
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
File: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft (raw, json)
Hash identifier: Ut4zy3856NuYdhf7kabZBWyXONo2142pnmTIQafnhJo=
Subject key identifier: 30:24:9B:F9:C2:BC:D9:8C:9E:13:12:45:FC:2E:9E:C7:D2:D1:CF:BD
Authority key identifier: 33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
Certificate issuer: /CN=A91CC473/serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
Manifest number: 44
Signing time: Tue 19 May 2026 08:23:20 +0000
Manifest this update: Tue 19 May 2026 08:23:19 +0000
Manifest next update: Tue 26 May 2026 08:23:19 +0000
Files and hashes: 1: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl (hash: vEQ8Lzo7CKB8T7QMGBAtxTFK5jryPmBYUkIc4jmCD/s=)
2: 511F1EDCFC0511F081195104746F56BC.roa (hash: nuEm/nImsWX8e2aMNTAfOV22vEEsr1OrR90OJJJ/kIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC473, serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Validity
Not Before: May 19 08:23:19 2026 GMT
Not After : May 26 08:23:19 2026 GMT
Subject: CN=6a0c1df8-18d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:7f:7e:a8:89:ff:43:cb:f2:3b:88:77:ba:
60:c1:d4:ba:8e:c7:fc:35:89:69:11:4a:c8:1c:d8:
ee:1c:f7:c5:46:b8:32:3c:0e:77:82:14:64:1c:8e:
50:3a:75:b0:dd:5f:55:13:50:bd:49:71:3f:36:f8:
1e:55:91:71:b0:fa:11:ae:a1:6f:b6:3e:72:29:b0:
73:ed:a2:76:5d:2b:e3:4b:cc:e4:8d:5a:62:18:00:
c8:e9:44:eb:be:26:45:ec:e8:d8:9b:13:da:35:82:
3f:ca:5c:90:5f:18:c6:19:b6:de:5f:ab:dd:33:93:
cc:2a:83:1b:b3:1f:0c:c2:23:37:91:fb:e8:0a:98:
53:08:b6:de:8e:2a:df:5b:d2:fe:e1:d0:49:49:dd:
81:c4:a4:25:b7:53:ca:05:2e:32:c4:07:85:1c:ae:
66:7d:99:34:b6:72:44:76:a9:f0:fe:07:32:0b:2e:
be:aa:b8:f0:a0:da:52:f6:c1:01:89:e8:88:be:6c:
43:c4:fd:6f:34:66:5a:0a:00:cc:a8:a9:5d:02:f0:
b1:9e:ab:3d:c4:de:78:ea:8b:e2:28:4f:2c:cc:98:
e0:0e:63:c5:9a:71:76:0e:5e:39:98:cf:ba:16:ac:
df:ee:af:0a:66:ae:73:65:6a:de:c0:d7:74:ef:28:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:9B:F9:C2:BC:D9:8C:9E:13:12:45:FC:2E:9E:C7:D2:D1:CF:BD
X509v3 Authority Key Identifier:
keyid:33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:7b:69:f8:fc:2d:07:9e:48:61:8b:6f:f3:82:af:94:3c:e0:
c2:12:27:73:49:b4:c4:c6:b4:46:b5:81:11:87:10:e8:54:69:
0f:3a:ff:32:89:ec:54:91:4a:f0:bc:48:4c:50:4d:20:f2:12:
30:63:cc:37:ac:37:59:c7:81:9a:b1:be:92:a2:84:40:6f:f6:
5f:f0:c5:4a:b4:2f:a1:11:f1:f2:6e:66:8a:ed:7c:cb:53:a3:
c6:c4:e8:0c:93:c1:57:8b:eb:ed:19:13:e7:68:0d:20:da:e4:
65:a6:b0:40:b4:a1:37:82:b9:18:d1:70:8a:ea:df:8d:ea:8c:
00:cd:2f:b3:33:35:e5:3b:1c:2b:dc:a2:39:b9:d2:15:e9:b5:
d3:fa:94:eb:55:1a:74:55:1c:61:8f:b7:dd:77:44:ef:1b:66:
cd:df:6f:49:1d:45:11:09:9d:8f:20:cf:5c:6d:e6:63:b0:8d:
fa:e9:e1:2a:8c:87:ed:b4:c8:fe:12:f4:48:d6:e9:c7:d0:ae:
bc:da:36:0f:98:54:41:a0:da:65:77:f7:55:f1:c4:f4:8e:f8:
39:1d:4a:ed:b0:13:5b:10:16:ec:4b:e6:23:36:53:9e:11:1a:
ce:51:df:df:55:83:af:07:d1:8b:e3:83:f5:a0:ac:a7:5f:8b:
ed:71:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:54 2026 by rpki-client