
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: +rHpMMST8lEQdlf27CByJvhtngxdC2cFPpVbsGEKF44=
Subject key identifier: 3D:1A:99:6B:50:E2:50:00:4A:F9:F2:5B:E3:91:49:BC:74:3A:D8:46
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 0280
Signing time: Thu 16 Apr 2026 16:00:29 +0000
Manifest this update: Thu 16 Apr 2026 16:00:28 +0000
Manifest next update: Thu 23 Apr 2026 16:00:28 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: zWfLoRVN2RiZZWnL+B+8JiNp57xpBFPzQFjfQkj380o=)
2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Apr 16 16:00:28 2026 GMT
Not After : Apr 23 16:00:28 2026 GMT
Subject: CN=69e1079d-6ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:80:a3:30:b7:58:2a:80:9b:6a:c2:8d:f7:
c4:7b:fa:b8:08:fd:cd:7d:b2:36:eb:65:c0:3b:6b:
e7:83:ca:63:79:db:1a:fa:39:36:97:58:35:7b:21:
63:28:95:6f:a8:85:62:98:7b:6a:f5:9a:ce:06:8f:
79:23:85:77:2e:f7:c1:2c:e2:27:fe:9c:80:94:af:
59:4c:92:fb:6e:d7:ab:33:58:39:6c:02:fb:09:31:
71:ae:ac:fd:a2:b8:56:c2:a7:48:18:6c:d4:a7:60:
6a:5a:3c:89:f8:27:15:78:c5:0a:a6:a8:9c:6e:8e:
fe:5f:2c:c0:06:bb:07:e8:ce:2c:aa:5b:1a:3d:f1:
48:ac:c8:0b:84:e7:0e:58:3b:c0:da:a3:f3:94:b4:
7c:e8:31:c2:b4:1c:be:18:ee:06:4c:30:2d:dd:95:
0b:58:09:21:96:2a:05:95:bb:0b:00:94:94:55:4a:
99:6f:71:4c:fa:d3:b8:e4:3d:dd:c3:ed:35:75:a0:
6f:4b:58:94:53:e5:a8:9e:14:01:1f:31:d8:b3:24:
6b:19:eb:9c:49:da:56:48:91:58:83:d5:71:21:b1:
72:93:cd:54:24:70:6b:76:bd:ff:b0:47:30:02:7a:
85:4f:2d:03:bd:c5:62:f7:e4:ad:ef:3f:f3:45:7b:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:99:6B:50:E2:50:00:4A:F9:F2:5B:E3:91:49:BC:74:3A:D8:46
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:2f:95:c9:1e:34:c1:04:4c:85:1a:ee:39:c5:19:63:e9:e6:
fd:68:fd:d8:96:33:50:57:28:9b:85:74:48:d9:b3:30:46:ce:
af:34:c0:ef:35:48:17:8b:01:a0:d8:e8:62:50:62:c7:0a:27:
e4:ea:f8:34:6f:ba:61:0e:62:5a:2b:31:7b:0d:ed:70:c7:f6:
c6:7b:73:04:4d:32:de:3b:2a:35:cf:dd:7e:af:fa:33:54:35:
f9:5b:71:43:5a:28:4f:9b:c6:33:16:82:d7:a5:fb:66:30:2d:
ba:17:36:54:00:9b:2b:6c:ef:df:97:0e:05:a3:20:8d:2c:37:
3f:62:8b:3c:9a:ba:a5:e6:5b:b4:0a:a4:79:81:0b:da:0f:1e:
35:66:38:b4:43:bb:53:11:34:a7:5d:92:ac:a8:93:37:51:4a:
d9:d3:c1:88:87:04:26:4d:2c:05:64:6e:0c:69:3a:2d:bd:2e:
28:d7:07:16:ac:e8:36:fc:ef:77:7a:ed:49:5d:5a:97:91:37:
e9:9c:e7:08:25:15:88:3d:c3:c2:a9:04:4d:fb:69:93:fc:78:
f5:8e:ae:73:b2:ed:1a:fe:b2:b8:37:9c:ab:45:1a:f3:29:bf:
d1:88:8a:ce:83:a3:26:82:b5:ec:3e:88:1e:b9:aa:39:ac:61:
53:cb:06:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:56 2026 by rpki-client