
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json)
Hash identifier: 3FDNzV6AoGGj8qhe09/C2AWnHYL9qHCnw53bgKKXGLo=
Subject key identifier: 84:E4:07:15:0A:E6:E9:B2:5B:4B:A4:01:87:1D:55:74:7E:E3:DD:91
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
Manifest number: 0142
Signing time: Tue 27 Oct 2026 05:53:27 +0000
Manifest this update: Tue 27 Oct 2026 05:53:27 +0000
Manifest next update: Tue 03 Nov 2026 05:53:27 +0000
Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: t8Af9aJEL4qImefAnkc8EqodN+1dl5sF+OJAvG2jteU=)
2: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 4J8/FZ6Z4aWtn3x7hmcoO5/BToWEDFdORTF4LOMQboM=)
3: F14B18CE64C611F0A7F4DB79C4F9AE02.roa (hash: iEXGIsNYH311PJIgaH9OeoRGxcu7W7Wehcq1wxoUdGY=)
4: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: 4QP/rAbhyfXHecTQkzEPbUUKcaxecI63gYXrQwwXTlY=)
5: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: 0YPbPYRmDBxvxeUZ+nCsDlhMinpUmdIW4GNWTG2+RDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 05:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Validity
Not Before: Oct 27 05:53:27 2026 GMT
Not After : Nov 3 05:53:27 2026 GMT
Subject: CN=6ae03c57-1cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:4a:18:bd:58:21:61:3d:44:2b:86:88:73:
40:7a:3c:1a:08:42:03:ec:dc:fb:fc:dd:cd:d6:fe:
2e:63:a8:7c:79:1a:d1:c2:c9:78:74:19:63:5e:b5:
32:2e:e1:a9:62:a9:f0:39:66:35:5c:a5:76:9b:52:
73:f9:bc:03:1a:c7:7b:fc:21:54:9c:75:43:fd:b7:
d2:7c:2a:f4:46:11:ca:d4:11:b1:a6:05:c9:1d:2b:
3c:40:d0:0f:88:79:4c:47:3d:16:30:34:3f:70:df:
c2:64:85:0f:f2:c8:0d:b0:74:53:f5:6d:ed:ab:e8:
75:41:36:72:11:aa:48:fe:54:b4:15:2a:2b:18:ac:
cf:e0:ef:fc:c7:05:29:06:43:ac:0c:65:76:4c:31:
15:97:fc:2e:eb:b3:6b:c9:41:13:c1:2e:30:bc:5f:
76:e4:7b:d0:ab:49:95:91:2c:68:de:46:cb:b9:2a:
38:ff:63:8e:61:69:a2:26:68:83:6e:66:fa:2e:df:
7c:f5:ab:44:b2:81:6b:50:87:43:82:b0:36:19:4d:
77:93:ac:54:84:67:35:79:8f:a6:bb:cc:cf:75:f3:
58:fc:6d:71:a6:96:78:d7:04:f3:93:16:71:e6:de:
54:c8:26:ae:0a:07:77:ac:db:11:cf:e0:16:f1:99:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:07:15:0A:E6:E9:B2:5B:4B:A4:01:87:1D:55:74:7E:E3:DD:91
X509v3 Authority Key Identifier:
keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fe:08:34:f5:78:15:8f:a4:c7:9f:71:dd:c5:f2:b9:3a:a1:
e5:eb:a6:c2:64:2b:b6:d5:4c:f8:e3:e0:30:4f:43:5c:dd:6b:
dd:8c:81:48:57:f5:c9:05:a4:ca:cf:28:12:4f:72:d7:b3:a7:
57:a9:10:eb:70:0d:90:d2:e5:28:c7:82:65:3d:ed:8f:aa:9c:
1a:5d:f2:59:0a:fd:49:3c:27:37:cd:f4:dc:50:8c:51:d8:71:
81:fb:e2:dc:ed:ad:cb:8a:9e:d2:ad:7f:09:29:6e:3e:95:8f:
43:a6:d6:7c:26:99:1b:fe:af:28:6a:2e:5e:06:0c:8c:4a:e2:
58:35:5d:2f:ac:4f:7e:d9:ad:50:12:01:b4:fd:42:e0:72:38:
98:8d:3f:3d:c8:3e:e6:71:3f:5a:df:28:e1:52:c8:f4:5e:6e:
b1:3b:8b:20:3c:f8:24:17:d8:86:52:db:55:7d:cd:bc:c0:d8:
6b:9a:10:8d:06:7e:a8:4f:3f:06:73:61:9a:21:b0:c5:f5:16:
8d:97:ee:8f:7c:07:26:a7:e2:c8:12:4b:2d:26:a6:bd:c5:f9:
b3:08:e5:de:35:4f:5a:d7:48:ea:13:8d:74:95:30:d5:b2:99:
0f:09:56:b0:e8:20:a6:a3:4f:1c:5b:79:49:b9:a2:98:41:e4:
22:82:2e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:24:27 2026 by rpki-client