
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json)
Hash identifier: D++0w1nOyJEqxNWDErNS5wB96tAHiJlMLLyC7K0OuPo=
Subject key identifier: 47:91:F9:0F:34:1A:2B:A5:F6:C2:71:8D:6A:B1:13:17:06:3E:1A:EF
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
Manifest number: 0710
Signing time: Thu 12 Mar 2026 21:31:27 +0000
Manifest this update: Thu 12 Mar 2026 21:31:26 +0000
Manifest next update: Thu 19 Mar 2026 21:31:26 +0000
Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: H0e6gtNMJG2beUu+whlEYWRfaxjj4ojgEvldj+LH2H8=)
2: 3366E7583CAC11F0997EAC45C4F9AE02.roa (hash: z3vfFzyCiPp7COCzQy7KY/5fnPoAbILohbFaBxoPiG0=)
3: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: b91CN8KbCA7CsKadVYDYS+4haRrVejoxjdnfqbIrH3A=)
4: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: p8nOzs2MGPpJBZ2dYf3NfouwimR2DwXOeH0VUZbqjmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 21:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Validity
Not Before: Mar 12 21:31:26 2026 GMT
Not After : Mar 19 21:31:26 2026 GMT
Subject: CN=69b330af-a9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:29:08:9b:34:91:6a:64:48:f6:21:d4:dc:
f5:f2:2f:a5:60:29:0d:5d:fe:24:5d:04:ab:62:5e:
7b:cf:75:d8:24:5e:d5:81:c6:b7:2b:3b:24:a0:86:
4a:14:b3:13:6f:da:86:dc:67:e2:f6:04:ad:53:b9:
d0:ef:5a:20:95:f1:28:d1:55:51:cd:04:38:38:9f:
72:a1:4c:3a:0b:c5:d9:71:50:6a:45:8a:5b:e6:4b:
ad:aa:ac:a9:49:54:8b:d6:7a:3f:92:2e:a8:7f:74:
92:10:33:98:bc:8e:bc:e5:e6:b3:47:03:67:a5:2e:
9e:c0:e8:df:73:d0:fa:f3:9b:ea:f5:44:4f:a2:33:
15:1e:db:ff:66:40:d3:64:4b:31:dc:90:31:8b:c2:
e5:32:da:27:ae:35:a4:6e:92:ee:9d:f0:46:3d:3a:
d2:1e:52:1b:b0:eb:ca:32:f7:c5:ec:a0:aa:89:cd:
52:0d:f6:94:2e:e5:79:56:74:3b:74:fb:61:6a:07:
ff:a5:ae:93:19:69:1d:53:53:0f:4f:a7:de:46:d4:
fb:8c:00:4e:a5:1a:36:56:60:c6:b4:25:bb:11:55:
9f:70:d9:a7:ce:43:22:4b:10:47:20:02:24:92:83:
72:bc:50:2e:16:70:74:ac:16:10:86:c1:a6:71:40:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:F9:0F:34:1A:2B:A5:F6:C2:71:8D:6A:B1:13:17:06:3E:1A:EF
X509v3 Authority Key Identifier:
keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:6b:3c:16:03:8c:f0:aa:fb:0a:a8:24:54:a1:85:7e:d9:d4:
49:93:da:82:12:2b:ec:86:5f:46:34:27:f2:f8:fb:ca:31:b6:
3c:4f:5f:f7:96:f3:70:af:f7:70:23:da:fa:bc:7c:84:22:99:
ba:45:9c:4a:ef:37:f3:5a:72:d1:56:80:66:9f:4a:9f:8d:b1:
ba:a0:4f:51:be:fe:53:10:e2:00:b4:b5:fd:ad:e7:2a:a5:0d:
a8:09:98:d6:9b:2b:4d:fd:b8:26:2f:d0:28:b2:e7:35:a1:2a:
77:4b:99:76:ba:c4:78:57:8e:b2:9d:3e:e9:36:5d:3c:27:9b:
70:fb:b8:4b:70:65:8e:f9:af:be:79:14:9f:a2:3c:d2:e0:49:
7c:05:03:69:62:16:fe:50:d7:8f:e9:d1:a9:22:b1:51:ca:ed:
de:66:e7:1d:59:39:43:d3:18:ca:a8:63:f1:4b:f1:82:fe:ab:
19:2e:55:cb:2a:6e:aa:8b:0b:e4:66:a2:e9:11:d9:7b:6e:fe:
e2:79:12:9d:4e:df:4a:2e:ac:12:65:e3:5c:55:54:82:08:44:
9f:78:89:d1:54:fc:22:c5:f7:74:e4:46:2d:3c:1a:29:7c:69:
4c:9b:6f:c8:3d:f5:2e:a0:43:9b:fe:f9:95:a9:8c:c5:78:73:
78:05:e1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:12:57 2026 by rpki-client