
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier: UqHVJRJJz4w0SWxh0Ngn7o/8PTf4qk39Ybx8yU0EHYw=
Subject key identifier: D8:D8:F4:69:4F:BE:29:67:5A:36:2F:D8:A2:35:14:CB:09:49:55:82
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial: 1073
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number: 1056
Signing time: Sat 02 May 2026 17:27:44 +0000
Manifest this update: Sat 02 May 2026 17:27:44 +0000
Manifest next update: Sat 09 May 2026 17:27:44 +0000
Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: NgUNQ5UfIkpMu7cgG1R3xfIrPIKUKUCes7jIQM8GzaQ=)
2: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: Fgm+ElVjvC2qk51TNceoRhTvVi14rsJi9VmzJtf4CWk=)
3: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: UzYlF5kVoirkgLJ2+YAX7I5FrYpUxEnHb7ed/BCbCIw=)
4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: Z++rBUNrYhvgRo99autUox/H1JSZhgsbn5NwK7G+bPg=)
5: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: i8ISmSohzNFj4ZVdfD/LFHN7g4VElb5BUfPkcOjvKzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 17:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4211 (0x1073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Validity
Not Before: May 2 17:27:44 2026 GMT
Not After : May 9 17:27:44 2026 GMT
Subject: CN=69f63410-6717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:8c:81:23:28:04:ca:d7:b8:30:9b:2d:18:
90:72:ec:ea:9e:56:69:1c:a4:37:1e:91:6a:df:be:
0e:20:af:b4:ed:fc:1c:f3:ff:ba:a2:21:7a:5a:4f:
d7:eb:39:92:44:47:c8:d9:51:43:e4:33:d6:65:5a:
03:88:40:41:d9:24:fe:af:3c:ac:4c:fd:fc:c0:61:
92:d4:00:96:36:5e:51:a1:fb:6a:0d:04:ac:8e:50:
87:fe:b4:85:97:1f:74:f3:1e:f9:4b:98:cb:ed:e0:
12:fc:c1:7f:df:c2:a8:c6:de:6f:db:b2:a0:c1:24:
a5:fc:db:5b:83:7e:a0:ef:44:df:f8:ef:f1:c8:dd:
6c:be:5e:5e:e7:2f:d2:24:d6:7e:49:ce:c7:db:52:
00:f3:04:9a:67:83:8f:ed:1a:5d:57:f3:89:ee:3e:
2f:bb:3a:58:88:9b:21:71:ca:ba:56:54:79:e0:c2:
01:82:a0:83:36:66:02:3d:b9:90:17:73:bf:96:c8:
11:df:67:83:0c:05:e9:b9:3d:a0:f6:ad:0b:09:05:
24:98:75:6e:68:a0:be:dd:99:1d:70:b6:ad:dc:fb:
6b:bd:fa:ea:f2:72:df:42:0e:57:96:4c:5a:bd:94:
3d:2c:c7:c0:d2:36:1e:48:01:ea:0b:2f:ba:9d:f1:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:F4:69:4F:BE:29:67:5A:36:2F:D8:A2:35:14:CB:09:49:55:82
X509v3 Authority Key Identifier:
keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:ed:42:50:04:d2:fe:c2:91:7a:6a:04:3c:f1:68:ed:85:
f6:8c:76:3b:1e:d5:f0:10:56:48:b5:73:90:72:96:39:84:b8:
80:37:3e:e6:6a:f8:cb:2c:28:ab:1b:f4:36:b7:97:b2:b9:94:
93:58:cb:c8:8a:b3:0d:55:dd:79:3f:29:da:56:c6:2d:2a:f6:
1e:2a:19:aa:aa:ff:dd:70:80:b9:5b:f8:0c:51:7a:01:dc:3d:
a7:69:1b:95:bf:0a:ed:42:72:76:56:1f:73:40:f0:47:a3:09:
b5:4a:3c:e8:70:22:79:e9:3f:41:31:fc:c4:37:78:ca:4a:b0:
bf:36:5e:5a:0c:e0:37:35:77:5f:78:0a:18:00:45:db:98:11:
1f:b9:71:ea:a2:ac:ee:45:72:6d:a6:73:74:c1:ef:ed:31:41:
63:f4:68:ee:e6:f6:f6:20:fc:ba:22:74:36:9f:b0:f5:4e:0a:
c5:d4:1c:c2:b0:17:ab:d4:90:35:6d:32:be:6b:7c:2f:3c:e4:
57:25:ab:de:28:21:d4:e6:3c:c5:e2:e6:bb:d5:54:ea:de:d3:
bd:dd:a2:48:73:2e:5c:3f:ab:b4:f0:38:15:73:19:90:22:0d:
5f:95:82:56:5b:ad:e2:c7:18:79:fd:d2:62:4a:ce:26:01:fe:
01:80:e2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 04:30:48 2026 by rpki-client