
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: 33sBW2pqyyxDKtHAooXM1pAz2CIxbBBs/RQli0QMRu0=
Subject key identifier: B0:FD:FF:41:C6:A2:58:AF:81:B8:08:B1:E6:B4:EB:40:13:77:EB:B4
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 02A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 029D
Signing time: Fri 12 Jun 2026 16:00:47 +0000
Manifest this update: Fri 12 Jun 2026 16:00:46 +0000
Manifest next update: Fri 19 Jun 2026 16:00:46 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: EGTlkGln4CT58RqcQoXPGZGkZFBEPQQbCndyB65cSyk=)
2: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
3: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Jun 12 16:00:46 2026 GMT
Not After : Jun 19 16:00:46 2026 GMT
Subject: CN=6a2c2d2e-88f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:ed:3d:af:55:41:c5:e8:25:aa:31:fc:a4:
34:e4:ee:c9:56:0f:e6:87:29:60:6b:58:39:ce:a0:
01:67:80:50:e6:bc:4e:b4:90:3a:34:0c:1f:8a:c4:
84:8d:70:99:25:8f:19:8e:9e:78:f1:4b:58:5c:12:
8e:78:9c:1a:fb:7b:e1:64:31:ef:d2:c3:7a:10:d0:
4f:81:d8:0a:46:3c:4d:66:38:0d:44:c8:db:ce:9e:
5d:8f:c4:62:03:3c:f7:80:f2:56:eb:32:8b:99:09:
55:f7:94:3f:7c:c6:2e:1b:46:e1:2f:8c:54:95:a6:
70:7d:9c:af:6a:ab:11:d7:fe:17:0b:1b:65:e3:22:
d3:47:85:9a:c5:06:a1:0e:27:55:77:c5:d6:ad:74:
85:a5:8e:63:27:01:78:30:45:9e:21:83:04:03:9c:
32:56:be:de:26:71:5b:73:d1:2b:a9:19:ae:c7:18:
f9:5c:66:e1:fc:ba:0e:77:44:da:ab:67:62:b8:ad:
90:c1:a0:19:1d:3b:79:98:f0:3c:8f:7b:0b:d3:91:
3b:a8:6c:94:71:51:b1:a8:dc:56:68:1c:8a:7e:86:
f6:6d:8c:ef:84:d2:e0:9c:4f:2a:2e:34:3b:70:68:
12:4b:3f:23:60:3d:b6:5e:93:db:90:68:cd:0d:da:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:FF:41:C6:A2:58:AF:81:B8:08:B1:E6:B4:EB:40:13:77:EB:B4
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:ea:5a:39:98:f4:bf:b2:a7:28:46:cc:3c:61:b7:a9:43:47:
66:26:5e:52:48:59:70:55:05:b0:e6:16:3f:38:22:ce:3d:0c:
ac:9f:fb:67:ed:4e:0e:fc:83:d4:47:20:1a:14:2f:8c:6d:75:
a5:d5:ff:19:a0:cc:12:a9:3f:b8:3a:04:f8:d9:81:bf:ae:ce:
0e:70:63:fb:7d:ff:83:e9:f1:43:73:69:66:47:ca:c5:86:bd:
fe:1c:ec:83:ef:fb:95:0e:b8:45:ce:41:ee:33:b0:c3:45:97:
00:a6:4a:93:26:65:91:51:74:05:ed:d2:2d:a4:c5:b7:5c:f2:
0a:03:5b:d4:d1:d1:4b:08:64:b6:50:6a:75:a1:22:73:e6:56:
9b:76:54:49:12:33:c6:7f:81:57:ce:5f:4e:18:12:0e:8a:48:
12:ac:be:69:b3:c9:c9:83:fe:f4:62:e6:21:e2:86:15:5f:af:
dd:1f:76:35:42:99:2e:e0:88:31:45:d2:ec:7a:9d:33:09:61:
bb:73:d6:0a:6d:81:f1:6c:1b:92:ac:af:c0:05:d0:ac:d8:95:
0c:40:21:63:91:52:56:2b:ee:d2:d0:1c:bb:98:09:82:74:87:
bd:30:af:34:d6:c7:5c:33:8c:ea:42:4e:ad:25:d1:4e:9b:a1:
ca:ae:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:45 2026 by rpki-client