
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
File: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft (raw, json)
Hash identifier: TCoDAt250CQbYlq5jv5sh5BI7Nz058XbBzvMK91uqyg=
Subject key identifier: 38:FA:FA:67:C9:4F:5B:E7:0F:6E:6F:C0:B6:36:FA:F6:F1:4A:9D:45
Authority key identifier: 33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
Certificate issuer: /CN=A91CC473/serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
Manifest number: 74
Signing time: Wed 19 Aug 2026 08:40:22 +0000
Manifest this update: Wed 19 Aug 2026 08:40:22 +0000
Manifest next update: Wed 26 Aug 2026 08:40:22 +0000
Files and hashes: 1: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl (hash: wjn1lrqKau6HjbzalFH/NwigKsyItpWDJcIZC8y//iU=)
2: 511F1EDCFC0511F081195104746F56BC.roa (hash: 3ZY9LtMnfjJy2QVhjYp4QqSiXFPZWzNKEPSHSZcoGaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC473, serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Validity
Not Before: Aug 19 08:40:22 2026 GMT
Not After : Aug 26 08:40:22 2026 GMT
Subject: CN=6a856bf6-1fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:f8:f6:7c:2a:55:a3:28:5b:c0:63:0b:af:
cc:2c:02:f1:95:cd:da:41:0f:6b:2c:26:2e:8b:72:
05:04:33:23:5d:fd:cb:4e:e9:9a:b5:ce:8e:0f:a6:
99:86:55:7e:85:ce:67:54:94:1b:05:b5:9a:b2:bb:
58:73:e5:5f:ea:12:7e:bd:54:da:09:1f:c2:0c:b1:
69:d6:71:db:47:e7:a7:ca:43:83:7c:b1:5f:1b:3f:
b2:8a:13:26:35:19:af:7a:bd:47:30:30:64:c4:47:
0b:a2:bf:4c:f4:c2:d3:37:66:10:ca:1d:e3:c3:22:
99:e3:1c:b5:b8:99:7d:e3:6f:93:fa:6f:ad:78:64:
49:e6:b4:ec:62:17:c7:19:7a:c3:51:fd:31:cc:e7:
05:dd:40:72:38:29:b6:6d:9a:af:6a:d5:ce:a7:39:
06:1e:8e:20:14:30:53:25:b6:1f:5d:98:77:b6:0b:
81:8d:21:ec:46:7d:3f:2b:08:3c:88:96:e2:3b:60:
24:58:5e:99:ba:04:ce:31:29:cc:37:31:42:b3:55:
0b:ea:3d:54:09:30:6c:15:bd:1c:74:de:92:45:61:
1f:1c:7e:42:93:27:e9:26:15:c7:3d:1d:12:56:87:
de:cf:cb:63:5c:15:03:3e:46:52:a8:60:c0:7b:fd:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:FA:67:C9:4F:5B:E7:0F:6E:6F:C0:B6:36:FA:F6:F1:4A:9D:45
X509v3 Authority Key Identifier:
keyid:33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:39:41:f5:d6:2f:78:60:f5:00:a3:b8:5c:50:47:1f:75:eb:
59:d7:2c:48:44:94:0c:e2:f4:24:5d:28:fa:7b:a9:f4:ff:be:
21:3f:83:e2:59:be:eb:a2:35:b7:b4:31:35:6e:84:cb:9a:08:
58:fb:c3:bf:35:45:0a:27:b2:34:af:a4:88:b5:ab:ed:c0:c3:
81:8a:e6:d0:e1:47:ac:7c:d4:ff:30:b9:d4:89:e6:05:fc:4c:
c0:ba:98:d9:29:b7:88:98:20:02:47:7f:53:08:0f:3f:3f:9b:
b5:36:ff:0f:83:ea:ab:88:44:c6:1e:1c:44:47:ce:96:94:e8:
66:3a:b2:e9:3c:a7:6d:3a:a5:da:d7:4f:69:a7:e4:c0:c6:e2:
78:19:84:37:9b:07:75:16:fe:3c:65:3e:06:ff:dd:47:fd:15:
0a:5a:3e:b4:83:6a:65:f1:62:53:3a:1d:bd:c2:33:e7:77:cd:
ef:93:c7:af:b0:8b:63:66:30:ee:bf:ef:ec:86:51:b0:09:db:
93:93:a8:94:00:46:a7:78:b4:6b:3b:4d:a5:87:80:fa:58:86:
c6:62:11:07:14:02:9e:5f:48:78:fc:c4:81:4f:7d:ba:13:b5:
4b:fe:35:31:38:cb:b2:01:fa:08:19:ac:5c:26:30:f5:04:44:
57:42:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:09 2026 by rpki-client