
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json)
Hash identifier: tSY2SdjABrxRX3hN8mujGVUXh9wkmbj6cvXwDs7xzQc=
Subject key identifier: 27:47:71:0F:0F:E1:91:86:0D:B2:98:EA:92:CB:3E:47:B1:88:7F:F2
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial: 0770
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
Manifest number: 0756
Signing time: Tue 28 Jul 2026 22:12:47 +0000
Manifest this update: Tue 28 Jul 2026 22:12:47 +0000
Manifest next update: Tue 04 Aug 2026 22:12:47 +0000
Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: Uc1gu5qL95IwQRye/1MdYDHdHKETdaIPfmP4fgk/jWc=)
2: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: b91CN8KbCA7CsKadVYDYS+4haRrVejoxjdnfqbIrH3A=)
3: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: z3vfFzyCiPp7COCzQy7KY/5fnPoAbILohbFaBxoPiG0=)
4: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: p8nOzs2MGPpJBZ2dYf3NfouwimR2DwXOeH0VUZbqjmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Validity
Not Before: Jul 28 22:12:47 2026 GMT
Not After : Aug 4 22:12:47 2026 GMT
Subject: CN=6a69295f-e080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:56:e2:1d:22:7d:02:e6:f0:9e:ab:04:23:09:
89:52:12:75:0f:4c:cb:79:d0:3b:08:64:1d:dd:f9:
d9:ca:0e:e4:3f:c0:83:db:ae:6c:62:c6:4a:07:01:
12:f1:9d:00:72:1c:51:fd:33:1f:4f:46:c5:5a:3e:
1d:85:42:b2:2d:e1:c3:6b:f2:ea:98:2b:65:34:e7:
ca:dc:b4:da:47:e5:12:b3:0d:57:75:e7:55:35:79:
ec:45:73:22:dc:4c:f8:43:3b:c2:ad:64:e1:b6:db:
0b:75:92:b1:9d:11:d2:9a:b4:2b:20:61:b4:25:ba:
79:df:84:f1:d5:47:f3:6a:16:68:dd:f9:64:de:13:
5e:a8:2e:6e:4d:e4:cb:37:50:b1:59:ff:2e:56:4c:
83:b1:83:01:8d:62:80:2e:34:a2:c9:78:50:b8:ae:
32:d0:41:2f:95:f0:04:ea:33:d5:18:4b:b2:09:c2:
f3:d7:ad:72:ea:ae:dc:31:7b:03:37:fc:e8:17:e4:
c7:b7:33:dd:87:f4:33:07:89:92:fa:e4:1a:c0:c7:
90:5f:bf:6c:31:ff:17:6b:bf:ae:01:ff:4d:ca:b5:
5f:86:06:ea:7e:b6:5a:af:ab:b1:78:ef:1d:6e:af:
f0:45:dc:93:35:67:ab:16:9d:08:2d:3d:c9:26:4e:
2b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:71:0F:0F:E1:91:86:0D:B2:98:EA:92:CB:3E:47:B1:88:7F:F2
X509v3 Authority Key Identifier:
keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8f:e5:33:5b:4c:0c:3f:b8:a6:93:6c:84:9c:22:12:69:56:
bb:0f:88:2b:83:cf:be:9c:e9:2a:44:34:44:7a:10:ec:cb:37:
89:68:f9:a4:b0:26:d8:99:73:4d:c8:6a:ac:c1:b7:e9:00:56:
28:ca:9e:6b:50:d6:84:58:d4:50:8f:a3:b7:74:74:2a:b1:9c:
82:dd:9f:f0:75:ef:a3:81:ce:75:eb:44:b0:f5:55:ea:c2:28:
a0:57:bf:46:d0:f9:b4:1b:94:f9:8a:9d:e8:f9:97:42:f8:49:
b6:1d:64:97:a0:f6:29:f7:05:1c:7f:d9:71:7c:fa:3a:36:2d:
31:e7:2b:65:af:ec:75:7a:93:e7:2e:d9:c6:a8:08:4d:c8:27:
34:a3:92:ce:02:67:a2:19:e3:1b:f0:fd:c5:76:75:ef:ad:e0:
44:20:1a:ef:20:a2:c1:ec:0b:ef:86:62:02:7c:29:16:1c:8e:
eb:ba:78:4b:5f:0c:7e:be:51:21:35:80:5a:e7:39:9c:6d:c6:
a9:f7:52:b5:e4:b3:9e:46:f6:a8:84:30:f1:59:9a:97:73:34:
51:f4:b0:58:af:67:93:cc:f4:ea:61:ee:a0:10:e4:10:db:76:
2e:86:a5:06:1f:9c:7f:2f:9d:7d:6c:64:95:f0:3c:4d:3a:0c:
be:b8:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:49:46 2026 by rpki-client