
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier: QDSQqTKXMxFJoDlIfo59WUI+v3v8t9L0Wvl7ZX1DcOY=
Subject key identifier: C5:8F:EC:93:A1:8E:3B:B8:AC:3B:29:DB:58:3D:89:B0:CD:95:16:44
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial: 10C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number: 10A7
Signing time: Sun 04 Oct 2026 17:24:01 +0000
Manifest this update: Sun 04 Oct 2026 17:24:01 +0000
Manifest next update: Sun 11 Oct 2026 17:24:01 +0000
Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: MsyOD5CNnm2lqntw0+B8hsV300dgC20HdlsCMh2oYI8=)
2: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: +mWwcwjzpPjSVEv9OnV6PLbugEi6LgvVywkhj6tvDeI=)
3: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nTtKzX6nzx2xavwKMXRS2HOpDCquUtryYE0DdxLYbWk=)
4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: RVqLv3EtRj5ErqJMVVt6m4xRrHJQaRXNG5AD8ZsgIFk=)
5: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: 6dJXIvYHzCnEDXXSTc0Eos17d9MIrK7ku8xw5lKvqNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4296 (0x10c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Validity
Not Before: Oct 4 17:24:01 2026 GMT
Not After : Oct 11 17:24:01 2026 GMT
Subject: CN=6ac28bb1-9f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:ce:99:10:80:82:54:5b:3e:56:a2:99:16:
c1:01:92:fb:c9:c8:f1:93:a3:14:b4:fd:bd:4e:4f:
30:01:e8:db:a4:ed:bf:32:4a:a9:92:a8:52:fa:b8:
51:a5:35:66:92:a5:d9:0a:29:a2:19:d8:4b:5c:99:
a5:c2:c8:d6:ed:29:a4:27:dd:45:c1:69:46:0f:a9:
a7:00:f1:e9:f6:4d:b3:2d:8c:46:ac:17:65:41:23:
8c:7c:ac:4c:35:49:2e:e2:7a:7f:b3:2e:b0:97:a6:
01:87:5c:e4:87:15:44:45:a1:e0:2a:2e:af:90:b5:
72:33:5e:14:f5:1c:bc:f6:f2:81:ad:f1:fc:5f:8a:
22:96:84:c9:79:f4:21:cc:df:75:38:5b:57:e5:e6:
e5:92:1b:f5:d4:1c:fc:22:43:04:9b:22:91:e9:df:
f7:d7:03:33:db:7c:03:bc:08:b9:28:e1:a1:bd:82:
d5:fb:71:27:e4:fc:4c:59:54:cd:b1:af:b3:d0:5f:
a3:a7:98:2f:44:01:78:eb:ae:d1:b4:3f:6d:5a:d2:
ab:85:f8:53:5c:a9:53:98:73:2c:2f:f3:f6:9a:3b:
e8:4c:5a:af:85:3b:db:a5:3f:2f:ea:58:cd:47:1f:
ac:3c:f9:09:72:88:92:49:56:43:13:73:c0:83:5e:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:EC:93:A1:8E:3B:B8:AC:3B:29:DB:58:3D:89:B0:CD:95:16:44
X509v3 Authority Key Identifier:
keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ef:98:8c:9e:3e:ca:64:94:ce:48:d4:e6:6c:40:f4:a2:04:
d6:12:b8:6a:23:55:dd:6e:fa:c5:51:db:e8:6c:37:5c:69:a1:
f2:08:e9:bb:32:cd:ef:09:18:df:d9:61:b0:12:3e:e7:a3:1a:
72:df:93:97:60:51:b4:a2:e2:08:cc:5a:b1:61:f4:b0:9b:07:
c0:13:72:dd:d1:96:2e:02:b4:13:05:2f:f8:4d:fd:b1:f3:a4:
21:d1:f3:9a:ff:6b:54:6d:ae:c3:01:b1:3b:bd:64:6a:73:73:
7e:d6:58:55:9a:5b:bc:d8:ad:d6:db:a6:ec:d8:b1:54:68:37:
b6:a1:94:a0:cf:b1:3d:0b:dd:1e:7a:d2:84:77:33:60:ee:03:
08:08:e8:ed:c3:9f:ba:e6:b4:b1:79:45:39:06:3d:04:a0:de:
d4:1e:66:7a:91:6f:cd:9c:7c:34:d8:86:cb:6f:8b:f1:3c:a2:
62:38:7a:ed:59:65:b4:4a:48:53:c4:bc:f3:da:ee:fc:e9:a0:
84:00:7b:d2:57:84:91:77:b5:05:93:ea:c7:5d:aa:34:8c:f4:
a2:4f:54:54:8e:ec:3e:97:85:60:ac:70:8f:bd:84:ab:69:10:
d9:a9:c2:87:31:8c:95:8f:a1:37:eb:e4:70:be:ff:aa:07:6c:
ac:02:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:47:26 2026 by rpki-client