
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json)
Hash identifier: tALX+Bu76J4M3zI9n7RNehmrlcG8IU4eZeuk5TqE2hQ=
Subject key identifier: 08:DF:88:A5:A2:FE:40:4E:0D:8E:08:FB:6D:DC:07:71:98:DD:62:43
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial: 153C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
Manifest number: 1526
Signing time: Thu 16 Apr 2026 16:45:16 +0000
Manifest this update: Thu 16 Apr 2026 16:45:16 +0000
Manifest next update: Thu 23 Apr 2026 16:45:16 +0000
Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: cwagOrX01zgbS6UXhB8eOUB5SkOtrV9syGtfKBI+gjI=)
2: 391E6EDE679B11E886728650C4F9AE02.roa (hash: 0s446asxUq4TUjj3iz0ZGInEQ2S3Qugk+pBUyrJhQAI=)
3: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: cIxtJWgcXzpekN854h+Gn0iT4S0YYTFuZrY9rIh4a6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5436 (0x153c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Validity
Not Before: Apr 16 16:45:16 2026 GMT
Not After : Apr 23 16:45:16 2026 GMT
Subject: CN=69e1121c-9b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:fe:c0:83:4c:f2:e5:99:5c:bf:e6:07:3b:
4a:20:57:67:9e:18:0e:14:2d:de:68:55:3f:1f:cc:
ce:27:12:58:fa:3f:8f:a8:19:9c:d2:99:3b:a5:6c:
3d:28:99:c3:30:d6:21:d3:28:62:84:99:87:58:e0:
c7:a0:ee:d7:69:7e:d8:2b:3e:44:6c:fe:c2:aa:c3:
64:94:82:20:f3:4d:22:00:c2:97:42:b5:94:5b:fd:
bd:10:30:15:20:36:86:98:31:f9:3b:1a:4d:fb:e7:
84:e5:cd:a0:f9:c6:e3:d0:b6:2e:ff:42:ae:8a:ad:
09:8b:92:32:1f:65:b1:9a:2a:56:58:08:be:de:de:
e6:08:ae:cb:a1:5b:fc:c8:de:62:c3:5c:86:61:ef:
db:ae:a9:d7:4d:e7:22:d8:05:5d:56:7f:4a:a7:2c:
c3:d8:0a:b4:37:be:9e:0f:6b:f7:05:82:10:9b:29:
4a:75:94:27:92:bb:95:c2:ee:76:21:53:7b:b8:01:
3f:8f:2e:d5:c4:c5:0e:08:70:26:87:49:2f:aa:b6:
28:8a:84:ec:06:5f:cb:57:01:e5:33:49:32:c2:2e:
d9:6e:01:5b:68:aa:00:9a:27:14:77:87:2f:c9:70:
4c:61:b0:d9:22:ce:13:ef:49:df:9b:60:d0:cd:f2:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:88:A5:A2:FE:40:4E:0D:8E:08:FB:6D:DC:07:71:98:DD:62:43
X509v3 Authority Key Identifier:
keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:d2:06:7f:9b:5d:b2:25:6a:2c:e5:bc:4e:ff:d8:6b:78:d5:
3e:6c:7a:9c:55:c5:75:7d:8a:df:64:68:0d:9e:e9:4e:a9:a1:
a1:f7:27:34:07:52:0d:27:38:09:13:5f:27:19:ab:13:08:c2:
12:a4:04:6d:73:00:3e:9f:32:f1:0f:6c:7a:e4:11:14:a6:4f:
61:9e:04:75:4a:0c:86:e8:31:5e:ac:e2:89:51:1b:77:28:14:
b7:12:ca:f8:b0:ac:59:1b:f4:62:b0:98:3c:7c:1c:8d:93:80:
10:b0:33:55:31:18:a5:50:57:9d:65:ee:f0:c0:b3:72:e1:4d:
c3:72:08:e5:5e:d7:57:17:e4:97:bb:e3:0f:30:68:cb:1d:91:
57:da:46:79:66:9b:5b:c2:88:1d:2f:1e:08:b9:ac:bc:b0:fb:
1a:24:e9:17:78:3e:e9:fa:e8:3e:80:51:af:f1:a3:b7:b8:61:
85:fb:e6:62:dd:0c:14:1b:c0:87:69:ab:9b:40:e7:b2:49:a9:
28:00:71:d4:ba:1f:64:a6:56:e6:7c:8d:fc:ac:38:4f:87:25:
49:54:e8:d3:f2:5d:ec:11:41:46:dc:b5:bb:a8:5c:86:70:66:
1c:08:8c:84:4b:f6:80:eb:c8:3c:0d:fb:da:39:fd:c0:ec:72:
0d:0c:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:04 2026 by rpki-client