
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier: PEVaMnL8fQY9ZF91ERFYk427rcbxPcH54Qqa9+xTn3Q=
Subject key identifier: 6F:96:A6:DD:64:2A:60:C9:B7:E2:51:19:1C:5F:1F:BF:21:06:F1:13
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial: 1091
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number: 1070
Signing time: Thu 18 Jun 2026 17:22:44 +0000
Manifest this update: Thu 18 Jun 2026 17:22:44 +0000
Manifest next update: Thu 25 Jun 2026 17:22:44 +0000
Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: z5c5vPU4BMbBpkBn0VeH4F2QUuICbyi4RWDgeN2cZFo=)
2: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nTtKzX6nzx2xavwKMXRS2HOpDCquUtryYE0DdxLYbWk=)
3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: +mWwcwjzpPjSVEv9OnV6PLbugEi6LgvVywkhj6tvDeI=)
4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: RVqLv3EtRj5ErqJMVVt6m4xRrHJQaRXNG5AD8ZsgIFk=)
5: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: 6dJXIvYHzCnEDXXSTc0Eos17d9MIrK7ku8xw5lKvqNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4241 (0x1091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Validity
Not Before: Jun 18 17:22:44 2026 GMT
Not After : Jun 25 17:22:44 2026 GMT
Subject: CN=6a342964-d2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:97:a6:d5:ff:b0:ba:8d:90:eb:96:10:e6:
7e:85:d5:b6:ba:b8:d1:1a:59:6b:75:c5:ad:8f:b4:
10:af:b5:8e:d3:f0:dd:57:31:9a:62:ad:66:a1:3b:
31:06:6b:9d:23:d6:f3:3a:3a:02:3e:78:cc:6e:a2:
55:7f:01:04:8b:2b:7f:42:0b:9a:c0:46:09:27:83:
9d:c1:2c:35:fe:25:18:be:a1:24:e7:f9:d9:87:09:
f8:35:36:c7:05:8c:42:1b:d9:46:86:a6:59:10:48:
e2:24:02:c5:23:8a:45:84:65:5d:30:3e:d3:a4:52:
2a:d4:06:07:25:bc:52:d5:d8:8f:11:61:a0:3e:ea:
93:ab:a8:bd:24:63:b1:5f:4b:75:f7:af:9a:c9:94:
c0:32:6b:06:43:c1:ab:1c:15:ca:dd:d9:35:8b:9d:
d3:37:bd:1d:cb:27:1b:70:f4:95:37:07:de:53:01:
ef:63:18:8a:2c:e6:bb:74:d2:e9:42:3e:92:6f:d4:
a7:6c:8a:e5:a3:ee:60:1f:e0:74:97:b1:75:71:ce:
f9:92:c3:f0:3f:5b:23:f0:54:21:9a:22:22:fa:01:
45:65:c0:57:98:2b:5b:80:8e:9d:98:61:1a:4f:d9:
a4:61:b0:80:66:f2:ee:3d:0b:0e:15:c7:03:54:fb:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:96:A6:DD:64:2A:60:C9:B7:E2:51:19:1C:5F:1F:BF:21:06:F1:13
X509v3 Authority Key Identifier:
keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:63:ec:6c:cc:bd:2b:df:dd:9e:c5:8e:82:9f:49:24:eb:
db:2f:86:fc:62:d8:34:3d:6e:59:c8:ee:6e:c9:4c:8a:10:fd:
95:22:9f:69:d6:e8:4c:92:f0:17:6c:1a:b7:09:4f:23:e0:53:
ab:d9:1d:5d:f1:72:58:3d:4e:63:c7:9f:31:18:d3:6f:6b:e0:
cf:41:c4:cc:cd:5f:49:90:37:4c:fb:75:9a:67:b3:04:98:7f:
37:3a:17:75:7e:f4:00:47:2d:54:98:cf:29:72:f0:e2:c5:a2:
e0:46:c2:20:c1:fc:aa:5f:f5:fa:73:80:9b:e3:af:b7:0b:dc:
5a:9d:f9:10:87:e3:97:d2:b9:9f:da:12:68:30:b8:73:50:ac:
a1:7e:c0:9e:36:45:b6:53:00:3f:95:1d:95:ac:be:9b:99:2a:
b8:9a:77:b5:4e:09:73:59:86:f1:d1:6b:7d:da:c5:d7:60:a7:
63:c0:df:65:0f:0a:a6:be:5c:c8:81:62:1f:1d:c5:f8:50:0f:
70:c1:0a:60:ea:52:9b:d3:26:fa:50:74:e6:af:3a:23:a6:fd:
2a:b9:c0:70:0b:5a:56:4a:69:a3:14:14:bb:ef:76:6d:10:1e:
ba:ff:98:89:b1:13:e4:62:80:b8:1e:20:a5:22:a5:1b:c7:3b:
2d:47:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 23:11:10 2026 by rpki-client