd:e7:d3:b1:67:55:0a:34:
94:98:68:ae:af:f5:ba:ce:fe:b2:a3:93:c8:96:85:
da:5e:69:05:fb:c7:22:77:ac:13:ae:52:29:65:64:
b6:4d:90:85:f6:83:5a:1a:52:e3:c6:47:49:1e:e3:
e0:96:96:b2:b0:cf:c0:44:d5:16:18:ec:2e:bd:b9:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:93:F9:42:4D:BC:7C:E9:5A:7D:CD:13:74:E4:CF:43:BF:6E:FC
X509v3 Authority Key Identifier:
keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:d8:2f:b0:cc:44:c8:1f:e5:43:32:9d:ad:72:7c:a5:96:
28:40:78:77:a5:40:b0:22:76:6f:1a:0e:6f:60:9a:81:ec:02:
28:af:5c:dd:df:9e:c4:b1:d5:5e:1a:70:4e:eb:04:ea:c0:48:
45:7a:a1:aa:44:55:1e:14:cb:cf:a3:ba:50:ae:af:0c:58:b4:
95:21:20:69:9e:aa:3c:c9:48:da:08:b5:49:10:fe:7d:d6:1c:
ee:03:43:32:0d:d0:c9:11:3b:b3:9c:3c:f9:78:a4:4e:ff:ca:
87:94:fd:24:88:e8:23:94:19:d4:b1:8a:5e:22:7c:08:78:bb:
3f:16:0c:4e:10:05:03:52:5b:d6:51:1b:d3:25:75:13:8a:72:
d6:c4:3a:82:63:5d:a9:b6:87:19:19:50:33:74:1b:bd:21:70:
5d:e9:ae:54:3e:07:03:27:d9:99:72:7c:45:f7:c0:bd:b8:6c:
b6:8b:09:62:33:bb:8f:3c:92:42:4c:da:02:ba:bc:80:05:e7:
a2:c6:3d:65:11:4e:06:73:5a:cb:cf:70:82:64:6f:fe:07:34:
64:bc:9a:a1:42:29:11:8e:f6:c1:91:c7:f8:e6:09:26:75:72:
b1:4a:79:78:63:ec:97:51:e1:54:fe:66:3a:f3:51:97:fe:b3:
a0:62:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:25 2026 by rpki-client