
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier: iGeFCUHivZUoke+VYhRLXOhCrHgpSrpDEpTcNzAcgB0=
Subject key identifier: F5:14:8F:D4:1F:1B:7A:18:E1:B8:5A:D2:B9:0B:26:5A:AB:ED:BB:66
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial: 0D18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number: 428D
Signing time: Tue 22 Sep 2026 15:00:23 +0000
Manifest this update: Tue 22 Sep 2026 15:00:22 +0000
Manifest next update: Tue 29 Sep 2026 15:00:22 +0000
Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: IfMamjPE7z3C/+qrczJ1E5QoMCZ2EzooQDQpLFReuDw=)
2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: LEzt89CvLVju98tJMXEY3BB8Z+2hDsrkV3y8xZ+yWY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3352 (0xd18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Validity
Not Before: Sep 22 15:00:22 2026 GMT
Not After : Sep 29 15:00:22 2026 GMT
Subject: CN=6ab29807-3148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:aa:c2:fa:6e:63:b3:17:27:00:65:64:90:
a2:32:50:f3:22:e9:af:c7:35:89:93:65:13:e7:c1:
2c:38:75:6b:17:71:f0:82:6c:48:11:35:dc:e5:59:
21:f1:b5:57:21:fc:f6:45:90:0a:f8:d6:98:90:c2:
45:15:5e:85:fd:34:af:23:46:be:4c:b7:d1:5c:08:
4d:b6:77:e0:26:1f:dd:20:ee:8f:d9:cf:fc:aa:0a:
0b:d7:64:7f:22:29:3f:13:60:8a:02:45:79:5f:10:
dd:e5:e1:72:5b:ee:c0:29:01:ff:2c:14:74:29:8c:
93:21:4d:4d:b6:dc:a5:28:27:7b:18:f6:c3:80:ef:
77:de:5a:17:dd:08:89:ad:20:e9:eb:3f:ea:7b:40:
e2:d7:f8:c8:4e:14:90:3a:01:3f:8f:b7:9f:78:1b:
01:40:1d:91:e8:e4:5c:92:dc:58:9f:75:dc:4a:43:
58:47:9c:2d:b5:39:86:e0:28:85:95:d8:73:8e:87:
af:60:8f:19:a3:4d:d4:ca:ca:11:bb:fb:ac:00:1a:
3a:32:22:0d:1a:7f:9a:c7:d4:ee:53:bb:04:34:30:
5d:11:27:8a:03:af:b3:79:16:61:7e:77:c1:5f:34:
45:71:a7:64:11:af:b7:98:9c:a0:e9:8a:97:f3:92:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:14:8F:D4:1F:1B:7A:18:E1:B8:5A:D2:B9:0B:26:5A:AB:ED:BB:66
X509v3 Authority Key Identifier:
keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:5c:fc:20:26:48:1a:ea:32:ab:81:ea:7d:b2:44:7f:64:e0:
f3:d2:36:ab:41:27:61:64:fe:7b:f5:eb:69:b5:f6:5b:1d:b5:
0b:7d:dc:17:48:6c:d7:75:7a:c5:72:9c:38:17:53:3f:fc:98:
29:05:29:ca:3a:e4:b6:de:71:e7:1f:21:7a:92:14:1b:4e:ba:
17:82:f6:74:01:5b:1b:20:4e:0f:87:69:63:63:05:91:d2:87:
b1:80:3b:ca:94:a8:e2:de:a7:08:85:db:19:cd:73:03:1b:5c:
d0:99:08:52:44:b4:dd:52:9d:9a:7c:0f:85:c5:5b:dd:ad:e9:
45:fb:d2:dd:62:21:48:ab:ff:26:e6:9c:0e:0c:d5:ca:cc:93:
67:71:94:47:da:8e:33:f5:cc:36:85:ab:24:ac:e4:0b:29:97:
74:5a:f9:4f:46:8c:b8:bb:8a:fd:52:e6:68:20:61:68:6b:2c:
d3:bf:0c:f0:7b:8d:1d:97:76:7c:90:96:bb:3f:97:37:79:b4:
1b:8d:f0:7e:a5:d4:ed:ca:b6:06:08:d8:a8:ec:ef:91:2c:ea:
61:5c:1b:ef:1b:c2:9b:0a:ec:9a:65:9a:be:da:d0:c2:10:9a:
5f:8f:8b:17:ca:ca:43:a4:44:0a:15:5b:3f:6f:3d:a7:90:df:
57:47:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:45:27 2026 by rpki-client