
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json)
Hash identifier: bwKv/mGA1jVRM7/k5vCNa0DWhSdRiW8AzWeoHKytev0=
Subject key identifier: 88:AE:DC:39:8A:DA:58:84:FB:B6:43:44:E9:C4:7A:05:E5:9F:52:21
Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
Certificate serial: 1A18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
Manifest number: 1A0A
Signing time: Tue 06 Oct 2026 16:22:57 +0000
Manifest this update: Tue 06 Oct 2026 16:22:56 +0000
Manifest next update: Tue 13 Oct 2026 16:22:56 +0000
Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: 4tCVHqcxkXU2XWvqj+Z0NqX4QIkGP9ftw6ul6jCosCs=)
2: AE929D88823711E782F9A440C4F9AE02.roa (hash: 4QvDkkcufgwUo4jkhq66G8p+VgeOgchdcUijfjmg00c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl
rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6680 (0x1a18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
Validity
Not Before: Oct 6 16:22:56 2026 GMT
Not After : Oct 13 16:22:56 2026 GMT
Subject: CN=6ac52061-b250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:75:12:e7:25:d0:41:33:9f:cd:cd:7e:e7:
22:57:05:ac:10:18:d6:82:92:05:d8:ac:e8:b3:3f:
4e:59:06:d8:7c:15:da:d2:68:2a:02:de:d9:94:cd:
46:54:59:98:0d:0e:b1:9e:75:7e:ec:a3:23:f7:57:
fe:a2:b6:ac:c0:e1:82:5e:1f:27:b1:5f:c1:dd:ba:
07:ab:2f:11:27:1c:f3:55:9c:cd:1a:07:98:07:35:
fa:be:e1:93:32:07:57:98:4b:1e:e8:c6:d4:94:56:
8c:76:6e:64:25:07:16:dc:82:6d:64:a7:9a:11:a9:
b1:1b:83:a3:20:48:fd:58:d8:7d:83:44:1a:f5:db:
53:87:89:ba:8e:b3:63:f5:bc:a1:ee:62:26:dc:46:
b7:1e:22:d4:b6:73:f6:b8:ec:cd:9b:b1:c3:17:a5:
c0:6f:1b:9f:33:70:55:ce:05:ef:07:19:fd:bd:e1:
d9:05:b7:1c:71:ad:cf:04:c1:0c:02:f4:7c:9c:86:
8b:e8:92:67:27:78:83:cb:75:3f:53:9b:4c:14:54:
0d:a5:ba:cb:bf:56:b1:04:aa:ef:5f:99:9b:75:44:
10:dc:3f:94:b4:02:8e:03:a0:be:64:96:b3:a8:1d:
34:b7:b9:35:f0:7e:5e:99:31:d3:b3:8c:33:11:18:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AE:DC:39:8A:DA:58:84:FB:B6:43:44:E9:C4:7A:05:E5:9F:52:21
X509v3 Authority Key Identifier:
keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:39:ac:ae:fe:b6:fa:ef:76:c5:20:4b:18:ed:a7:ae:ae:9a:
d4:07:0c:02:4a:31:aa:63:80:03:fe:d4:69:64:7b:e6:b1:10:
10:72:20:0a:71:b4:d3:dd:2f:01:19:3a:44:6f:a2:4e:d6:7c:
ee:df:4f:2e:28:f4:a3:5c:4d:5a:6b:fa:a1:73:db:59:84:98:
ef:74:23:01:58:f8:9d:32:b2:f3:94:7d:1d:57:59:f9:f6:91:
5f:47:a9:40:73:2c:49:33:fa:4b:64:4f:e1:7d:b1:68:d0:0a:
85:9e:cd:55:76:92:31:4a:f3:a9:f9:0b:28:d0:c6:86:ff:ba:
c2:38:5a:98:a9:a6:a9:fe:9a:6a:cb:21:57:d4:be:73:4e:78:
29:5d:08:7c:60:07:ca:35:51:1b:a3:bb:6a:54:ee:92:92:3b:
90:18:a0:ce:6e:5a:09:10:70:81:fc:b6:1b:69:a9:03:e6:27:
86:21:d1:e6:4e:0d:1d:f7:d0:0f:19:60:9a:d4:59:4a:f6:38:
6a:42:73:54:8c:5a:e7:e7:2f:18:54:ce:64:f5:a6:01:84:e6:
2d:e1:81:bc:13:1e:13:f2:11:2a:f0:66:ea:09:d5:e4:4a:d0:
17:c6:6c:ee:fa:1b:63:8b:ad:81:2f:43:4f:a4:1d:8a:de:fd:
fa:1e:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:54:14 2026 by rpki-client