
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier: hac6pqJLPXAYC/5+xoHzqqmgsbZeLzRu9dZhmya+ijw=
Subject key identifier: 64:30:32:87:AF:E3:7F:B6:68:8D:7A:86:35:07:DC:9A:53:CD:29:15
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial: 0272
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number: 0256
Signing time: Sun 05 Apr 2026 02:07:48 +0000
Manifest this update: Sun 05 Apr 2026 02:07:47 +0000
Manifest next update: Sun 12 Apr 2026 02:07:47 +0000
Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: FS3B23DkbxncwkW/sabx/jrAgQVX0FE0EvCOtlQHV5c=)
2: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: gHUta7y8pC3d2TOZ0QshxXr62KyKz6DtLyfNYCQhLTs=)
3: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: HzpFQGz5CVxBl9sbcVJvLDzRvcHkaj2Jp7niriD1Y/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Validity
Not Before: Apr 5 02:07:47 2026 GMT
Not After : Apr 12 02:07:47 2026 GMT
Subject: CN=69d1c3f4-7c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:ef:98:ff:dc:9e:65:ac:ac:a1:d9:06:9e:
2e:b6:af:16:d0:2a:3b:3a:4a:e5:7d:7e:07:25:b7:
6b:fb:71:08:18:23:0b:e0:0e:13:fa:c4:66:e8:b8:
9c:3f:84:f3:81:db:30:a5:89:71:fe:07:f6:e9:6d:
2c:78:b2:30:d1:07:7a:10:56:59:37:55:41:98:7f:
a4:5d:4b:0b:12:b0:91:f4:c6:d5:2b:ab:07:5c:df:
35:85:3d:28:4c:14:25:9c:67:97:bf:de:b6:1b:fa:
22:4f:12:e5:ef:d1:db:94:1f:1b:01:7f:60:2c:27:
a7:4f:c3:92:a3:01:50:39:1d:43:a3:30:d2:dc:ad:
9e:4f:e2:11:d0:f2:37:61:3e:05:4c:cc:e5:cb:57:
96:4c:1e:65:0a:76:6b:ac:ba:94:01:4f:a5:f7:80:
96:a4:a8:55:46:e6:1a:2f:a7:5f:83:5a:37:86:65:
67:11:02:a4:c9:e3:97:59:f5:15:85:2a:4b:3f:58:
51:6a:fe:b7:07:1c:88:85:ea:d0:94:5f:41:66:7e:
ea:8a:66:d4:ad:17:8a:f0:d7:8c:4b:8f:46:4c:ae:
4c:5e:2d:ee:dc:8a:a3:1b:49:df:c0:bb:18:1f:e6:
75:95:ed:aa:22:4f:3d:06:34:df:2f:c9:17:e4:87:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:32:87:AF:E3:7F:B6:68:8D:7A:86:35:07:DC:9A:53:CD:29:15
X509v3 Authority Key Identifier:
keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0f:df:8f:71:27:f0:51:26:48:53:9b:64:18:2e:f6:2a:95:
67:97:c3:2c:c1:a7:de:25:ae:a7:87:d8:1e:2f:5a:1c:eb:b2:
fc:9c:d1:b4:ca:50:00:1d:bc:f2:9e:b0:6c:f9:63:34:9f:8f:
7b:e0:c7:7c:d0:c1:21:4a:cc:d0:cd:fc:6f:1b:4e:50:fd:ce:
fa:62:fc:e7:d9:0a:b3:28:74:5c:9b:79:e1:8f:c4:36:e9:16:
bb:81:0c:89:2e:e6:97:73:b6:1f:86:01:2a:b2:d0:73:71:57:
56:7f:38:68:a9:04:19:85:c3:7a:e0:10:0e:34:9e:87:96:c8:
e8:88:20:74:16:5c:73:b8:42:57:7d:82:7f:b0:89:90:75:8c:
a1:79:91:dd:3b:b5:8a:42:dc:ec:0e:cd:f7:a9:69:f5:5c:22:
af:74:22:42:82:7f:75:f3:48:37:94:68:e4:4c:d2:24:2c:1a:
d5:fa:cf:5e:c9:90:cb:06:4d:96:e6:73:49:48:ba:2e:79:57:
37:ba:91:48:47:58:2c:ef:b1:29:8e:7b:b1:11:41:ab:4e:24:
88:97:35:d7:ae:7f:f9:af:2c:cb:b2:6f:9d:66:3f:d9:81:2a:
fc:6e:22:5d:87:29:8a:58:64:72:e5:e5:f7:32:10:21:41:01:
80:27:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:34 2026 by rpki-client