
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json)
Hash identifier: gXXc3pmmWWgS69h7Z18EIBrLfayD7WKA+U03IPsjyi8=
Subject key identifier: 58:D6:18:04:18:19:71:77:FC:52:03:13:DA:8E:F7:3E:79:87:66:F3
Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Certificate serial: 044F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
Manifest number: 0449
Signing time: Sun 19 Apr 2026 00:07:58 +0000
Manifest this update: Sun 19 Apr 2026 00:07:57 +0000
Manifest next update: Sun 26 Apr 2026 00:07:57 +0000
Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: xDxQM/mLEEIAt2NcqBzQbaR0prvScIDdMqmltrxKyvI=)
2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103 (0x44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Validity
Not Before: Apr 19 00:07:57 2026 GMT
Not After : Apr 26 00:07:57 2026 GMT
Subject: CN=69e41cdd-1400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:e3:6c:4f:c1:5e:fd:da:b7:a6:6d:1d:40:
fb:55:35:a2:18:fd:ce:e2:74:d5:4a:67:25:f8:fd:
c9:1d:cb:7c:76:05:ef:0c:00:6c:d6:d5:22:74:a7:
2d:bb:d0:38:f3:03:f2:be:57:6c:0d:dc:b8:9c:ce:
0b:32:1e:a9:87:9e:62:d3:16:66:96:a3:86:23:ed:
e1:8e:73:3b:7b:d1:51:09:94:d3:68:64:92:73:2b:
01:d7:74:c1:00:30:57:18:36:52:cc:7d:a4:fb:5a:
2d:e5:de:d8:fb:8e:b7:d8:0d:06:d8:89:a3:b7:54:
4f:38:37:b6:33:aa:b9:24:5e:b0:1d:2a:35:a5:a7:
a1:a9:a6:fd:b6:68:f7:ba:fa:5e:67:02:8a:2b:b4:
ac:24:5c:8b:aa:ba:97:c7:4d:32:f0:40:ee:f5:ca:
79:d4:16:76:70:b7:25:4e:6e:3a:8c:18:d7:7f:77:
95:67:b5:ce:21:60:8c:b0:6d:a0:2c:ec:98:42:8a:
14:20:9a:c5:9f:e1:e6:8c:c6:96:93:64:d8:7b:bd:
ed:91:3a:d3:f7:0f:28:1f:23:ff:84:67:ba:af:aa:
85:31:8e:98:b2:06:40:24:4d:a8:1e:0f:91:20:de:
f0:17:0e:f1:dd:64:76:0d:6d:7f:3b:15:f3:64:88:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D6:18:04:18:19:71:77:FC:52:03:13:DA:8E:F7:3E:79:87:66:F3
X509v3 Authority Key Identifier:
keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8a:26:7b:76:13:e5:17:f6:e9:d5:e8:84:d8:a9:e5:6a:b4:
c1:82:6d:08:78:2f:00:3b:6a:11:14:79:f7:11:b1:12:0d:cd:
8c:b7:ad:99:37:1b:11:d2:90:e7:dc:5f:74:ca:e6:12:de:a1:
4a:f6:ae:c0:8b:a5:a3:e5:9e:6f:bd:17:53:17:36:d8:7a:a2:
0d:95:4b:20:5c:cf:bc:1e:6d:3e:92:b5:19:70:49:cb:09:da:
5b:71:f8:a3:d6:48:f4:67:da:b5:ef:3b:1b:3e:05:9d:6c:11:
84:e4:e7:54:5d:60:0a:f2:ba:93:f3:20:e8:24:50:ff:3d:ec:
d8:c5:db:76:40:75:83:0d:77:7f:20:73:79:d8:0c:00:9d:29:
39:ed:1d:23:53:54:46:db:cc:18:15:e9:6f:e2:7c:35:4b:64:
b8:0d:50:8c:a5:07:e8:40:ff:49:75:c5:4a:ce:bf:fb:ed:5d:
1e:12:fd:f3:fa:00:6e:d0:37:ed:df:34:86:c9:a1:36:16:f3:
e7:14:91:19:b0:72:62:4f:2a:ff:a8:1c:d8:ae:5f:f9:56:63:
73:a6:08:65:31:53:63:95:25:69:14:2b:e5:e3:a4:9d:a0:90:
30:a7:b9:eb:53:22:14:16:cc:00:32:f1:a1:e7:58:d0:5b:f4:
c9:bf:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:39 2026 by rpki-client