
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json)
Hash identifier: Yp7eoEuIiOYYIEWl0MVel53nsVNxz9yveeSCBjpV49Q=
Subject key identifier: 82:BB:D9:17:DD:41:28:F8:90:EB:C2:13:B9:33:BC:FA:C3:47:87:57
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial: 1524
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
Manifest number: 150E
Signing time: Mon 02 Mar 2026 01:13:24 +0000
Manifest this update: Mon 02 Mar 2026 01:13:23 +0000
Manifest next update: Mon 09 Mar 2026 01:13:23 +0000
Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: 5ps3Tb/dJekOBlfDJNWG2JBT7EnYejonjMeijhlvNc8=)
2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: cIxtJWgcXzpekN854h+Gn0iT4S0YYTFuZrY9rIh4a6M=)
3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: 0s446asxUq4TUjj3iz0ZGInEQ2S3Qugk+pBUyrJhQAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5412 (0x1524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Validity
Not Before: Mar 2 01:13:23 2026 GMT
Not After : Mar 9 01:13:23 2026 GMT
Subject: CN=69a4e433-433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:6f:4f:a3:a3:13:85:7d:a3:c6:f8:2f:c4:
c6:e8:12:f0:1b:d1:e3:c7:0a:91:54:82:f1:32:12:
b7:b1:e6:48:a9:97:a0:20:9c:0e:84:b5:40:7b:ea:
0f:12:a8:11:f0:fd:a2:98:7c:13:e0:20:d0:c5:d1:
8f:c7:1b:02:21:90:d1:f0:7c:5d:56:43:66:41:4f:
22:04:b6:ad:40:29:37:d7:b1:e1:f5:43:83:1a:ad:
2e:1c:3f:c4:bf:ff:18:8d:f8:ee:a4:2b:89:d2:66:
df:ca:a9:41:6f:91:84:f8:89:f0:65:d9:d8:56:04:
30:38:bc:9f:96:b6:f4:28:0c:8e:2d:4b:c4:5b:a6:
5d:41:0f:68:c5:57:08:48:8f:65:69:37:74:43:c6:
3c:f5:6a:b4:da:11:d1:b4:c8:16:4e:91:17:a2:6b:
70:87:5c:32:42:0d:b4:17:ea:f3:ff:12:d0:0e:5c:
b7:e9:a8:8a:70:f8:a1:9f:05:ee:49:1f:3e:00:56:
de:9d:8a:21:de:ff:12:c6:47:81:26:95:82:6e:be:
bf:9c:60:c0:12:d0:b6:84:54:12:e8:09:c0:42:c8:
57:a5:05:61:ef:c5:c2:92:52:41:b8:e7:a4:14:7c:
ce:49:d8:48:7a:e9:5a:55:eb:a9:5f:7d:c9:8f:4f:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BB:D9:17:DD:41:28:F8:90:EB:C2:13:B9:33:BC:FA:C3:47:87:57
X509v3 Authority Key Identifier:
keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:6d:b7:7f:fe:d6:cf:09:70:e3:50:39:ec:b1:69:09:11:38:
fa:c1:14:58:44:c1:2f:f5:b2:93:7a:53:3a:15:97:f8:f6:4e:
59:2c:66:86:01:03:1b:f7:d1:22:07:71:60:87:55:49:72:d4:
71:24:8b:83:a7:f3:1b:3e:1e:f7:a0:0a:6a:77:b8:52:2f:17:
0f:c8:02:7f:0a:b5:36:c8:3c:46:81:db:b1:7e:28:a2:70:00:
3a:d7:1f:8a:c3:1e:5b:ae:ce:d0:00:dd:37:f3:dd:79:57:bc:
1e:00:47:d1:85:ef:d5:10:6c:26:a5:d5:8f:d3:f9:0b:e7:f4:
28:a1:37:14:ad:7d:eb:e0:f0:ca:fe:65:66:bb:d8:6d:cc:e9:
dd:55:7d:04:a6:8b:65:af:60:39:b8:1a:43:80:b6:96:30:ef:
f8:c1:a8:1b:7a:a9:b8:e2:3b:68:00:9f:72:25:6c:ab:96:dc:
c5:73:02:66:3c:3a:e5:55:42:b7:27:11:fc:02:cb:f8:af:3e:
72:8a:4f:be:c1:35:f2:98:3c:e9:46:81:be:c5:45:8e:a6:af:
4a:e1:9b:a0:24:7c:ea:03:91:29:c1:84:f1:86:c4:d8:e3:50:
87:b0:99:98:d2:01:e6:8a:df:f4:1a:f8:bb:06:ec:cb:dd:9a:
41:09:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:20 2026 by rpki-client