
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier: MEkAONQqDQsYULcyC3o51dQwD6Dj/ST9qLOHvzmzfgs=
Subject key identifier: 81:F9:71:93:9B:BB:08:72:9D:A6:29:FB:E6:74:4C:69:18:A6:0C:CA
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number: 0AF0
Signing time: Sun 01 Mar 2026 22:29:40 +0000
Manifest this update: Sun 01 Mar 2026 22:29:39 +0000
Manifest next update: Sun 08 Mar 2026 22:29:39 +0000
Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: sU3mfX2XcPEQ6CyXdL8SkSNESfS15p+eCu0VGdS6S5Y=)
2: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: j6vtGdsn58n5PFNIgokVa7egz01S/Wt3cjqK2/oPYCU=)
3: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: 02OkEZdFmEpHGfisQA3gcJEbG2uFhlx+shvED8B5SFQ=)
4: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: iwYxtbph75PfLUWyrRQ1ZKsYXZDAuMWGHem1wlC1TsY=)
5: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: kLpSmWdSGg8Mg4g60+DwwIcGfuFqFbChFN5SNdpQQCc=)
6: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: 30Ay1Zbq76x+Zxtcn+jqASaeqsesqa1rZ5wxXWBIbpA=)
7: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: fvHEuQxM7QtSBpohLsHjlXFRVApMH4LnofLEq5KCpls=)
8: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: pZZtHGFQRbt0wHLJTk6iKV6lnlHB4kiYZ8oDEDgL+Hw=)
9: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: i+DeWSxP+SUrPsRvRk++UVMLgUpYl/0wKKoB8sZiS1A=)
10: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Ks6wPXQrbbeCTTlosIDswm4J7H1L/F650F9YqKuuo/A=)
11: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 9TteqD6INKZgRh3A2cwFyNm4pTulPoLeS0psHfIr0EU=)
12: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: yp48JDkpR5TQy5O1NVCB2GBTzUPaSfD8syejqe9qTmg=)
13: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: MJ4t9mNOzArFswvJlj8ONWt12fku2oXbHOQN2lvyrzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 1 22:29:39 2026 GMT
Not After : Mar 8 22:29:39 2026 GMT
Subject: CN=69a4bdd4-bfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:45:a4:f4:ed:fb:36:75:60:bf:a4:8f:2c:
02:34:9a:25:49:59:83:d0:b2:78:99:f3:ea:de:9a:
14:62:96:b4:9e:12:61:26:0a:5a:4d:e3:ce:9a:21:
6f:1e:34:83:ed:69:1b:8a:7b:42:59:8a:89:f8:f0:
4b:3b:27:aa:00:24:a9:7e:71:4d:cf:34:d6:80:8e:
70:c1:ad:6b:89:ca:b9:e9:5d:fe:7f:a3:bd:7b:27:
27:d2:18:ce:48:e5:b3:9d:c3:52:99:7f:28:96:0f:
12:a8:70:b9:34:e8:90:00:44:c2:eb:09:f3:ac:7f:
33:93:83:94:8a:2d:ac:9e:2c:b9:e2:8c:5d:35:80:
cd:38:f7:e0:30:d2:70:cb:19:9c:df:b0:b3:ed:0e:
e7:3f:75:6d:c0:7e:64:84:d2:01:50:21:b3:20:18:
0f:5c:a5:4e:58:2a:ac:10:37:25:4b:3d:6f:17:47:
c1:4b:20:ce:7f:f5:33:54:1c:e7:1f:e9:34:2a:20:
59:63:2f:4b:59:d9:b5:a4:64:4c:18:91:59:14:b2:
e5:85:b2:f9:69:4d:83:97:4a:df:5f:4a:a4:eb:ba:
1a:ca:bd:13:ff:77:20:5a:65:b3:d5:22:ca:5f:ca:
97:a8:a0:90:33:76:45:07:22:df:03:7c:d7:d4:ca:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:71:93:9B:BB:08:72:9D:A6:29:FB:E6:74:4C:69:18:A6:0C:CA
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:bf:a5:92:bb:8e:7c:df:32:32:0d:9e:7d:e1:c5:4e:d2:89:
7d:1e:33:a7:45:6c:1e:73:a5:f8:7f:10:66:ad:34:14:5c:0b:
5e:45:a5:40:19:cd:59:8a:62:bd:b7:3d:fd:f1:1e:b5:f6:96:
18:38:1f:49:9d:08:7a:59:d6:c3:ab:38:b5:3a:b8:9c:9a:4e:
a3:77:f4:45:58:fe:1d:c0:21:b6:90:34:0d:a0:ac:e4:99:9f:
7c:8c:e0:1e:df:71:34:f6:57:1c:c8:3c:0b:f4:0c:88:83:53:
e7:24:2e:a9:fe:d5:64:04:fd:a7:ad:f2:c2:11:03:63:1f:03:
e0:e3:ef:75:4a:ef:ac:56:3d:c3:c7:03:ec:13:00:94:23:80:
cc:c2:81:98:44:8d:f9:0e:30:dd:7e:9a:36:d2:7c:5f:25:91:
ec:f7:5c:51:1e:28:8b:35:6e:c5:3c:0a:a1:12:a0:cc:19:96:
a8:42:3d:68:d3:37:e0:f3:7f:79:36:9c:71:8a:22:35:62:80:
04:86:01:7d:bd:ed:7a:0e:f2:6a:01:89:a9:91:ba:ff:c6:5b:
b1:48:4e:77:d5:17:09:4f:08:77:25:8b:f7:db:bd:7b:77:de:
f8:a9:57:9a:6f:e0:49:25:1c:1f:de:c3:76:c1:9a:e6:fe:a0:
78:13:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:26 2026 by rpki-client