
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
File: MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json)
Hash identifier: r+vrZO4ytt8LTjjEue2RGcUTm2YbI/OT+xE3FSvzmT0=
Subject key identifier: 50:10:16:FB:FD:C8:C1:08:54:E7:65:1A:B1:ED:F6:08:E4:25:FD:4B
Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
Certificate issuer: /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
Manifest number: 0160
Signing time: Mon 27 Jul 2026 06:50:09 +0000
Manifest this update: Mon 27 Jul 2026 06:50:08 +0000
Manifest next update: Mon 03 Aug 2026 06:50:08 +0000
Files and hashes: 1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: 7C/t8P/vbzmgWGsegOLdXbsoypzuLa88fUAHSsCVfMI=)
2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: jZ7jlvG+kbpMf5yr4kDr9NTPJvX7t9Ub5k4dGFxMqwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Validity
Not Before: Jul 27 06:50:08 2026 GMT
Not After : Aug 3 06:50:08 2026 GMT
Subject: CN=6a66ffa1-fa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:6d:2a:87:e2:6e:19:12:2a:63:6b:32:f4:
51:04:a5:99:18:99:fc:55:a1:bc:d1:12:15:bc:01:
19:d0:56:28:35:c2:3b:1e:d1:7b:3b:00:19:1c:09:
23:ac:31:fd:50:ef:cf:69:71:31:65:19:79:8b:48:
5c:29:df:4a:ac:d0:a6:32:0c:0b:72:d5:aa:40:c6:
6b:a2:e7:b8:4c:48:5a:21:39:61:be:f0:87:43:7b:
7a:cb:22:bf:15:c9:45:cb:5d:f5:b7:df:58:8d:8c:
52:f7:d1:3b:ea:72:89:f9:c7:7f:0b:43:93:e4:97:
65:f7:d6:1e:c1:d5:00:38:fa:32:bf:8f:1a:e3:9c:
f6:f1:d5:7a:aa:c5:af:01:d8:50:86:db:28:0a:c8:
de:6f:15:20:9e:b4:05:c8:3a:ea:a4:e6:ec:00:37:
ec:86:83:eb:d0:c6:41:c0:d6:6f:a8:b5:a3:3a:de:
51:12:c8:a8:43:75:e3:f8:68:3b:a9:27:fa:c0:03:
db:14:2f:33:09:b1:a6:c3:2e:b6:a4:d5:9c:c2:b6:
7b:0b:08:46:1f:f9:1c:0b:52:0b:1b:3c:35:75:bd:
dd:18:f3:f8:e5:d0:83:57:c5:62:19:9a:77:13:2a:
04:3e:15:f7:b8:08:fa:a8:6e:fc:40:a2:5e:e1:46:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:16:FB:FD:C8:C1:08:54:E7:65:1A:B1:ED:F6:08:E4:25:FD:4B
X509v3 Authority Key Identifier:
keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:52:90:e3:5b:c3:db:b1:9e:9f:43:79:fb:30:2a:c0:d2:65:
95:b6:1a:75:26:52:2a:49:d6:7b:8f:33:c2:13:ac:f7:57:c1:
34:d7:e7:61:a2:75:00:4f:3b:be:42:9a:4e:1b:6b:51:1f:7d:
6c:8c:4e:79:3b:2c:94:ed:37:63:19:42:2a:93:e8:a6:83:97:
11:b0:a6:0e:81:89:67:75:bd:4d:46:59:6b:ae:05:7b:61:12:
45:e3:78:c0:22:37:bb:92:f3:32:de:58:92:41:0c:db:fc:00:
31:fc:31:0d:c0:42:0b:6c:ac:45:7f:b2:dc:03:70:4b:22:f8:
e8:3a:09:38:f4:fa:91:a2:0d:91:0c:65:dc:3c:90:18:09:f9:
77:7a:f6:08:ff:a0:eb:54:8d:27:b1:78:f1:0f:77:ad:4f:b3:
aa:5e:56:4a:96:76:b1:b2:97:7f:0c:f7:3b:7c:f8:5e:a4:b8:
41:aa:72:f9:f9:f6:e6:bd:f4:90:40:74:5c:ce:0b:1e:76:f6:
26:6c:25:77:b2:da:66:9b:8b:69:10:e4:0e:4b:df:4e:56:90:
1a:4c:f3:20:29:5b:20:cc:f5:9c:81:a2:b6:c8:d6:1d:01:68:
c5:35:2f:1f:0b:8d:95:c5:54:6e:eb:01:11:05:22:df:f8:32:
65:01:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:56 2026 by rpki-client