
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json)
Hash identifier: DivROiqHXDFt1iN5vwqGWpUBWAZfrgfuPJ1QWVERLFc=
Subject key identifier: EE:E5:95:C5:51:4B:DB:6A:2E:09:63:9E:F5:57:86:23:F2:AF:6D:3A
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial: 0DF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
Manifest number: 0DD0
Signing time: Sun 26 Jul 2026 18:10:04 +0000
Manifest this update: Sun 26 Jul 2026 18:10:04 +0000
Manifest next update: Sun 02 Aug 2026 18:10:04 +0000
Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: ldhgfEpeX9jToPwrhF9BEGmUTXRHlvvaEjzsQxKJbJQ=)
2: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig=)
3: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: AfD5HxA5Aq0yoBWic1AreIDVnB+IzK6gGah8YdarTYM=)
4: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: rqH3evVe4RRzDIoqiHRSRZUenT8VbTWiFy0YpHu4G6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3574 (0xdf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Validity
Not Before: Jul 26 18:10:04 2026 GMT
Not After : Aug 2 18:10:04 2026 GMT
Subject: CN=6a664d7c-5bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:0b:6b:b7:96:23:99:15:75:91:58:ef:8e:
73:da:f1:57:09:35:db:e5:3e:77:ed:2d:09:68:00:
d7:1a:24:50:a0:ca:55:d0:61:9b:65:0f:85:21:cc:
a1:b1:6b:94:09:f6:1a:ff:f7:24:99:98:9a:5e:b1:
03:93:20:7c:55:2b:d7:3e:17:03:0e:1f:dc:51:4d:
3f:b9:db:bb:fd:3b:3a:3f:c4:f0:7e:3b:74:e7:64:
8b:5f:d6:85:7d:bf:ab:7c:a5:fb:68:19:23:a5:79:
14:46:93:00:93:eb:1a:4d:22:aa:e1:47:2a:40:8d:
fe:c8:2f:5c:4e:7f:8f:b0:1a:db:00:b9:91:62:12:
eb:bf:98:91:fa:f3:8a:fc:dc:eb:92:65:1a:1d:31:
9f:98:bf:d7:44:8c:4a:3e:fe:aa:3c:57:08:17:13:
4f:78:40:67:d2:fb:23:1a:85:44:11:74:de:d3:12:
f0:85:e7:4f:d4:38:52:e9:e9:2f:31:4f:3c:fa:92:
ca:e7:6f:d5:c5:a2:c0:98:53:c5:22:61:36:6c:27:
1a:a2:55:cb:81:e1:2e:ec:fb:b1:c4:bc:8c:1d:c1:
96:96:b4:e3:ff:3c:52:c1:cf:15:20:20:81:b6:fc:
ff:3c:27:c9:dd:f4:9c:1d:95:53:9e:86:5e:ac:f7:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:95:C5:51:4B:DB:6A:2E:09:63:9E:F5:57:86:23:F2:AF:6D:3A
X509v3 Authority Key Identifier:
keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:3f:8c:e0:6e:dd:09:6f:2d:63:44:65:16:81:51:b9:e1:
41:d8:87:7d:a8:89:bc:e2:4f:42:91:4d:15:03:5c:8b:75:a2:
3b:18:f0:51:88:3e:1a:a1:79:30:9d:d4:3b:a1:be:82:3c:d5:
22:61:52:1f:2b:73:a2:29:ef:21:d8:76:43:79:40:c0:6a:5c:
44:86:ef:a7:37:d7:dc:d4:bf:e5:fb:d6:d7:fe:1a:c7:d3:d7:
c1:43:64:20:5e:82:e9:fb:6e:88:00:71:a5:91:a7:62:91:d4:
a2:70:67:f3:fb:41:b7:69:51:e9:04:12:30:4b:19:0c:e0:97:
85:54:3a:8e:9a:85:ac:44:ef:b2:d6:8f:ff:74:a4:5c:36:07:
ea:ef:2f:fe:77:e3:9b:2f:bf:ac:8e:49:ce:94:40:08:0e:4b:
a1:fc:4f:4f:e6:60:80:4e:8a:91:e7:60:e8:d6:68:4a:62:73:
fa:d5:6a:0b:4f:d3:97:e3:77:ca:ab:b6:64:21:a7:16:07:33:
e6:df:eb:2c:09:db:df:bd:d3:b5:9f:d5:ec:10:18:9f:4b:23:
aa:12:08:2d:ca:39:f5:d6:71:81:d6:de:80:35:fd:7a:28:0b:
87:ea:ed:d6:61:05:5f:ea:10:00:51:fc:8d:64:a3:7e:5f:bd:
94:2d:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:54 2026 by rpki-client