
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: 6ZVarI03lfkOO8i7LyovLqNhNdElczuGPtmCQKqA6E0=
Subject key identifier: F7:78:CA:A5:FD:1E:5E:2B:90:9B:95:BC:AB:0D:40:52:40:5B:DF:FA
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 02C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 02B4
Signing time: Tue 28 Jul 2026 16:07:43 +0000
Manifest this update: Tue 28 Jul 2026 16:07:43 +0000
Manifest next update: Tue 04 Aug 2026 16:07:43 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: /dWZvHY/HPDq6qFrHf+7tgLvRAQHcTs1N+SP0VYvbd0=)
2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Jul 28 16:07:43 2026 GMT
Not After : Aug 4 16:07:43 2026 GMT
Subject: CN=6a68d3cf-3ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:36:61:fb:07:6b:7a:bb:93:ac:86:1d:07:ad:
c4:ea:22:0a:e5:3a:d1:3c:45:cc:d3:1e:07:f6:28:
88:91:a2:8d:1b:74:f6:dc:ba:8d:be:23:78:99:b0:
81:24:d1:ba:c5:b6:52:f7:b4:db:b4:7f:15:bd:34:
69:5e:2f:9a:9a:c4:e7:24:7a:e4:cd:b9:71:06:f1:
c2:ae:dc:a0:ef:3f:16:a5:29:8a:9e:06:71:77:58:
05:f6:df:c7:80:ea:91:e9:8f:62:47:40:0d:59:31:
c3:50:9b:10:51:09:be:1e:60:33:15:61:2b:c5:67:
32:25:48:cf:b2:a8:65:08:d6:be:25:01:98:07:07:
34:2d:44:aa:42:d7:87:a0:b3:85:bf:1a:41:6f:49:
31:ea:1a:95:c0:d9:ac:3e:1c:de:19:96:18:19:8f:
da:8e:b3:4a:74:69:bf:53:52:fa:6e:a4:ae:ed:1a:
af:f7:a8:7d:36:26:6b:ed:55:74:35:aa:ef:79:04:
a9:e7:5d:9d:11:fb:a6:a8:5c:71:cd:aa:a8:83:56:
97:32:8a:35:5d:c5:57:41:a6:bb:2f:fd:08:26:e8:
9a:d4:a4:1b:19:53:e4:87:26:41:d2:fa:bb:e4:98:
46:79:94:33:68:32:89:f1:00:6f:53:4f:68:cd:b2:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:CA:A5:FD:1E:5E:2B:90:9B:95:BC:AB:0D:40:52:40:5B:DF:FA
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:58:7d:f9:94:f8:f7:1f:ec:c9:42:6a:dd:fa:68:2c:33:9e:
ec:3a:83:b1:09:05:d0:47:d9:8b:b0:fc:45:68:f3:36:55:35:
e1:73:46:d1:3e:0e:f8:2d:e6:39:04:bb:22:9a:96:bb:16:db:
af:21:59:fe:dc:5f:f2:a8:ac:74:96:31:84:03:95:72:6a:cf:
2a:24:55:a0:dd:43:2a:f4:13:9a:ef:d6:cb:73:34:1c:f7:1d:
d2:4d:ca:a8:8a:36:3a:a5:61:8c:64:c3:8a:6f:d7:93:d0:73:
ac:0b:4d:96:97:9e:04:9d:7e:dd:aa:01:91:3b:39:04:a8:b2:
88:67:ce:8f:9c:bc:c1:45:c8:dc:aa:bf:66:5f:c4:03:66:51:
dc:c7:14:36:16:62:33:18:f2:1c:7a:dc:cf:b3:ea:a3:d6:de:
b3:34:af:80:09:52:8f:1a:61:41:31:1a:7d:30:2d:9a:cb:5b:
de:c0:c4:58:2f:18:fe:e6:67:77:69:79:3f:f1:b4:e1:88:7a:
53:75:98:93:e4:5e:73:c0:3d:a8:74:73:27:2b:40:d9:e6:3f:
4d:5d:c3:52:2a:31:81:50:69:40:d4:46:8f:e5:d8:0f:10:24:
1c:f3:2e:39:d4:f4:35:9e:e2:92:58:b4:ab:90:0b:f9:f8:4c:
54:24:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:22:38 2026 by rpki-client