
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json)
Hash identifier: DubPOMup+uWkT3W7nHfxCMXYa+ejP1h1Xhy4lGkAhzQ=
Subject key identifier: A7:40:57:F8:F9:0A:7E:FD:E5:6A:F6:F4:0B:B8:5F:58:62:3B:5E:B2
Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96
Certificate serial: 353D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
Manifest number: 3535
Signing time: Sat 04 Apr 2026 14:32:39 +0000
Manifest this update: Sat 04 Apr 2026 14:32:38 +0000
Manifest next update: Sat 11 Apr 2026 14:32:38 +0000
Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: skTbq1y4oTRagDV2Juey3KtPs2ZIHKnUczzsoMgkS1E=)
2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: 6+roL2PbfwWq8y6ta4w/K7qCXrfAWrT67sYJoqqWyCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:32:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13629 (0x353d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96
Validity
Not Before: Apr 4 14:32:38 2026 GMT
Not After : Apr 11 14:32:38 2026 GMT
Subject: CN=69d12106-2824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:95:38:14:c3:96:d0:b4:88:05:a7:14:21:
b3:93:d6:ca:62:17:bd:6c:c8:68:a0:cf:17:be:9a:
ef:a3:9e:1d:cc:b2:59:89:b9:dc:51:30:32:e5:43:
b4:48:6b:ab:b5:15:f5:42:b2:65:b2:a0:ff:25:c0:
41:51:67:45:9e:b5:c1:f2:e1:56:cf:d8:ee:22:53:
48:a6:f3:bf:4f:64:f4:13:7a:ac:26:8f:9c:6d:13:
44:be:2c:03:c3:21:23:06:19:60:1f:0a:76:14:d1:
50:b3:db:a4:4c:61:67:07:cc:9a:22:d1:03:d5:d4:
5b:8c:d3:b3:0b:57:5d:bc:70:6b:56:02:e7:c7:a7:
cc:45:36:70:2e:f5:64:d4:0f:e8:00:c8:eb:09:41:
83:f6:82:81:56:45:9a:cf:6d:93:1e:f8:62:35:24:
c5:f9:20:a5:65:9a:d3:82:d9:52:0b:c0:fe:bb:5e:
32:c0:ae:c8:de:1a:91:e8:9f:31:bf:8a:c7:cf:26:
05:bf:4f:7b:25:d4:50:5a:3a:8c:c0:ea:f1:28:42:
45:bc:c6:d0:fb:66:81:c6:af:c1:00:78:ed:f5:fb:
d2:f4:0f:89:39:32:d1:64:27:69:31:2b:39:1b:2f:
13:33:28:da:8c:42:72:ed:d9:ee:55:3c:c8:82:b3:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:40:57:F8:F9:0A:7E:FD:E5:6A:F6:F4:0B:B8:5F:58:62:3B:5E:B2
X509v3 Authority Key Identifier:
keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:43:df:76:93:60:96:a6:a9:29:47:f6:45:0c:dc:bb:86:99:
1c:34:dc:b9:4e:06:02:f4:5f:db:0b:7f:7f:48:b1:77:d3:f5:
82:ad:d2:f1:2c:94:a9:cb:57:b3:97:ae:e6:b4:42:c9:77:35:
11:23:b6:20:54:2b:a4:f4:86:42:e0:ca:db:d3:e0:fa:2d:96:
8e:72:3e:02:05:93:d4:1a:00:81:18:5e:69:42:4d:c3:ec:22:
6e:b7:52:fd:0f:51:36:20:26:11:02:be:52:23:63:4b:26:5a:
c0:93:b1:17:05:31:b4:07:54:7b:a3:47:78:4b:da:8d:a3:01:
89:a5:19:04:19:4e:e3:b3:c1:31:cf:ba:aa:ff:46:a3:67:d5:
b2:60:b0:7f:73:ac:53:e2:d3:c8:77:fe:e2:7d:6c:3f:16:50:
67:63:ce:6a:6e:3b:ba:49:9f:99:97:22:b6:33:2b:54:96:51:
21:ef:44:1f:25:de:a0:21:49:b8:d3:53:40:ea:69:4f:a8:01:
8b:08:8c:78:9e:ac:f3:f6:95:8f:d3:53:cd:8b:14:20:30:50:
03:58:b1:1c:59:2c:1a:d0:e1:a7:09:c5:2f:67:8d:67:48:d9:
b2:9c:f6:d1:b0:b1:b4:30:c9:42:d1:ff:47:1e:25:b5:84:2c:
ed:3d:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:37 2026 by rpki-client