
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier: RB6lDvkcfvTboAQ5I8XJaoXDP1yodCtrR53mIi84rBM=
Subject key identifier: 25:85:15:55:42:A1:BE:F7:52:D8:95:DD:80:32:81:67:FD:74:11:19
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number: 0B0B
Signing time: Sat 18 Apr 2026 19:16:10 +0000
Manifest this update: Sat 18 Apr 2026 19:16:10 +0000
Manifest next update: Sat 25 Apr 2026 19:16:10 +0000
Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: CDuPYy8JZuz3C51+EzOCFepi9g1IKFOFOBKpatri4xI=)
2: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
3: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
4: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
5: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
6: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
7: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
8: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
9: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
10: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
11: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
12: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
13: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2901 (0xb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Apr 18 19:16:10 2026 GMT
Not After : Apr 25 19:16:10 2026 GMT
Subject: CN=69e3d87a-e884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:ec:83:a1:2d:7d:07:1c:fb:8c:9c:16:85:
2d:1f:dc:60:8b:7e:49:7d:ae:a9:de:e6:01:e8:04:
91:0d:bf:2f:d7:42:35:38:f0:c5:77:7a:35:11:d5:
66:bf:fd:f7:e8:db:3d:bb:f5:66:dd:c6:a6:1c:57:
90:6c:af:c4:a6:68:88:c6:37:63:f0:f8:d1:57:e8:
e1:7f:11:19:a1:b6:bc:0d:7e:ad:af:ba:14:a2:ea:
7e:5b:96:b0:b7:e3:3c:80:48:4d:48:79:b8:06:be:
1f:2a:de:b3:5f:db:76:cb:ac:9b:a9:8d:d0:ce:cd:
bf:e5:09:f6:42:ac:be:79:53:08:82:99:fe:0a:f2:
4a:2b:e7:88:41:0b:70:81:52:92:ae:7e:dd:4c:5b:
9c:d0:bd:da:6f:85:54:39:bf:00:5d:b9:17:30:6c:
76:25:23:09:d0:ce:75:6f:4b:14:4d:84:b8:9e:e7:
78:be:79:b7:55:10:71:47:68:68:fc:a7:90:c4:9b:
78:66:5c:4e:aa:1b:7f:1e:54:94:93:a6:18:9e:1d:
fd:be:4b:80:66:84:d9:71:0c:6b:8e:5b:36:cd:53:
8a:a2:07:c5:92:aa:db:72:75:84:40:e0:fa:6e:ce:
af:85:ef:e1:e3:dd:6a:84:e4:cf:43:e8:4d:1c:38:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:15:55:42:A1:BE:F7:52:D8:95:DD:80:32:81:67:FD:74:11:19
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:2c:d2:67:64:d3:6e:f1:37:c5:e8:2e:ea:59:61:e8:58:
f3:2e:e9:95:c8:2a:0a:6b:0a:a5:24:54:79:de:3a:f6:fd:5b:
96:c1:a1:fa:fe:d6:4c:4d:d5:f8:30:55:3d:13:d3:7f:7a:75:
59:a4:69:be:10:b1:73:1b:fd:63:77:5c:58:53:0b:0b:c2:f2:
7c:38:1e:5e:51:bb:12:71:71:6b:23:d3:b5:ee:ba:9c:2c:d3:
29:2d:a8:49:94:0a:ad:33:a0:00:33:14:d1:b2:9a:09:4b:50:
ab:2b:ac:c2:73:6e:d9:8f:f8:c5:6a:73:1c:84:da:2a:65:5b:
23:7c:69:b1:c2:3e:bf:cd:36:8b:2e:79:8d:a5:b9:eb:f4:d4:
42:cc:70:52:dd:c5:d8:7c:90:65:a5:54:17:eb:86:0f:04:69:
46:eb:42:81:28:4b:10:c9:d8:fe:7b:d9:b0:26:c8:dc:5b:50:
84:df:02:e3:71:81:5b:14:b8:41:ae:8a:a9:72:f7:3a:08:d4:
72:be:df:8a:f4:b7:69:ba:8b:b6:a6:72:e8:74:85:af:08:b1:
cc:22:c9:22:68:07:2f:16:bd:7b:29:06:ff:c9:97:3c:a9:f6:
11:1f:4f:a7:dd:68:57:eb:52:89:64:72:31:97:3f:50:ed:51:
93:83:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:56 2026 by rpki-client