
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
File: MJoqNkM0qd26Sm1EBB15pdMrr6s.mft (raw, json)
Hash identifier: LexL5LDoMs7oC2gzdoktKiwDdprEzN4HYE0d6LQAxQM=
Subject key identifier: 72:65:B5:78:54:87:7C:CD:F7:74:14:FD:14:EB:43:0D:8F:8A:96:71
Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
Certificate issuer: /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Certificate serial: 0352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
Manifest number: 034B
Signing time: Mon 02 Mar 2026 00:44:19 +0000
Manifest this update: Mon 02 Mar 2026 00:44:18 +0000
Manifest next update: Mon 09 Mar 2026 00:44:18 +0000
Files and hashes: 1: MJoqNkM0qd26Sm1EBB15pdMrr6s.crl (hash: NG/09KUEMafJbfm8l2ZVdB/wS75R7346oWytSlckryw=)
2: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (hash: +qcJCRAGVhzKkI0FF2xeqLTe7clyP76xtKn0mfX/LKw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl
rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Validity
Not Before: Mar 2 00:44:18 2026 GMT
Not After : Mar 9 00:44:18 2026 GMT
Subject: CN=69a4dd63-6dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:ef:39:68:17:b3:eb:8b:28:88:0c:78:24:
55:84:9c:7e:cb:94:1f:b0:76:9e:2e:2d:97:b7:b1:
df:79:85:f5:89:96:28:48:93:91:76:74:da:2c:85:
bf:95:a7:b0:b1:df:63:01:ba:15:e7:6c:97:31:71:
1a:63:ee:fa:a7:a4:96:b2:9e:62:4f:f7:2e:b1:2f:
9a:52:54:a6:07:90:66:bb:3c:0b:c4:a7:23:14:57:
3d:4c:17:90:f3:dd:99:96:3f:9a:6e:fb:a3:24:c7:
9c:04:16:ce:ab:76:b1:42:d1:ef:14:a9:5e:46:24:
b2:5c:8e:8b:74:5c:89:df:8b:ae:35:fa:0c:94:38:
56:79:6b:40:77:d9:c3:7b:f3:18:94:1f:32:03:24:
bb:13:57:74:a8:01:40:0a:b3:c9:ca:57:bd:16:70:
9f:6f:f2:a0:81:8b:1c:63:25:90:c1:d3:83:6c:b2:
16:98:90:87:2c:2a:08:d2:59:ba:6d:90:2e:c5:db:
ca:b4:e8:39:b1:cb:c1:d3:6c:76:fd:0d:f7:84:65:
87:ea:0e:3e:0c:ba:28:0d:bf:80:08:31:42:2d:07:
c1:e1:a1:54:4b:b2:04:30:ea:7d:8e:b0:de:30:68:
81:33:12:36:a7:f5:82:dd:0b:42:59:c0:0a:5f:3b:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:B5:78:54:87:7C:CD:F7:74:14:FD:14:EB:43:0D:8F:8A:96:71
X509v3 Authority Key Identifier:
keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:90:63:14:2e:26:d0:0a:b3:fb:c3:ee:83:de:8d:7a:c1:0b:
45:b5:34:cc:a2:b7:31:61:96:69:2d:45:f2:c4:29:42:a6:3c:
f6:10:53:1e:a2:50:b9:d7:68:cd:4a:be:64:ba:e7:39:ef:26:
00:ed:b3:1c:30:bc:8f:99:29:8d:d6:9a:ca:4d:31:63:55:d3:
4c:2d:c5:1e:19:b3:7c:20:a4:28:76:5c:c2:6f:66:7c:2c:a3:
41:90:04:82:35:a4:78:aa:8d:33:4e:f1:27:a5:af:f3:af:65:
7b:00:55:d1:62:89:12:c4:06:50:6f:46:17:14:fd:be:e1:6a:
f3:7e:7d:51:5d:e0:52:cd:17:5c:00:8b:b0:65:26:e1:21:fa:
36:be:3a:0d:8e:44:f7:24:da:f2:a5:94:1a:04:fd:48:73:7a:
71:4c:64:e6:77:e9:f3:bc:85:89:9f:47:fa:b1:55:d7:85:2e:
25:6f:5a:87:95:27:c6:a6:03:f6:db:49:08:2e:4e:3c:d9:44:
44:a2:41:f6:1b:6c:ec:e8:9f:a6:8b:67:1b:65:06:1f:9d:03:
f4:50:2c:08:e6:0c:ca:c0:35:72:3d:b3:eb:13:f0:ec:c5:2a:
d8:f6:ac:56:0d:fc:03:7b:c1:0a:80:01:53:63:69:db:5b:b1:
f8:22:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:25 2026 by rpki-client