
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
File: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft (raw, json)
Hash identifier: RiWJU2xBsOGS01lfQh4LpM8hyJ7TccvC7GWAQXrENRs=
Subject key identifier: BC:25:67:AB:D3:FC:22:15:83:16:B4:EC:09:63:CE:B4:D2:DB:FD:E9
Authority key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
Certificate issuer: /CN=A91B0B89/serialNumber=986120E19431E2C3FE996503BE70072213549790
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
Manifest number: 15
Signing time: Sat 13 Jun 2026 09:05:41 +0000
Manifest this update: Sat 13 Jun 2026 09:05:40 +0000
Manifest next update: Sat 20 Jun 2026 09:05:40 +0000
Files and hashes: 1: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl (hash: 9fkFwAHRW/MXE+JuCmkRM9TaJk4IVQ7U0awho8j1nIw=)
2: 45776578492911F19166D80CA6833773.roa (hash: CE8GzORY1KhTBpgJKwSkDL4jBuBSGsmu4XVI6wUnlcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl
rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790
Validity
Not Before: Jun 13 09:05:40 2026 GMT
Not After : Jun 20 09:05:40 2026 GMT
Subject: CN=6a2d1d65-7f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:69:87:b3:46:5e:62:4b:76:b0:9f:d0:85:
54:e3:c1:a0:ca:e6:57:97:38:63:21:59:8a:92:b8:
7b:3e:d7:28:41:0f:ac:b4:09:92:3c:fb:bb:41:2c:
17:c8:9c:5e:ad:6c:6b:6b:a7:95:b3:22:e7:cd:c3:
5c:89:b9:10:78:01:97:ff:54:1c:57:a7:11:20:a4:
b3:d6:fa:d2:3c:d0:0d:03:3c:c6:7f:6e:65:ec:d6:
c0:ce:cb:85:57:3c:f2:a9:6b:f5:a9:a3:24:d9:6f:
3a:30:29:ef:2f:c5:71:35:9c:d3:59:c0:2c:60:69:
e5:48:85:82:e7:79:17:81:f1:c8:70:4d:76:75:10:
65:cf:f3:d7:4e:23:5b:ad:43:d8:65:4d:24:00:9c:
de:67:a7:4a:a2:7b:3e:87:4d:ec:d1:22:47:94:31:
14:4b:e2:9a:91:4a:55:a6:6d:bb:d6:b5:8b:19:a3:
3d:15:00:50:8a:a9:2b:d1:7b:af:1a:1c:1b:b8:b8:
cd:ef:34:35:8e:0d:41:44:19:62:89:ba:bf:15:54:
09:4c:32:8a:5e:ca:ae:12:28:03:51:0f:04:c9:11:
9e:3b:5a:28:20:df:09:7a:4c:85:9d:e5:b7:02:82:
92:78:c8:a4:63:df:5e:f8:5e:95:83:5b:e2:5d:73:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:67:AB:D3:FC:22:15:83:16:B4:EC:09:63:CE:B4:D2:DB:FD:E9
X509v3 Authority Key Identifier:
keyid:98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:ae:2c:36:5a:25:b5:45:42:9f:09:90:b2:5c:7b:db:b7:89:
08:42:d5:e9:bb:10:b6:a3:99:c9:0b:23:2e:dd:97:ea:26:72:
b6:00:fd:e8:c8:9d:7e:8e:75:55:5e:cb:c1:7a:ab:b4:96:a9:
46:27:d4:07:8b:57:44:cb:3c:23:10:c9:21:b5:71:74:1a:b2:
af:d8:f2:57:41:2a:59:ba:fc:6c:c3:f9:b7:34:19:11:a8:d9:
be:3a:93:53:79:c4:e9:37:40:27:e6:f2:80:db:b8:2f:12:21:
11:dc:c1:ec:b3:08:72:c8:48:f5:ec:6a:b1:65:b7:73:3f:16:
35:5b:bd:a5:d3:64:a8:56:92:6e:c2:ac:41:46:3c:ec:94:9d:
b8:8d:c2:7b:fa:3b:dd:47:5e:a7:13:e1:bf:3e:0f:3b:9c:e4:
8b:96:33:b7:55:1a:c2:f3:c0:82:de:32:44:3d:75:b5:6c:d9:
90:ad:4b:0b:bc:ea:86:0b:b0:a1:65:5a:d1:24:e6:b5:e1:57:
a2:f5:63:a5:e2:11:bb:d7:04:f4:fa:c7:6a:d3:07:3a:9d:ff:
90:6d:bc:21:97:8b:9b:d2:a0:68:4f:f0:87:62:56:0c:f8:27:
e1:fd:d4:3b:07:02:67:82:91:c2:ff:d8:f1:ed:f9:3e:5d:2a:
b5:ea:19:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:34 2026 by rpki-client