
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: 9HXwaXpVyyniwSC7aPVCleVBc+v2aOXvFdc2UOmtRWQ=
Subject key identifier: 6D:71:68:CD:5A:8A:3A:83:77:F9:93:39:D6:C5:D7:A7:78:7E:42:E6
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 02F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 02E7
Signing time: Wed 04 Nov 2026 16:04:34 +0000
Manifest this update: Wed 04 Nov 2026 16:04:33 +0000
Manifest next update: Wed 11 Nov 2026 16:04:33 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: gFZNLOyfAJAGQ42WCYOuztmbo40uwAVPUV8CJtA2/P8=)
2: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
3: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 16:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Nov 4 16:04:33 2026 GMT
Not After : Nov 11 16:04:33 2026 GMT
Subject: CN=6aeb5792-57c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:b1:48:37:ad:2f:6e:56:02:23:e1:bf:30:
fa:d6:ec:32:20:9d:c0:fc:4b:a4:8e:56:ca:67:4a:
a1:1f:51:31:3f:85:83:27:47:a6:d7:52:21:69:b9:
49:6e:fd:ca:33:1d:65:25:dd:76:e1:d5:8c:a3:f0:
f7:5b:d7:a3:51:c6:d1:f8:11:ad:62:33:44:dd:df:
1b:16:c7:63:1b:a6:76:49:c2:e3:7a:a9:3f:23:83:
f3:58:af:f5:fc:8d:8b:78:22:e8:97:7f:5d:a1:9e:
5d:d7:ad:88:ce:45:fb:7e:3c:f2:08:1e:46:f6:04:
ab:86:e6:a9:22:a8:73:34:a7:5f:48:c8:da:2d:69:
b5:e0:1e:b2:37:af:b0:31:50:ea:5a:c7:33:27:ec:
67:6f:8b:c0:22:ca:3d:c2:c9:f0:4e:ae:b9:2a:1b:
f2:60:19:dd:a5:c7:74:cb:66:02:b2:76:99:89:3a:
e7:77:1e:3f:8a:81:02:c3:d9:29:76:53:1f:f7:b8:
9b:4b:da:a4:b1:aa:5b:12:6a:fb:6f:88:59:2d:e8:
94:0e:36:2f:15:6b:a1:41:c7:a1:5b:be:66:a6:3d:
b8:8c:b8:5a:b8:4b:b0:0f:b9:8e:bf:f5:7d:e9:33:
9f:0d:8c:5f:8f:e7:a1:2f:85:e5:29:84:f1:b5:13:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:68:CD:5A:8A:3A:83:77:F9:93:39:D6:C5:D7:A7:78:7E:42:E6
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4c:d2:bf:c1:26:29:b5:6d:08:16:8b:f3:51:f4:b3:60:d0:
09:e5:fc:e0:16:bc:c2:4e:f6:11:fd:02:5f:bb:b2:c3:f9:04:
82:ff:f8:1b:36:ee:9a:99:26:03:3d:eb:bf:a2:9c:07:76:a6:
b1:0a:9d:3a:ad:f7:63:63:58:cc:8a:09:3a:9d:1f:9f:6c:cc:
cd:17:e2:c0:ab:71:d5:85:9f:f2:c5:47:4f:54:f2:00:38:47:
90:b2:ac:19:7e:a9:12:7d:fc:2c:29:b8:4f:77:d3:9a:57:c5:
66:14:69:3d:9b:14:70:ca:c1:be:84:05:6d:a2:02:d6:51:0d:
a1:09:c2:5d:e1:21:c9:7c:a7:4d:6b:1d:d6:b6:a3:01:91:cf:
d4:12:d4:0e:a7:52:9b:6a:82:07:40:39:36:83:7b:87:e6:37:
7e:81:b4:bb:e9:f0:63:10:65:b0:54:f9:14:c7:bc:7d:2e:ab:
06:78:54:e2:25:a4:ff:46:47:26:02:ce:8e:e7:83:99:fb:20:
94:50:50:91:1e:b8:fa:e4:b7:84:3d:b1:76:20:80:60:b8:b0:
cd:a9:3b:d3:79:25:91:0f:cf:07:20:1b:6f:1d:4a:86:13:68:
94:e3:91:8a:e1:d1:cd:bd:00:18:15:48:48:4a:b6:af:ee:c2:
f5:d3:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:10:24 2026 by rpki-client