
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
File: MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json)
Hash identifier: 3azu+5OSQphrJK7bG2akUfDeqgXhqP2mPInFCNikyjc=
Subject key identifier: B6:7C:E2:6B:42:6C:8C:FD:CB:60:93:B9:D7:E8:34:81:87:BD:7C:60
Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
Certificate issuer: /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Certificate serial: 047E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
Manifest number: 0478
Signing time: Tue 21 Jul 2026 00:55:22 +0000
Manifest this update: Tue 21 Jul 2026 00:55:22 +0000
Manifest next update: Tue 28 Jul 2026 00:55:22 +0000
Files and hashes: 1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: 0NcOBgvTu+r2Cus1kp5RtDOxCxr+UEKJ4WcRR/adUNQ=)
2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: 5Q4dF39YL3ba0doyntVa5qTZASTIF2XYdM/3NtoBP1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Validity
Not Before: Jul 21 00:55:22 2026 GMT
Not After : Jul 28 00:55:22 2026 GMT
Subject: CN=6a5ec37a-acc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:5c:e9:7b:03:3e:5a:83:3d:0e:c6:1d:bb:
03:04:cd:f5:c8:e2:5d:30:2b:f6:d6:a8:d8:95:48:
b1:61:21:c8:50:c1:f2:8b:88:da:fd:e9:49:25:53:
ef:63:5d:e7:25:de:30:db:89:b7:11:b7:ae:bd:32:
ac:5c:f7:83:15:19:8e:0e:87:b5:74:c8:d6:21:7a:
cc:c3:ed:e3:98:2a:66:6f:e4:53:c7:f0:11:99:a9:
1c:79:58:59:2d:fd:98:ef:ac:19:f5:9d:cd:57:e8:
c6:28:36:8c:47:93:ed:90:2f:9f:b1:6a:0a:b2:f1:
4f:18:f1:79:bc:4a:7f:46:14:09:66:a2:51:13:e1:
36:c3:9d:e4:3d:38:bc:82:34:83:63:b6:a5:7e:a2:
d0:6b:78:10:5b:ad:ff:c6:01:07:d7:a5:b5:2e:d0:
f0:2e:b7:be:bf:70:c1:64:f0:7a:ad:e6:e0:8a:49:
4a:44:a5:cd:e8:8c:2c:78:42:dc:78:d2:87:84:f8:
11:b4:5c:2b:38:31:db:0d:66:e7:52:a5:67:aa:58:
58:c8:c9:d2:66:1f:36:b9:25:f0:11:f3:f6:2f:e6:
8e:6b:d9:63:03:bf:e4:44:0f:23:32:28:e5:27:77:
11:f4:df:4b:66:77:58:54:fe:0e:ec:ac:4c:c6:33:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:E2:6B:42:6C:8C:FD:CB:60:93:B9:D7:E8:34:81:87:BD:7C:60
X509v3 Authority Key Identifier:
keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:08:31:45:19:c6:44:f1:f7:a8:90:43:19:33:57:51:f6:c0:
ee:ed:1c:2d:96:16:ae:02:1e:4d:9e:ae:d1:e1:1a:0c:87:67:
0f:71:e6:3b:18:82:c7:3d:f8:05:59:dd:34:14:50:99:69:40:
00:75:66:77:93:69:2a:d4:af:78:d7:fc:31:89:8f:a2:76:ef:
88:b0:87:1d:00:ca:c0:1a:d7:89:b1:15:62:d4:dc:94:21:3e:
7b:84:fc:b3:3c:65:23:34:c5:aa:43:77:b2:93:ee:0e:e0:ed:
12:a4:e6:fa:67:9b:c4:0f:35:09:a5:5a:a9:7c:9d:2b:b3:00:
ef:92:b6:6b:93:12:06:3b:db:c9:23:0d:4a:7a:cd:86:d6:7a:
43:c8:e6:91:0f:ca:3d:47:31:2e:c8:6b:d0:64:d4:68:7f:6e:
2c:e7:b4:11:4c:f6:60:34:79:33:d4:31:ed:bc:6a:92:68:3d:
51:f3:81:ac:80:78:cd:26:96:e4:4b:0a:b0:2c:2f:ac:48:16:
68:9c:34:62:6c:4a:1f:3a:b4:76:78:34:bb:2d:7f:44:dd:74:
db:9c:36:5f:c9:7a:ce:13:7e:89:8d:17:84:ef:7d:65:09:33:
fd:70:00:16:c5:75:5c:00:55:a9:30:38:e6:1a:f5:9d:30:ef:
13:0a:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:16:48 2026 by rpki-client