
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier: BlmCBpRnrYCj3yYK/z8/q8liIYQUIkc3vbIcsduM6d0=
Subject key identifier: A1:89:73:79:E3:AD:3E:EC:1E:73:66:F7:10:22:15:E1:48:33:F3:CC
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial: 0CC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number: 41E8
Signing time: Thu 16 Apr 2026 15:01:29 +0000
Manifest this update: Thu 16 Apr 2026 15:01:29 +0000
Manifest next update: Thu 23 Apr 2026 15:01:29 +0000
Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: L/BLDZzHf5HBSrmUyrIq1IAW7+UEMBZW3jPXqx1ZbpU=)
2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: TEur0qITEPg5x6Wpffov2L2nrpJe0RCHF8zhwpKPkvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3268 (0xcc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Validity
Not Before: Apr 16 15:01:29 2026 GMT
Not After : Apr 23 15:01:29 2026 GMT
Subject: CN=69e0f9c9-5f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:b5:e8:08:22:ac:cb:7c:f4:d4:1a:d6:45:
72:bb:2a:e7:44:1c:b0:39:a4:59:04:66:c2:56:5d:
11:d1:a9:20:cf:b4:33:ad:d4:a7:32:9b:6a:5a:a7:
2c:0b:74:fd:37:52:96:e0:58:df:7e:49:72:25:d5:
1a:0e:71:b7:f5:27:7d:21:1f:c7:32:da:76:51:a1:
c9:f4:62:6e:f4:44:6c:cc:76:0f:45:0c:04:86:8d:
33:a6:45:6d:4f:54:45:83:5b:bc:c4:72:84:e8:54:
bf:0d:ff:9c:77:79:1f:c4:a3:d5:ca:54:46:d3:eb:
1c:42:ec:23:f9:ec:dc:73:18:ad:ea:9d:90:a9:72:
4e:4e:88:92:17:29:be:ab:22:90:29:ee:9d:84:38:
91:3e:1b:cc:91:05:80:b0:69:11:a8:1e:25:9e:ae:
32:fc:94:8c:a1:3d:da:77:1e:f9:a3:ed:34:f3:73:
87:12:b9:51:ec:2c:43:4b:87:c1:15:bc:96:97:2c:
26:ef:ff:29:59:a9:72:05:c0:38:4e:a5:45:bf:3a:
78:77:3d:c3:18:68:f3:ec:3f:56:c8:03:89:5a:3b:
6b:00:5b:46:ab:43:64:6c:c0:7c:f1:e2:8a:44:e2:
ce:3b:9e:4d:35:94:04:17:14:39:a2:85:e5:09:da:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:89:73:79:E3:AD:3E:EC:1E:73:66:F7:10:22:15:E1:48:33:F3:CC
X509v3 Authority Key Identifier:
keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ed:52:2d:d6:0b:69:7f:12:a2:67:d0:c5:2e:89:b2:63:d1:
91:89:43:df:47:21:1e:cd:5a:df:2b:80:4f:87:29:86:0d:52:
32:70:c8:72:e9:05:33:cf:88:7f:48:ba:17:9d:fd:4c:f2:dd:
9f:5c:0f:27:e3:6f:6c:3b:47:e0:c1:81:0a:e7:8f:d1:b0:a9:
47:a3:58:d3:3e:1f:c6:57:1f:07:16:2f:e2:8a:58:7d:94:7a:
8d:99:fb:6d:8c:3a:2c:3c:a5:86:6e:8c:e9:1c:06:62:d4:41:
2d:d2:b1:f2:6f:87:d8:4f:68:1c:15:10:4c:30:25:31:92:b9:
4f:97:b8:fc:b3:e1:e5:4a:83:4c:d2:ac:ec:9c:c4:a2:c0:e4:
96:88:a4:a4:04:c9:2b:6b:f0:2a:76:cb:6c:7a:90:f5:e9:9f:
98:11:1e:af:72:05:ec:c8:43:3a:a8:9e:79:26:96:05:d8:fb:
67:3d:a5:93:f4:8e:0e:ec:77:b6:1f:df:a9:57:f5:1d:ca:33:
d8:98:4b:9c:7d:13:79:c4:72:8c:d5:82:f1:73:40:52:02:0d:
0f:14:a6:1a:d0:40:75:de:5a:54:37:b4:ba:49:3d:ac:8b:25:
04:07:c9:3b:ee:02:fd:f5:10:2d:6c:b0:50:8b:2a:80:fc:da:
61:a3:33:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy
RDNCMjY0Q0EwHhcNMjYwNDE2MTUwMTI5WhcNMjYwNDIzMTUwMTI5WjAYMRYwFAYD
VQQDEw02OWUwZjljOS01ZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA19u16AgirMt89NQa1kVyuyrnRBywOaRZBGbCVl0R0akgz7QzrdSnMptqWqcs
C3T9N1KW4FjffklyJdUaDnG39Sd9IR/HMtp2UaHJ9GJu9ERszHYPRQwEho0zpkVt
T1RFg1u8xHKE6FS/Df+cd3kfxKPVylRG0+scQuwj+ezccxit6p2QqXJOToiSFym+
qyKQKe6dhDiRPhvMkQWAsGkRqB4lnq4y/JSMoT3adx75o+0083OHErlR7CxDS4fB
FbyWlywm7/8pWalyBcA4TqVFvzp4dz3DGGjz7D9WyAOJWjtrAFtGq0NkbMB88eKK
ROLOO55NNZQEFxQ5ooXlCdrTIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGJc3nj
rT7sHnNm9xAiFeFIM/PMMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE
OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX
WS1oNjNHNlpYNGd0T3laTW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD+1SLdYLaX8SomfQxS6JsmPRkYlD30chHs1a3yuAT4cphg1SMnDIcukFM8+I
f0i6F539TPLdn1wPJ+NvbDtH4MGBCueP0bCpR6NY0z4fxlcfBxYv4opYfZR6jZn7
bYw6LDylhm6M6RwGYtRBLdKx8m+H2E9oHBUQTDAlMZK5T5e4/LPh5UqDTNKs7JzE
osDkloikpATJK2vwKnbLbHqQ9emfmBEer3IF7MhDOqieeSaWBdj7Zz2lk/SODux3
th/fqVf1Hcoz2JhLnH0TecRyjNWC8XNAUgINDxSmGtBAdd5aVDe0ukk9rIslBAfJ
O+4C/fUQLWywUIsqgPzaYaMzjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:57 2026 by rpki-client