
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
File: MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json)
Hash identifier: /PmwmlAhVJn+mA6CC7Gf8iwh08jLp2P6/Fm0CP9vx5o=
Subject key identifier: 81:3C:70:45:61:4D:84:2B:EB:C3:66:C0:0D:C2:9F:46:41:33:98:50
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial: 0DAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
Manifest number: 0D85
Signing time: Mon 02 Mar 2026 00:37:03 +0000
Manifest this update: Mon 02 Mar 2026 00:37:01 +0000
Manifest next update: Mon 09 Mar 2026 00:37:01 +0000
Files and hashes: 1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: wwDptDvmuGwgHcS0RvFeNtDTystg1XF29VY12KFyBRo=)
2: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: AfD5HxA5Aq0yoBWic1AreIDVnB+IzK6gGah8YdarTYM=)
3: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig=)
4: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: rqH3evVe4RRzDIoqiHRSRZUenT8VbTWiFy0YpHu4G6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3499 (0xdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Validity
Not Before: Mar 2 00:37:01 2026 GMT
Not After : Mar 9 00:37:01 2026 GMT
Subject: CN=69a4dbae-16dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8d:3c:47:9a:08:98:ad:de:22:f7:4e:4b:e5:
39:39:b6:f8:e7:d6:d5:45:e5:53:a4:7d:ba:3f:c2:
3c:5e:14:f4:ad:a4:14:84:25:89:4d:be:6a:19:fd:
21:5c:f6:f5:33:e1:53:c1:98:36:7b:99:52:f9:95:
01:ce:06:fa:ca:e4:0c:cc:0b:a1:db:47:4f:01:02:
9e:a4:e6:66:e9:31:9b:84:e1:fb:ac:e2:1a:5c:ab:
da:51:89:33:65:78:02:5c:57:30:81:2d:95:db:23:
b9:c0:b1:e1:0c:4f:96:9f:06:d5:76:e1:df:9b:e2:
4e:87:84:09:4e:dd:f4:46:69:6f:c7:30:06:90:49:
10:8d:89:dd:93:9a:22:ae:ae:61:84:77:57:a3:89:
9b:6e:7c:54:5f:1b:4f:18:ca:ee:dc:fb:70:66:28:
c1:0f:5c:ac:b0:df:21:09:02:25:d9:5d:ef:bf:42:
bf:06:7f:75:a1:b4:db:b8:ad:ec:14:65:a7:02:2e:
c6:b7:7f:43:66:63:1e:4d:6c:a4:24:c3:e8:08:61:
74:88:21:d2:9d:33:a0:b5:85:f7:37:c5:4a:f4:72:
1b:86:3a:49:b4:7a:04:1b:cd:e7:96:8f:d2:25:a5:
91:d9:d2:c5:bb:dc:c7:cc:bc:bd:92:4f:56:e4:3c:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3C:70:45:61:4D:84:2B:EB:C3:66:C0:0D:C2:9F:46:41:33:98:50
X509v3 Authority Key Identifier:
keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:fa:fa:85:a3:3d:a6:d1:d7:ed:75:c1:93:fe:89:98:7d:
61:2c:cb:12:21:46:ae:d5:f4:10:9f:37:6e:d0:1d:5b:df:6b:
bb:e1:20:26:f0:dc:c5:25:44:03:7c:da:80:0d:2c:c5:36:f4:
3e:e6:b7:28:92:33:48:5b:8f:8d:72:23:97:3f:b6:05:4d:fe:
bf:a3:eb:bb:e9:df:a1:de:ae:fb:48:1e:2f:66:e7:b1:40:0a:
5d:e3:25:12:7f:c9:54:b9:3c:a9:2c:56:af:cf:e9:58:04:ec:
32:2d:5c:e9:5f:1d:ab:3d:ff:1d:73:e0:50:26:44:03:d2:a3:
23:64:d1:fb:50:11:01:db:d5:ed:9b:36:c7:02:14:ff:02:e6:
b9:00:7f:c1:71:8a:89:9a:cd:a0:57:70:91:7e:61:50:ea:5d:
ad:4f:a9:a2:c2:f8:74:7b:08:41:cd:56:c5:74:b5:b0:ed:23:
c3:ee:37:eb:47:26:ad:87:dd:42:25:2c:c0:0e:d0:e5:03:2d:
2b:c3:69:d0:1c:49:dd:50:d4:d7:e0:44:79:70:30:a2:45:e2:
a0:08:6f:0a:89:b9:ad:1b:11:a4:ed:84:1f:65:a9:b6:93:91:
e0:e1:07:dd:0c:0b:b8:99:3c:10:b7:23:da:c4:36:ee:44:f9:
48:06:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:34 2026 by rpki-client