
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File: MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier: bjkValLF9VJj8mGry54d0Kddrd3Md5ZqBNAqb6SEh4A=
Subject key identifier: 74:BB:23:14:10:C5:BB:C2:0E:26:38:3D:BE:7A:AD:14:4C:DD:35:FC
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer: /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial: 0744
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number: 073A
Signing time: Thu 04 Jun 2026 15:11:57 +0000
Manifest this update: Thu 04 Jun 2026 15:11:56 +0000
Manifest next update: Thu 11 Jun 2026 15:11:56 +0000
Files and hashes: 1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: QIzgLYmNETUfgr93UR7culL/A+Ov86Rw1hZz5raVR2A=)
2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: dWX5BlXnJUAo9dHvNX1RgcAB0PkL/ZoFYS5PfP1NoaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Validity
Not Before: Jun 4 15:11:56 2026 GMT
Not After : Jun 11 15:11:56 2026 GMT
Subject: CN=6a2195bd-0449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:5a:e6:d1:ed:b2:54:a1:6e:4f:9b:a0:8e:
27:5e:d2:26:7b:56:3e:35:bb:25:8d:b8:a0:4e:e8:
b0:5c:c9:3d:95:b1:a4:92:3b:25:9e:fe:37:d6:d4:
a5:88:9d:a7:87:6c:89:b6:61:d3:b8:c2:22:3d:fb:
53:8b:93:84:c8:a2:ed:e8:07:5e:25:27:73:df:08:
a8:cd:d2:5b:55:67:27:a2:1c:5b:87:55:8a:0b:0a:
86:64:60:4e:dc:e3:ac:c9:03:e3:bd:72:d5:7a:9c:
12:a7:b5:e0:bf:8c:5b:7b:3d:b3:99:2b:05:aa:52:
51:3c:67:0e:3f:09:49:88:1d:06:61:a3:65:63:5e:
59:dd:36:5b:ea:60:c2:d4:ea:22:14:43:ff:4b:f7:
c1:be:02:cd:c0:cb:b0:c7:cb:c8:7a:9c:1a:3b:58:
55:80:88:cd:be:04:75:fa:43:c1:f6:9d:2e:82:73:
ad:b1:83:83:b1:c2:96:64:05:17:55:66:da:aa:cc:
f6:45:86:86:1f:f9:61:a0:c7:1f:69:2f:a9:5d:ac:
e3:f9:82:bc:4a:25:7f:f1:87:38:5b:25:34:61:ce:
15:73:87:ac:a7:ec:a3:6e:50:2d:13:63:9d:c7:f4:
8e:f9:f2:93:8c:c9:04:85:4e:53:d3:c3:ee:0d:9c:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BB:23:14:10:C5:BB:C2:0E:26:38:3D:BE:7A:AD:14:4C:DD:35:FC
X509v3 Authority Key Identifier:
keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:23:87:4f:ee:91:c9:8f:64:6f:39:d6:c1:6d:0a:4e:04:8b:
f3:0a:37:7b:32:01:f3:2f:47:89:a1:fa:28:eb:b2:6b:a3:7c:
10:cb:ef:02:6b:ea:cd:fc:6a:6a:14:20:61:c2:1b:b1:ac:9f:
cf:13:d9:ab:e4:74:13:9b:84:18:39:ae:b1:33:e9:da:9b:a3:
1a:35:c7:c4:7a:f2:8d:a6:8e:1e:c3:5e:7c:03:db:9c:b6:8c:
bd:b2:fc:6e:22:42:96:da:26:de:64:9f:9f:e3:90:f9:00:09:
b1:c1:fc:7e:79:06:6f:39:cf:05:ed:33:0f:03:58:43:60:d7:
2f:35:b5:26:78:26:2f:44:87:3c:ae:25:27:cf:30:d4:15:8f:
f3:67:8f:6d:e8:50:1c:a8:81:3e:ca:4c:6f:8b:06:10:a9:9b:
18:f7:d8:f4:ff:d5:41:0d:c2:00:3d:4a:0c:b7:1c:6a:0e:57:
77:25:48:de:30:87:db:c7:b0:83:9e:81:e1:e7:73:36:eb:1d:
0a:ee:2a:e5:c0:dc:31:23:42:63:93:9b:52:60:db:52:31:e8:
48:e3:90:a4:86:2e:ec:c3:7f:28:f8:9c:89:4c:de:e3:b3:65:
54:2c:4a:48:6c:8b:fd:36:6f:3c:2f:75:55:3d:ac:3a:a6:8d:
56:e5:e6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:51:57 2026 by rpki-client