
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
File: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json)
Hash identifier: rPb9tFx83RF90KH6EkMjf/dfwBcO+7qDvlUaPfAjRiQ=
Subject key identifier: 58:10:D5:8C:3D:1E:E4:85:BE:FC:2A:32:54:78:C1:4A:B2:54:B1:4C
Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
Certificate issuer: /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
Manifest number: 1B
Signing time: Sun 01 Mar 2026 10:26:02 +0000
Manifest this update: Sun 01 Mar 2026 10:26:02 +0000
Manifest next update: Sun 08 Mar 2026 10:26:02 +0000
Files and hashes: 1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: ZB4z7n1HADIjQU24Bwcb4HTC1s+JnhMFdD7kfwzz/7g=)
2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Validity
Not Before: Mar 1 10:26:02 2026 GMT
Not After : Mar 8 10:26:02 2026 GMT
Subject: CN=69a4143a-8e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:6d:16:19:02:cb:e3:07:83:b1:ba:0e:30:
a7:dc:7a:d4:07:55:2f:60:1f:a7:e0:02:42:1a:8a:
a6:37:cc:42:1a:c0:07:3b:d8:81:ce:d6:46:de:46:
f1:f5:47:cc:e9:fa:de:04:dc:4e:09:e3:5d:33:1d:
89:b3:50:d5:7e:dc:d6:61:89:0a:5e:64:12:4b:5a:
56:8d:db:86:75:dc:a3:a6:7a:f8:d4:56:a1:06:2b:
e6:c1:9d:28:e3:e4:d3:cc:7a:3d:f2:00:ea:f6:2d:
a9:53:8a:73:c6:6d:50:df:31:7b:e4:ac:9c:8e:9d:
a7:10:fb:d6:62:44:e5:18:94:ec:cf:a8:73:44:e5:
bc:a5:3b:f0:ff:a2:ba:7b:3c:31:7e:ec:1e:dc:8e:
d8:33:58:f4:94:94:a9:34:22:74:05:ee:2d:4f:78:
4d:45:38:89:31:0b:32:df:bd:79:81:9d:6f:06:df:
ce:04:82:84:ef:4a:dd:db:50:71:6e:6c:22:f2:4f:
83:29:47:76:12:06:7a:3d:82:b8:51:7b:02:71:b7:
55:e1:a9:78:40:91:30:2f:98:c4:6e:eb:ee:59:c6:
f8:ca:14:0c:eb:a5:3e:12:23:33:ee:cf:12:c5:a3:
6b:e1:b2:15:96:49:69:10:2d:5f:ba:be:a7:34:e3:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:10:D5:8C:3D:1E:E4:85:BE:FC:2A:32:54:78:C1:4A:B2:54:B1:4C
X509v3 Authority Key Identifier:
keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:c2:87:8e:ce:21:01:00:30:02:e7:d0:14:53:1b:76:fd:
a1:c5:3a:3b:fa:54:39:90:0a:37:68:54:5c:bb:61:ae:c3:32:
d4:34:75:a0:2a:b2:94:ec:a1:cb:12:2f:c0:80:6f:82:eb:97:
36:0a:f8:c2:04:ca:a6:42:6f:f7:21:b7:5d:32:a0:27:8a:c2:
f4:2c:50:5f:89:09:78:a9:b6:35:3a:12:a3:6d:81:65:9f:78:
3b:3e:a9:b2:4e:89:7e:2f:93:5c:e9:e8:1d:22:31:82:90:55:
cf:aa:e2:f8:65:de:3c:89:45:91:3d:a6:75:16:68:1e:58:fc:
66:ba:e3:2e:0b:20:04:90:c1:c5:b5:9d:2f:85:b9:0f:e3:d5:
15:93:12:90:2a:89:65:83:5e:65:9d:4b:d6:63:32:7c:c0:65:
85:62:a0:01:87:03:07:0d:d7:66:88:f2:37:5e:b8:3d:e2:a0:
b5:3c:16:79:49:f5:f8:8c:7b:4a:fe:d2:70:01:58:b2:06:1c:
8f:21:d7:1c:48:1e:6f:0a:60:23:b1:3d:94:7f:0f:ed:30:ce:
1e:02:36:54:38:27:6c:e6:a1:89:b6:2f:a9:4e:54:e1:2e:eb:
60:29:76:6e:e2:0b:9f:6c:78:51:b1:8d:fb:ec:8a:2f:f2:22:
f2:5c:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:47:19 2026 by rpki-client