
$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File: mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier: TXSWsJ1uqUxuWsSANrK1BGgh24a0cX7nR996Kt5YbPQ=
Subject key identifier: E5:CA:0F:C6:1F:20:BE:8B:5A:EE:30:3A:D5:69:A7:E1:4D:78:F8:DC
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer: /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number: 0101
Signing time: Sun 29 Mar 2026 05:49:43 +0000
Manifest this update: Sun 29 Mar 2026 05:49:42 +0000
Manifest next update: Sun 05 Apr 2026 05:49:42 +0000
Files and hashes: 1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: ybDrudLccnJYsa1BjEGMxptTIrNnIIp1Ud2+49VbA9I=)
2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: mdzMDwj2X3Ua3FnRlc2HjSVQDPO8dF0xSRBjaAA05Ao=)
3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: A2j9A1LDxFn91KRfJQkzZYzQlvghcjV9LwvRtdCgpqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 05:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Validity
Not Before: Mar 29 05:49:42 2026 GMT
Not After : Apr 5 05:49:42 2026 GMT
Subject: CN=69c8bd77-1f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:90:af:40:42:17:27:a8:05:69:6a:a9:79:
57:cb:d2:db:f9:51:94:29:f8:84:5d:6c:ee:5a:b7:
96:e1:b2:45:d4:b1:70:b8:29:29:5c:c5:c8:0f:5a:
77:f1:73:fb:d7:3b:ba:04:3d:6b:65:90:3d:c5:66:
e7:bd:26:c6:6f:ae:c2:da:71:07:ac:ad:60:20:bc:
b6:b9:c8:70:a9:9f:c7:9f:53:2e:1e:2b:f1:f1:4e:
d3:01:f8:ee:f2:f1:81:f3:e6:68:87:54:86:22:bf:
2f:fc:63:3a:e0:29:64:cd:66:66:9e:b8:dc:19:92:
f7:f6:cd:38:01:a8:d7:99:b6:14:93:c2:9e:6c:70:
3f:4d:13:58:c0:66:86:4c:fb:f8:74:24:69:60:d6:
87:37:cf:b6:e0:ea:0a:f1:77:de:5f:65:44:a0:19:
13:3d:83:f8:61:fa:2d:54:82:45:7a:58:1f:94:6f:
b3:d8:f1:46:80:4b:40:a2:09:dc:c6:27:bd:47:1c:
15:04:fa:91:08:c0:b2:d8:40:fe:40:e0:11:d4:b4:
47:5e:9d:27:a4:c8:b4:be:6b:1c:b1:4d:a0:44:66:
60:a2:6e:a1:0d:4a:28:cb:46:de:ae:a2:a5:c3:a9:
f4:d7:b2:28:56:43:b0:83:d6:bc:e2:d9:94:3e:f9:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:0F:C6:1F:20:BE:8B:5A:EE:30:3A:D5:69:A7:E1:4D:78:F8:DC
X509v3 Authority Key Identifier:
keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:bc:57:99:47:b0:77:6c:9b:4b:f0:1e:73:b8:96:03:2a:
fd:6c:14:67:57:e8:06:3a:38:d1:09:96:d5:9f:91:03:a4:83:
3c:08:7e:a6:e1:75:8a:8c:76:0c:9a:14:a8:8d:15:e8:77:1a:
b5:a4:ed:dc:04:b1:0d:ec:46:91:5f:8e:5b:4a:a1:b2:39:47:
08:71:d9:26:f1:b0:2e:8f:18:a5:32:af:f4:5e:6b:5f:3a:bc:
15:e9:7a:36:bf:3b:26:29:99:4f:2a:9d:fd:ec:bc:db:f3:43:
0e:6e:a7:f2:35:6b:09:32:31:42:29:1f:d8:e2:6f:4d:87:87:
76:ad:00:0a:bf:ee:73:d8:a8:a4:4b:1d:ad:15:b5:72:31:27:
31:6e:61:b2:5e:e4:f0:f4:3f:62:9b:80:94:46:78:f8:d0:fd:
d3:18:80:77:3c:6e:18:24:0c:96:c9:07:ab:94:02:01:1b:20:
69:b5:89:3b:e1:26:7a:a7:e1:a4:eb:1b:24:68:20:56:c2:a6:
32:a7:f0:d4:b7:17:80:16:9f:97:f6:70:94:37:9e:5a:87:60:
90:28:d4:59:de:35:92:64:7a:4e:97:38:9b:3f:fe:90:3e:fe:
09:f1:73:f9:f1:ae:1b:06:60:e9:88:99:c0:e0:57:96:b0:5c:
4e:94:f9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:27:33 2026 by rpki-client