
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
File: MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json)
Hash identifier: qqDOojhbakqefxeOCNzUsCgBRLr8NJ/O3k1rVOYIZj8=
Subject key identifier: E3:6B:19:C7:AB:43:2C:62:98:E0:93:2B:D9:8A:6C:AC:A2:35:23:01
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Certificate issuer: /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
Manifest number: 88
Signing time: Tue 13 Oct 2026 08:20:03 +0000
Manifest this update: Tue 13 Oct 2026 08:20:03 +0000
Manifest next update: Tue 20 Oct 2026 08:20:03 +0000
Files and hashes: 1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: bgfazJgJl7/DermVVnzkIchdn4piLIxkadNurqAMjKo=)
2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: GHquDvrVernkx6CK6w3aPHXc9JWjY2SOp7uJA02vMok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Validity
Not Before: Oct 13 08:20:03 2026 GMT
Not After : Oct 20 08:20:03 2026 GMT
Subject: CN=6acde9b3-f233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:f9:ac:72:d2:fe:bf:15:3f:bd:54:f2:5c:
57:85:e1:51:3a:43:ca:f5:fb:a8:4e:7d:3c:e4:f6:
9a:cd:53:10:a5:44:f1:88:31:85:e3:e3:34:02:03:
db:2f:b3:f8:c6:1e:f4:98:61:74:82:53:70:ad:7f:
f4:73:2c:0a:ab:79:ee:0f:d4:ff:b4:ba:fb:8d:31:
64:3a:86:ee:df:f0:06:e0:36:04:9a:ca:b2:4a:a7:
f4:1d:de:f6:4c:6e:c4:d3:c4:46:b5:64:dc:60:d1:
78:6b:c2:10:b6:59:1f:ea:8b:16:50:73:a9:1f:09:
ba:c8:16:6f:03:d8:a0:5b:5a:1e:61:07:af:a5:50:
a0:18:ef:7f:e8:46:bd:fc:6d:7e:58:e6:f0:ec:43:
e9:aa:01:f7:56:44:8f:bb:60:fd:2b:1a:6f:d6:e5:
e1:11:f7:fa:c9:7b:da:92:95:51:5b:12:3c:3b:dd:
1d:95:c9:75:df:6b:12:66:6e:5a:b4:bc:8b:66:f0:
36:64:ca:cb:61:ce:e5:05:df:c7:49:ae:62:79:44:
a6:5e:77:18:55:89:8b:33:98:4f:7f:42:36:e9:df:
92:78:1c:63:cf:c2:42:59:3f:7f:8c:c9:03:8e:05:
c1:28:e3:f9:49:0d:ca:d1:e4:30:61:dd:88:66:93:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:19:C7:AB:43:2C:62:98:E0:93:2B:D9:8A:6C:AC:A2:35:23:01
X509v3 Authority Key Identifier:
keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4f:e8:b3:ba:53:e7:d2:8d:7e:37:f1:eb:db:7d:72:7f:e7:
dd:d3:ed:94:af:b5:32:45:7d:41:c2:72:01:b2:af:36:4e:58:
46:dd:07:2d:a4:68:08:01:b0:44:44:a9:08:e1:63:7b:52:36:
13:51:85:90:2e:a1:85:00:2b:23:26:56:2a:69:96:b1:9a:4f:
ae:63:6c:68:df:aa:c9:99:81:d0:48:f5:26:59:75:69:31:16:
d2:a2:75:63:3d:62:3a:59:cc:b7:79:0d:cb:a7:b8:40:bb:cc:
6a:0a:7f:cd:84:a8:66:5e:2e:a9:18:33:ad:8a:fb:91:c9:d9:
67:60:7b:b6:82:1a:29:45:3a:d9:fd:3c:b2:64:30:dd:ed:2d:
ed:68:09:cf:a3:2a:76:c3:e0:d4:12:d1:d3:1d:e7:ac:e1:cb:
da:4f:65:97:47:7d:e6:fe:00:01:8f:86:fc:67:96:70:6c:2e:
b9:44:12:f6:92:f9:93:03:63:4a:d1:32:b7:e0:24:e6:cb:b7:
62:31:c2:17:0c:eb:44:db:f5:bf:ec:bb:d3:1d:10:83:57:38:
d3:c8:f9:4d:95:76:f7:31:4c:bb:38:f7:e7:6e:74:47:7b:a8:
44:48:9a:b2:9c:14:74:02:ac:98:29:9c:e3:e4:d0:8b:05:dc:
57:2b:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:57:39 2026 by rpki-client