
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier: QyTegYn0Ltojg7wQKHTSLaGFMiCo0Qt2wTTfVXk1wto=
Subject key identifier: 99:15:69:3B:38:71:7E:7E:44:58:C4:B9:87:46:74:94:5B:EE:EA:6B
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial: 028A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number: 0250
Signing time: Thu 03 Sep 2026 02:39:34 +0000
Manifest this update: Thu 03 Sep 2026 02:39:34 +0000
Manifest next update: Thu 10 Sep 2026 02:39:34 +0000
Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: W/QSqr+LZbQ45mjAh0fwVi4V3GJ0yc2wtHNERQsoGS0=)
2: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: /RmusU5UC3h4mIZxyyVvzpFaDdQyB/V1AfNpSxG2USc=)
3: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: OsNJpFKmHPyfNeh8koHIfP2TRZRKEPMZ5UDUwZ4ntLI=)
4: E9874B2A16D011EF90793868C4F9AE02.roa (hash: StFMy3NKhkaFCNdoWKE6eyzBLd+skcdMmjgC62pSh+8=)
5: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: P3O7u+qRGn1bwR58h4CF4ybrJlg7WXxzi0HEWNF1wU8=)
6: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: iXBfomCkV4xNH1cYbzZuww9SUUgCW5qk20yC43URNok=)
7: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: VMT1xU70dE5HYB1EHd2Tb1ASm0RRDcnimQ+3IrrOZ7g=)
8: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: kTWCQH3l0WWzLGhSEAUO4J7QO5Yg3xSjvZflpuriZzI=)
9: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: U9Cn0ELdUyS5NVvWmDLivz50FWKKV0p0b8inagt4fog=)
10: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: vbQDLMrS8rOq+qQeyQoAROFt0AaGqDcf1/1F1wwGpXo=)
11: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: V/7VSGMl5ikCm95Tbf+xqFXER+QUdiwbSFx6fNdYM2Y=)
12: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: 170jykPgfx0s5CIB7KCfpg6Av4bJnDZ6uSGDY5UfwZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Validity
Not Before: Sep 3 02:39:34 2026 GMT
Not After : Sep 10 02:39:34 2026 GMT
Subject: CN=6a98dde6-46f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:f9:12:06:60:40:0d:cf:dc:98:a6:6a:e8:
47:1c:df:56:15:83:33:bf:26:7e:fb:99:b8:20:5b:
3e:20:b0:4d:0f:10:a1:50:7d:94:a9:6d:60:a1:0a:
d1:de:2e:36:6c:2c:66:bb:09:85:ea:d3:91:5a:94:
db:d6:09:96:d5:f6:08:76:fa:18:97:fa:01:76:d4:
17:6f:85:b3:a2:ea:e7:7f:5c:39:8f:7b:bb:91:93:
ea:e6:87:c4:4d:0f:da:11:ac:9b:db:41:6d:3a:74:
26:55:4f:43:e4:3b:1d:03:11:91:dc:f0:67:bf:8b:
24:22:15:92:84:19:0b:0b:18:64:1d:02:f1:56:a2:
7a:f3:80:7e:c8:1c:d8:16:58:b4:1e:3e:34:10:b4:
d2:c9:65:62:19:37:0b:20:52:4e:2b:c9:7e:9c:62:
f3:bc:38:00:2c:4c:44:c8:be:0b:b6:8f:88:16:e7:
6e:bf:e7:ac:1e:0e:17:1f:62:71:31:7b:13:f9:4e:
c3:95:ce:89:42:43:24:82:b1:28:d6:40:82:02:61:
9f:fc:e5:60:cc:09:3b:aa:d1:8a:34:6a:c8:38:b9:
37:27:80:ab:b0:45:4f:ed:46:c9:ab:41:d4:36:f1:
06:45:54:f7:8c:67:bd:77:7d:e3:fe:08:07:11:d9:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:69:3B:38:71:7E:7E:44:58:C4:B9:87:46:74:94:5B:EE:EA:6B
X509v3 Authority Key Identifier:
keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:2e:5c:a1:9e:76:64:81:cd:0d:e0:ad:30:f5:0a:7e:62:3f:
7c:23:f0:5c:5c:c1:06:e2:5f:e3:0a:3a:e8:06:82:b8:89:87:
2d:dc:ff:e2:c7:84:19:5d:0e:ef:16:dc:2c:62:94:6f:4d:5e:
cb:ee:1f:50:db:5a:8a:c7:17:1f:e2:8c:12:8b:37:14:6a:bc:
df:2a:39:6b:8b:9a:6b:a2:d1:e7:7e:70:81:d9:ee:00:55:4c:
de:bb:ea:4a:8d:11:6c:5f:57:87:54:77:f8:6c:cc:79:42:14:
22:96:90:02:08:2a:b5:e7:9b:1f:ab:58:7c:38:53:7c:dd:fa:
d3:6c:4e:a4:98:a7:a7:c3:08:55:5e:ec:b3:0c:de:83:a8:e3:
3b:64:97:cd:51:d5:d0:43:38:22:30:a5:a2:aa:f6:8b:3c:e3:
ed:2e:5f:b6:7e:6a:2c:7b:49:5a:45:b6:9d:fc:4b:15:65:1d:
90:5f:27:91:eb:01:76:02:c2:00:31:cf:90:8f:67:a8:a2:f0:
f7:56:e4:22:6b:df:f1:ff:38:f6:4b:ad:da:a6:78:1f:62:cf:
cd:bf:8c:b9:c2:b0:22:b1:f4:c0:26:ca:9f:e4:0a:9a:fb:f4:
28:7e:bc:ba:55:bd:fa:bf:dc:9b:83:09:ee:d9:90:78:55:8d:
4f:d2:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:03:54 2026 by rpki-client