
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json)
Hash identifier: 9TUA0jtoygaVJgtqb898FnI2rBA1BcwU9kyyizwyhpw=
Subject key identifier: 69:27:F1:91:51:E0:2D:AA:1C:1C:3B:3C:72:24:57:4A:12:1B:0A:0A
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial: 0DC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
Manifest number: 0D9E
Signing time: Sat 18 Apr 2026 17:51:49 +0000
Manifest this update: Sat 18 Apr 2026 17:51:49 +0000
Manifest next update: Sat 25 Apr 2026 17:51:49 +0000
Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: XpJigDvURaedsUjA31xBBDvMpCmEGhMKwC/cCx5qFe8=)
2: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: rqH3evVe4RRzDIoqiHRSRZUenT8VbTWiFy0YpHu4G6w=)
3: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig=)
4: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: AfD5HxA5Aq0yoBWic1AreIDVnB+IzK6gGah8YdarTYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 17:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3524 (0xdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Validity
Not Before: Apr 18 17:51:49 2026 GMT
Not After : Apr 25 17:51:49 2026 GMT
Subject: CN=69e3c4b5-8bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:c6:c6:32:6b:4f:3a:b9:3a:be:12:9c:ac:
e2:53:c1:b1:f1:f0:03:5e:88:ed:6c:f6:b9:f8:72:
35:6f:dd:34:c4:ac:4e:ac:ca:a6:0a:00:87:92:2d:
82:7f:df:2b:9a:be:40:c4:cc:a9:6f:8d:ba:ce:d7:
b7:a6:6b:03:75:d1:db:80:b3:86:b8:28:e7:e5:45:
29:b2:aa:7e:d0:fa:19:ae:ee:2f:3c:24:2f:cd:48:
6b:0a:0d:75:7b:1f:a2:36:ac:50:bf:85:4d:95:c7:
a2:ad:29:83:75:20:89:d4:26:40:a8:1a:78:4f:cb:
a6:42:06:d2:3a:1c:da:98:a7:a9:d2:31:64:51:c9:
ad:df:c4:71:5d:44:b3:c8:cd:a6:41:df:95:09:31:
da:48:9e:96:58:74:36:43:61:8d:20:f0:93:23:56:
e6:de:ff:44:a7:a0:b1:55:ca:6a:d4:c8:de:f7:29:
05:de:bf:81:61:97:e6:51:eb:9d:a9:b1:32:02:4e:
b7:2e:df:0c:f5:53:ce:a3:51:14:58:67:16:bb:6b:
5a:1a:c1:71:26:1d:ed:cf:97:a2:84:d0:44:4e:c4:
4a:d9:5d:16:17:f9:d0:1d:30:20:d9:ac:0f:1b:c7:
e3:d4:43:44:02:5e:91:7a:6d:a1:7b:ab:7e:8c:19:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:27:F1:91:51:E0:2D:AA:1C:1C:3B:3C:72:24:57:4A:12:1B:0A:0A
X509v3 Authority Key Identifier:
keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:f3:40:15:64:5a:c8:7b:b0:cd:49:1b:d3:90:39:30:17:
71:9e:4b:2d:3b:84:6d:2c:58:67:ac:9e:dd:ca:b0:1d:d4:cd:
35:4e:8a:e5:5c:dc:d6:f1:dc:38:c8:c6:7d:46:96:1d:53:f2:
7f:df:02:dc:2c:f4:42:4b:e4:9c:44:3f:7f:3e:1c:28:bf:4b:
ff:b2:57:86:20:d4:62:73:b5:71:f3:1b:ed:37:4d:45:fd:18:
a7:3e:54:25:6c:fa:58:fa:fc:86:25:af:dd:12:bf:d8:72:c7:
49:8c:c2:a8:74:f5:25:9d:00:eb:ec:64:53:1a:fe:5b:c6:2f:
09:cc:08:bc:2c:54:a3:47:a7:5d:53:6b:01:84:83:8e:67:87:
9b:f6:7c:8c:8a:66:19:5a:48:12:bb:ad:72:be:8c:9e:a1:a5:
1c:c5:51:9b:b2:9b:b4:d1:4b:49:65:21:f8:46:36:78:ec:06:
4c:d7:f8:c3:7b:37:d4:5d:2a:43:51:9d:4b:8e:26:8b:17:76:
40:b3:9a:84:ad:3f:3e:6b:fa:47:05:e8:b7:7a:fe:90:7f:22:
ff:8b:64:3d:72:24:0b:81:40:03:92:8b:fc:c5:29:fd:a4:04:
eb:9e:a4:63:4d:bc:8d:79:7d:df:e2:ee:43:4a:88:07:41:41:
24:a9:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:04 2026 by rpki-client