
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft
File: Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft (raw, json)
Hash identifier: NtA6vATdduBFFXi3t/7NWlVLjF8IGVLfKW6LcLmOcPA=
Subject key identifier: 82:C2:3A:A0:2A:A6:74:4B:2A:B6:4D:9D:4E:95:2E:F1:4B:66:8A:99
Authority key identifier: 32:FB:20:BE:5E:28:48:5B:BF:A8:33:E8:02:4B:86:E9:98:2D:DF:6E
Certificate issuer: /CN=A91D4413/serialNumber=32FB20BE5E28485BBFA833E8024B86E9982DDF6E
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mvsgvl4oSFu_qDPoAkuG6Zgt324.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft
Manifest number: 2DA1
Signing time: Fri 02 Oct 2026 16:00:29 +0000
Manifest this update: Fri 02 Oct 2026 16:00:28 +0000
Manifest next update: Fri 09 Oct 2026 16:00:28 +0000
Files and hashes: 1: Mvsgvl4oSFu_qDPoAkuG6Zgt324.crl (hash: VPYggiRNOu5D9AejEX0u5rI28plg5FYrk3pl8DtS+/U=)
2: 97FA1AA841F811F1B8AFB543A8EE528E.roa (hash: c8vnrUnAU28XMTNHVv3+lvOZFEuSl74tN6k11xfDYvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.crl
rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mvsgvl4oSFu_qDPoAkuG6Zgt324.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413, serialNumber=32FB20BE5E28485BBFA833E8024B86E9982DDF6E
Validity
Not Before: Oct 2 16:00:28 2026 GMT
Not After : Oct 9 16:00:28 2026 GMT
Subject: CN=6abfd51d-011a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:80:83:c4:65:49:f4:94:0b:4b:04:f3:f4:
82:9e:36:a6:a2:c0:9c:9a:78:94:45:a7:2e:9b:57:
7b:89:96:c3:d3:0e:2b:e5:35:19:51:af:ad:bf:b8:
f8:b5:9f:c7:53:b2:a7:dd:00:99:ed:ab:09:79:02:
a7:98:f0:a1:e6:b7:7c:ae:e9:df:e6:c3:71:e4:39:
6c:81:07:ce:b3:e5:32:b0:9f:00:a7:ea:2a:ae:23:
d4:44:ec:16:bd:49:14:f4:ec:30:d6:92:74:c8:e5:
f9:15:c8:da:66:a6:23:0b:91:96:4d:6c:e1:f8:ed:
1f:6e:cb:20:2c:b8:8e:2e:a6:dc:c7:f2:11:54:3f:
fe:90:3e:37:94:e2:72:bc:d0:fd:b9:d5:38:04:ec:
34:5e:5e:d5:af:67:3c:2d:c9:e9:af:87:f8:d2:ab:
51:fa:4d:2f:cf:56:1f:e5:2a:68:7a:92:9f:56:d0:
72:a6:65:10:1d:93:ec:fd:0e:34:76:ca:a1:55:c4:
34:40:d0:11:0e:8b:18:3f:82:89:44:0b:52:76:c3:
be:72:2d:6c:7f:c5:ea:f8:92:c0:f1:10:a1:9e:62:
79:63:a7:2c:80:71:dd:72:df:0a:8d:5e:34:8c:df:
4d:c4:43:60:c5:26:c8:f9:bc:26:cb:f4:0e:63:ff:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:3A:A0:2A:A6:74:4B:2A:B6:4D:9D:4E:95:2E:F1:4B:66:8A:99
X509v3 Authority Key Identifier:
keyid:32:FB:20:BE:5E:28:48:5B:BF:A8:33:E8:02:4B:86:E9:98:2D:DF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mvsgvl4oSFu_qDPoAkuG6Zgt324.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/Mvsgvl4oSFu_qDPoAkuG6Zgt324.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ec:e6:3b:10:55:ae:bc:8c:f2:22:db:e3:70:fb:9c:5d:27:
b3:fe:86:a3:fb:4c:e3:96:9c:cd:f4:df:9e:7c:a7:7c:ca:78:
9e:0c:7e:f2:3d:46:86:af:4a:a4:f5:89:88:8c:69:04:d5:c6:
c0:f6:ff:57:97:2b:a2:20:f3:64:28:e6:60:77:f5:57:39:5a:
72:86:79:ba:54:08:6b:d9:f4:fd:2b:b2:02:45:73:68:c3:a4:
54:59:d9:d8:fb:a8:3e:3d:ae:c4:4b:e1:b5:ad:fa:b4:03:34:
ae:04:52:61:c7:48:f7:c4:08:83:94:f2:db:8a:3e:e4:c3:f1:
51:63:fb:be:dc:22:28:63:ef:83:b0:3a:ad:41:fb:1e:16:33:
56:67:f1:f8:67:9c:d6:61:d9:3f:7f:dc:4f:f5:f4:5e:4f:12:
e9:38:7e:a1:69:13:19:d2:7d:f5:eb:c0:56:83:55:33:b5:27:
b2:30:0c:0a:09:55:5a:0e:81:55:8e:e0:25:ac:4e:65:85:fa:
52:bc:3a:0b:58:f3:89:0d:67:ee:67:ae:10:37:9d:92:34:99:
f3:a1:94:eb:94:48:0d:36:de:23:36:fa:fd:66:c1:33:35:5c:
81:50:5e:ed:65:ea:93:e4:87:89:cd:9b:c5:97:a3:b5:81:b4:
7e:18:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:15 2026 by rpki-client