
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json)
Hash identifier: qfBMspaavocOO2oCj1YL20WNu1xvBlSxm0Fx3Disoi8=
Subject key identifier: 1F:32:74:8D:35:E2:2C:AA:64:5E:02:FA:B9:A6:89:29:44:FC:19:44
Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
Manifest number: 0112
Signing time: Mon 21 Sep 2026 05:58:53 +0000
Manifest this update: Mon 21 Sep 2026 05:58:53 +0000
Manifest next update: Mon 28 Sep 2026 05:58:53 +0000
Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: SjyAQlYPUJ9RNZb7upanh9aSoTWkP3ri9+DkLuNsMlQ=)
2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: yRpg8YzN41NYB9rsIYgkG05og6BR0pcJnbn3a4gO0DU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Validity
Not Before: Sep 21 05:58:53 2026 GMT
Not After : Sep 28 05:58:53 2026 GMT
Subject: CN=6ab0c79d-0bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:95:db:60:8d:f6:41:b5:af:10:12:c9:a3:
5b:d9:40:00:46:ed:ec:b2:b8:d0:83:5d:d8:cd:6e:
2e:62:95:88:52:e3:04:7e:43:af:cd:75:d6:71:99:
57:4f:5a:24:85:3c:73:4d:da:f2:a1:6d:42:c7:34:
e3:5d:b9:2a:fb:df:f3:62:35:d8:5c:9e:27:47:5a:
da:f6:9e:2e:25:c9:74:dc:ab:e9:2e:3d:22:47:df:
8b:de:ca:3e:15:a4:98:aa:8c:d4:0e:b6:d0:fd:8f:
11:33:5a:fa:31:18:fb:0c:78:9b:ae:88:de:c0:ad:
c0:d4:6d:a5:39:12:69:c6:58:63:a1:d8:6c:0f:41:
0e:b6:e7:e5:66:9c:3e:2f:4b:f2:d3:e1:31:62:67:
80:02:b4:89:c4:9e:f7:a6:fa:45:37:36:99:bb:44:
b6:8e:e8:d4:3e:43:97:9e:0e:ac:19:10:24:71:ba:
6d:0b:31:26:3a:98:1e:fd:eb:c2:6e:bc:e1:bc:e1:
5c:ad:97:b6:72:c3:d3:3a:16:d8:23:f4:65:51:8f:
8c:6d:22:32:0b:31:a6:b1:de:09:ed:e6:a5:60:9c:
98:56:85:d5:bf:b7:fb:03:c3:71:2a:10:18:3e:2e:
05:13:96:76:50:c1:56:53:4c:22:fc:2a:28:ec:92:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:32:74:8D:35:E2:2C:AA:64:5E:02:FA:B9:A6:89:29:44:FC:19:44
X509v3 Authority Key Identifier:
keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:dc:f1:0c:65:78:c1:10:94:7b:d9:dd:44:bb:5a:0d:22:9a:
41:ef:ae:e7:3c:7e:c9:6c:56:7c:e4:57:82:23:ba:2a:03:7e:
3e:3a:1a:30:13:89:da:d2:7c:41:dd:b4:cb:4b:61:0b:fa:97:
b3:4f:77:b2:45:1c:6b:6c:42:fa:82:c5:54:57:de:d1:d8:c3:
ea:13:9c:74:c1:65:4e:c2:b9:41:99:5c:f4:ca:26:1b:28:c9:
b8:68:61:8d:be:01:67:62:82:7b:bc:b0:7e:b7:5b:77:eb:78:
08:54:1e:b8:f9:59:bf:30:b1:3a:72:d2:63:47:b9:21:c1:39:
20:71:a7:56:7b:0e:e5:03:c1:c3:a0:9d:44:64:ca:e8:1b:39:
c3:cf:8c:88:6f:45:fa:1c:31:f4:21:42:d2:58:48:4d:68:d2:
5c:40:34:ae:75:5d:78:5e:c8:9d:f7:4a:5e:f2:d0:87:6e:91:
23:94:20:21:33:5a:a5:33:66:3c:bd:49:da:73:21:ee:b7:dd:
b2:5f:46:c4:2a:ba:4a:4d:a9:c3:d6:b3:c5:1a:4e:04:a6:4b:
50:87:ef:89:d8:44:a9:71:69:53:3e:a8:0b:5a:2a:52:8c:68:
39:61:e4:7a:40:d3:aa:dc:83:fc:6a:bc:ed:1d:29:c5:90:1a:
c5:1a:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:17 2026 by rpki-client