
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft
File: MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft (raw, json)
Hash identifier: er0v8N5x20Bu2l6sBJ7fcZSL0ezofOoDqJ4L8GkLXMY=
Subject key identifier: BB:51:A5:8A:48:C4:36:55:E6:CE:D3:41:D7:1F:38:44:A5:B1:13:7A
Authority key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28
Certificate issuer: /CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft
Manifest number: 0206
Signing time: Wed 19 Aug 2026 03:38:57 +0000
Manifest this update: Wed 19 Aug 2026 03:38:56 +0000
Manifest next update: Wed 26 Aug 2026 03:38:56 +0000
Files and hashes: 1: MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl (hash: k1zYLCJ74Tj4AgAFTv1a8Ttw5kItAqhBTNZuy3fP1Q4=)
2: 02FC3E3C82A511EEA1F2710DC4F9AE02.roa (hash: 3tWo+TxjvNRfazBkfrqsYl15Cz/V8ipCTw/38p8PqXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl
rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9EC7, serialNumber=306E34FA84DA090C6001B35464BB8C426357D928
Validity
Not Before: Aug 19 03:38:56 2026 GMT
Not After : Aug 26 03:38:56 2026 GMT
Subject: CN=6a852551-71c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:b1:5d:3c:de:d4:69:0f:90:7e:36:88:9e:
21:97:2c:26:86:5e:21:7a:0a:a4:a8:b2:c0:40:1e:
dc:68:eb:75:77:e0:bc:70:ae:07:13:44:78:88:bc:
44:78:a8:7f:6e:87:f0:65:cb:31:d3:be:58:7f:25:
e7:71:68:30:da:e1:e6:66:6d:10:36:f5:a9:25:22:
c6:44:c0:e3:18:dd:af:bd:b9:b9:fb:71:55:35:2b:
82:cf:fa:f9:6a:0f:9a:e7:72:2d:4c:c2:66:aa:3a:
74:5c:6a:21:61:26:de:fd:92:bd:32:ab:db:83:a2:
95:8a:76:66:52:6d:f1:bb:f7:6d:aa:c7:6b:4f:80:
85:f4:9d:d4:b7:08:eb:95:fd:ab:66:89:9a:12:d1:
51:a8:52:91:f6:f9:5f:f4:97:a8:44:2f:4e:64:c3:
d2:47:d4:db:6c:52:95:46:39:46:7e:37:a4:06:df:
05:ce:91:e3:dd:f1:9d:95:a6:90:bf:a6:de:97:d7:
72:45:c1:5d:bc:b9:1c:8a:2e:f4:9c:ee:60:c0:87:
64:0a:a6:2e:76:20:52:58:53:ac:ac:cb:5b:ab:31:
fc:c9:eb:e8:73:df:55:1d:71:22:a4:98:34:a2:72:
17:19:50:5a:c7:96:e6:13:5e:49:40:ca:2b:43:fd:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:51:A5:8A:48:C4:36:55:E6:CE:D3:41:D7:1F:38:44:A5:B1:13:7A
X509v3 Authority Key Identifier:
keyid:30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8e:7a:6e:28:d5:d0:59:76:a3:0f:0b:bc:15:54:64:4a:78:
e8:3b:52:ee:e6:b4:33:b2:5f:7e:2a:19:16:9f:a4:34:53:cb:
30:ec:67:aa:d5:12:96:a1:83:f2:fa:98:f9:b3:67:cc:f5:8f:
1e:7c:1c:b5:2a:37:52:4e:09:b5:5b:8c:d4:bf:d6:ce:71:38:
e1:b5:96:11:45:bd:15:9b:ef:08:00:3e:5f:f2:f2:e4:b1:f4:
8c:47:e2:8a:48:b0:fc:29:a4:89:fb:4a:42:37:a1:dd:69:ad:
bc:ff:6b:d4:e6:9e:d1:5a:9c:41:09:b8:2a:e5:b5:87:70:de:
17:8c:7b:61:d4:2b:86:44:65:c2:30:a6:be:86:61:67:1d:15:
6e:06:8b:79:84:f1:87:88:4c:f5:48:dc:be:31:70:34:45:d5:
97:13:8b:d6:f5:df:4a:0d:0b:dc:e2:55:d0:b4:a6:24:78:4e:
52:e3:fb:a6:db:1a:3a:c0:56:51:6c:72:33:68:e0:ab:88:20:
94:3c:85:a6:c0:09:48:22:de:18:e7:16:67:ed:92:aa:4f:8c:
fd:7d:e0:a5:48:2b:f6:c4:68:86:cc:a6:c6:47:ed:56:ae:d9:
5c:4f:5c:82:a1:03:87:64:be:f8:e9:1a:61:53:cc:d8:5c:9c:
85:66:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:37 2026 by rpki-client