
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
File: MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json)
Hash identifier: bQIUBgFXlERNr9/tmticlMAaLDg2aEO143DCHyojO0k=
Subject key identifier: 86:47:73:54:55:32:54:F0:DD:AD:A9:29:E5:2A:6C:2F:3D:D9:70:9F
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Certificate issuer: /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
Manifest number: 14
Signing time: Sun 01 Mar 2026 10:31:18 +0000
Manifest this update: Sun 01 Mar 2026 10:31:17 +0000
Manifest next update: Sun 08 Mar 2026 10:31:17 +0000
Files and hashes: 1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: n/d8zocRgo2qq4l/5FVa8d6vYq7sAVSlZPFIZZM4/Dw=)
2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Validity
Not Before: Mar 1 10:31:17 2026 GMT
Not After : Mar 8 10:31:17 2026 GMT
Subject: CN=69a41576-88aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:0a:c1:ee:61:30:83:9e:43:14:89:71:e7:
e7:c3:44:53:68:e7:51:69:bd:c5:70:0a:8b:99:ef:
07:91:cf:a7:af:4a:21:de:d7:91:5d:f7:98:8a:81:
c1:f5:2f:08:60:b4:a6:17:5e:d9:f8:92:6d:f7:35:
8a:6b:82:5a:24:8b:a5:6a:80:f6:f9:35:f1:28:1a:
ad:81:8f:62:1c:12:df:9e:b9:ed:c0:54:b5:c4:01:
fc:c7:72:3e:38:57:1c:eb:69:50:4b:aa:13:0c:ca:
60:f0:a5:f5:4c:16:65:b3:f2:bd:fa:fc:da:51:99:
58:2f:da:42:4f:1f:6a:5d:58:71:25:e2:91:da:fe:
36:64:c8:82:c6:30:3a:f6:77:37:0f:14:ef:45:ed:
56:16:66:7e:ff:fe:8c:5b:d4:e8:6f:88:78:c5:1f:
91:3b:b8:e7:b3:15:8c:65:ee:9a:49:ef:38:17:b9:
74:b6:c4:3b:44:89:55:57:78:da:ca:56:3a:6c:f1:
e2:cc:29:04:d2:ab:9e:7e:28:1d:5f:fc:37:e7:d6:
ea:fd:41:8b:34:f8:aa:c1:7c:12:4f:41:e2:87:43:
28:33:4d:e9:74:d1:bb:b0:1e:ad:32:6f:19:1a:af:
13:66:d3:e1:7b:fd:97:23:82:dd:6d:13:1f:b7:50:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:47:73:54:55:32:54:F0:DD:AD:A9:29:E5:2A:6C:2F:3D:D9:70:9F
X509v3 Authority Key Identifier:
keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:58:83:17:77:55:22:94:22:ff:60:ba:81:b4:83:32:31:
77:70:87:bd:d8:6a:d0:26:2d:48:a5:88:6e:9c:af:a9:9b:2b:
e7:66:2a:2e:9b:df:4c:94:b2:21:bb:88:66:10:01:41:c6:99:
75:7e:38:b0:2d:d6:aa:e9:51:d8:ae:ad:1a:9f:9c:62:91:9a:
86:b2:bc:7d:75:90:64:5e:8c:80:11:ae:82:03:89:a5:e1:20:
6a:b4:df:58:47:32:97:eb:6a:76:c0:97:c8:a8:ab:a4:7b:49:
b2:db:3b:09:ff:61:82:fd:3a:69:7b:bb:85:33:bf:09:e5:25:
93:90:c0:f0:fe:63:02:8b:7e:ee:15:6a:8e:26:3a:88:21:80:
6c:18:ca:06:e8:55:55:bd:0f:d5:5c:dd:d3:90:30:9d:05:2c:
ac:20:76:ca:48:73:77:37:99:0a:a9:4a:e2:bc:a3:3b:ed:c6:
62:6b:e6:8a:a1:4e:19:bf:ea:4c:1b:7e:fe:c3:94:57:f1:5a:
ea:0c:24:54:62:60:cc:d1:06:c9:ee:78:fc:9c:dd:26:ec:d2:
2c:0d:79:51:a3:42:34:99:5f:7a:2e:50:68:fe:d6:e2:d1:17:
fe:37:7e:eb:a4:86:3f:3d:dd:33:39:20:13:c4:18:6a:8a:4e:
95:2f:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:33:00 2026 by rpki-client