
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
File: mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json)
Hash identifier: BzlpHoEeWoM1HBZSkNf4VArMFWCROSL4HEyzJ9tsGf4=
Subject key identifier: 3C:1E:B6:95:7D:8C:DC:B6:41:E0:44:AC:2E:3F:66:24:07:BF:C4:32
Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7
Certificate issuer: /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7
Certificate serial: 07E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
Manifest number: 07E1
Signing time: Thu 16 Jul 2026 14:49:26 +0000
Manifest this update: Thu 16 Jul 2026 14:49:25 +0000
Manifest next update: Thu 23 Jul 2026 14:49:25 +0000
Files and hashes: 1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: wiwQMS1ei9ka434hzQczvcNY79zlgygx1Y7z+xUPSlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl
rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 14:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2017 (0x7e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7
Validity
Not Before: Jul 16 14:49:25 2026 GMT
Not After : Jul 23 14:49:25 2026 GMT
Subject: CN=6a58ef76-69aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:85:05:f6:18:8b:d3:66:f4:aa:57:e7:eb:0d:
09:38:a7:98:e4:be:f8:ec:5e:18:be:bb:ab:58:31:
f6:e9:12:50:5d:41:56:76:b8:5d:48:62:dc:9e:2d:
f1:00:93:94:07:b9:b5:d8:e1:04:7a:35:86:a7:87:
57:82:a7:08:1a:ea:5c:19:96:55:9b:a2:7d:03:c1:
2a:28:08:dd:96:60:7c:d9:58:14:b9:72:35:36:a4:
fe:82:e3:54:ba:35:ca:d1:72:e6:27:1f:29:1c:f3:
8a:11:db:8a:19:7a:40:c5:e6:39:e0:a0:68:c3:f4:
00:52:35:a9:1b:ff:4a:96:29:a8:9a:9a:e0:61:71:
2a:60:dc:f0:0a:b3:88:d5:f4:0e:21:96:73:d0:60:
32:1f:5f:0d:d1:93:ea:89:6c:6f:82:0c:ec:62:42:
f5:8f:39:07:80:1b:5c:39:21:f4:2a:d6:6e:70:c0:
96:8b:ed:f6:91:a8:87:1a:94:73:54:bb:3e:8a:0d:
0b:d6:53:e8:22:e5:82:4c:79:e7:87:04:ec:7f:c1:
7b:e4:db:f4:2f:74:f6:38:b8:3b:b8:ae:54:cf:6c:
9c:74:0f:42:67:a3:2e:c9:eb:4b:38:96:30:b6:70:
77:ab:4b:f4:d5:5a:0a:ff:86:57:a1:72:ce:7d:f7:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1E:B6:95:7D:8C:DC:B6:41:E0:44:AC:2E:3F:66:24:07:BF:C4:32
X509v3 Authority Key Identifier:
keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:c9:84:9d:0d:a8:d7:1a:84:e9:ff:6a:a4:a9:c2:79:63:
74:bd:e1:e7:9f:d0:c3:42:a0:bb:af:84:56:18:68:b0:1b:d8:
15:66:62:c4:47:f1:b8:b3:4f:88:30:32:18:94:7e:81:0a:32:
fd:9f:b0:28:9a:74:e8:00:c2:12:ce:66:fa:78:6d:26:5d:11:
ea:3f:7d:84:a6:53:64:c7:66:7f:45:d2:69:98:3d:41:5d:65:
3a:35:8c:6b:17:a5:ab:b5:91:0c:c2:2c:af:c0:ba:33:54:11:
e5:43:b9:e8:54:91:65:5b:e7:11:99:e2:a8:f5:49:c6:37:bc:
1a:2f:38:72:0a:9a:03:38:a2:76:6a:bc:ca:6e:a3:e2:67:1e:
21:36:78:1f:83:ea:76:f0:40:16:6f:2b:7d:ef:c4:56:b8:f3:
c2:34:00:f8:f6:bd:91:fd:40:a8:31:0a:a5:ed:18:3a:eb:3e:
26:61:89:b9:09:cf:31:a3:bf:35:5f:db:89:5c:05:f0:1b:ab:
c7:e3:52:31:83:6b:75:79:dd:c1:fa:02:01:9c:81:35:86:78:
17:67:12:47:b0:fa:10:6f:3c:8f:65:bd:39:86:d3:7c:25:95:
91:70:b6:25:f0:b3:42:a1:96:fc:dc:e4:6f:19:0e:bb:14:da:
bd:20:e9:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ3OTkxMTAvBgNVBAUTKDk4NkIwRDUzNzY0QkM4M0RDMEUwNzJFQ0FGMzY5Qzc5
RjIyQTM5RDcwHhcNMjYwNzE2MTQ0OTI1WhcNMjYwNzIzMTQ0OTI1WjAYMRYwFAYD
VQQDEw02YTU4ZWY3Ni02OWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6oUF9hiL02b0qlfn6w0JOKeY5L747F4YvrurWDH26RJQXUFWdrhdSGLcni3x
AJOUB7m12OEEejWGp4dXgqcIGupcGZZVm6J9A8EqKAjdlmB82VgUuXI1NqT+guNU
ujXK0XLmJx8pHPOKEduKGXpAxeY54KBow/QAUjWpG/9KlimomprgYXEqYNzwCrOI
1fQOIZZz0GAyH18N0ZPqiWxvggzsYkL1jzkHgBtcOSH0KtZucMCWi+32kaiHGpRz
VLs+ig0L1lPoIuWCTHnnhwTsf8F75Nv0L3T2OLg7uK5Uz2ycdA9CZ6MuyetLOJYw
tnB3q0v01VoK/4ZXoXLOffdnewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwetpV9
jNy2QeBErC4/ZiQHv8QyMB8GA1UdIwQYMBaAFJhrDVN2S8g9wOBy7K82nHnyKjnX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xM0NBODJGQTQz
RkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlEM0E0SExzcnphY2VmSXFP
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21Hc05VM1pMeUQzQTRITHNyemFjZWZJcU9kYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDc5OS8xM0NBODJGQTQzRkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlE
M0E0SExzcnphY2VmSXFPZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj77JhJ0NqNcahOn/aqSpwnljdL3h55/Qw0Kgu6+EVhhosBvYFWZixEfxuLNP
iDAyGJR+gQoy/Z+wKJp06ADCEs5m+nhtJl0R6j99hKZTZMdmf0XSaZg9QV1lOjWM
axelq7WRDMIsr8C6M1QR5UO56FSRZVvnEZniqPVJxje8Gi84cgqaAziidmq8ym6j
4mceITZ4H4PqdvBAFm8rfe/EVrjzwjQA+Pa9kf1AqDEKpe0YOus+JmGJuQnPMaO/
NV/biVwF8Burx+NSMYNrdXndwfoCAZyBNYZ4F2cSR7D6EG88j2W9OYbTfCWVkXC2
JfCzQqGW/NzkbxkOuxTavSDpJA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:08 2026 by rpki-client