
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
File: mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json)
Hash identifier: BFiEo413dj4DO62iGJcx+dAiOLiGSxJrwQb0TuQH9Po=
Subject key identifier: 4E:98:19:12:B9:DC:2C:40:F3:C2:FB:26:BE:C1:0A:31:73:E5:EF:71
Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
Certificate issuer: /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
Manifest number: 95
Signing time: Sun 05 Apr 2026 06:51:52 +0000
Manifest this update: Sun 05 Apr 2026 06:51:51 +0000
Manifest next update: Sun 12 Apr 2026 06:51:51 +0000
Files and hashes: 1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: f14s+H3M5TuHVbVKFhY0YMoBwH4s42/AF03LwyvEXcI=)
2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: BNr56w4gucIUPsbq13wgpUL195UkxJVM3QKa9wUEfME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Validity
Not Before: Apr 5 06:51:51 2026 GMT
Not After : Apr 12 06:51:51 2026 GMT
Subject: CN=69d20688-1bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:92:ad:9d:95:d9:4c:7a:e7:27:63:f7:2e:
14:67:60:71:b5:22:f4:b2:03:45:27:72:8d:c9:2b:
42:64:de:7d:ad:1a:c6:8f:24:a9:04:e4:7d:4d:d5:
58:28:b6:c7:c3:f9:64:d1:df:10:50:1b:2b:c4:0e:
8e:00:fb:98:d3:43:b5:21:9b:db:20:d1:ba:62:29:
7f:79:51:af:51:f1:6d:52:be:45:9f:b9:1a:a9:6f:
32:4d:29:10:cc:1f:f4:a9:35:44:37:bf:79:c1:01:
1a:51:76:4e:74:93:49:80:dc:f6:73:b0:4f:71:0b:
b4:d5:5c:01:18:1c:ed:9e:35:09:97:c3:ee:bc:35:
98:e1:7f:9f:b0:c6:76:00:e0:ee:15:3a:9d:20:2f:
a8:74:04:b8:f2:ce:e4:3a:50:7b:33:1e:6a:b1:8e:
8e:20:87:d9:b5:1b:ba:79:0c:b9:a4:3b:40:9b:61:
52:34:8b:ac:f0:60:87:39:74:ee:28:b4:29:48:b8:
86:f8:3a:03:5a:e4:ec:f0:8f:a6:97:f2:22:37:6f:
58:9d:c9:b5:8d:65:fb:fc:c3:b6:c5:47:7b:61:4f:
22:56:95:f1:90:26:e5:19:64:1c:93:f7:c9:f9:59:
fd:79:81:45:00:01:1b:b3:4c:0a:ce:cc:22:96:eb:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:19:12:B9:DC:2C:40:F3:C2:FB:26:BE:C1:0A:31:73:E5:EF:71
X509v3 Authority Key Identifier:
keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f1:3e:ea:d0:dd:80:4b:44:0e:3d:38:20:fe:48:f2:cc:aa:
2d:ec:1b:e0:8f:c7:92:93:9e:57:9b:94:1f:57:fa:cd:f8:2f:
59:79:4a:57:7f:f2:ac:4e:55:5a:07:d8:8d:de:e5:29:d6:86:
3c:49:5f:33:ff:7c:5d:a7:b2:21:e0:20:1d:ed:82:b9:d9:86:
8c:db:e2:06:70:7a:1d:89:6b:f7:fd:50:9f:91:0e:e8:97:04:
1c:0d:b5:7f:9f:44:cc:14:ad:b0:79:55:3e:5f:e5:d1:de:2b:
5c:69:28:0a:37:3a:3f:02:13:55:9e:26:5a:aa:1b:73:be:0b:
09:b1:44:c3:97:46:26:3b:2d:e7:1e:e9:f4:10:fa:c2:37:cd:
43:41:4d:ed:03:27:dd:5a:1b:60:b6:eb:e7:ae:2e:9e:ee:25:
92:8c:c2:f6:9e:35:d1:84:ad:cf:21:89:f5:9b:7e:d0:4a:7f:
b4:b8:1d:ad:1d:5f:a6:f2:ba:de:c5:b7:1f:bf:5a:a3:0b:c6:
f7:f0:02:d1:c6:c0:ef:b9:64:a2:82:05:2c:84:75:5a:c8:1f:
a5:60:77:4d:46:80:d1:82:74:b0:27:b1:ea:68:a6:2b:ae:db:
55:23:51:de:22:26:fa:34:20:26:b6:7e:81:ab:eb:a8:50:25:
ee:c5:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:10 2026 by rpki-client