
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
File: mpJehowmrjzn4Iztb8MRL2QPLM8.mft (raw, json)
Hash identifier: tA3/SKXd39S1DFagQ5WcuIpCn0LvCHUsMuyxFtrGplY=
Subject key identifier: AA:E3:6B:AC:24:AF:16:07:BA:A6:59:ED:1F:49:02:64:C6:38:11:4B
Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Certificate issuer: /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
Manifest number: 7A
Signing time: Mon 21 Sep 2026 07:54:52 +0000
Manifest this update: Mon 21 Sep 2026 07:54:51 +0000
Manifest next update: Mon 28 Sep 2026 07:54:51 +0000
Files and hashes: 1: mpJehowmrjzn4Iztb8MRL2QPLM8.crl (hash: 9pibU49GPSGcMB/ItbRDAqHRsl8zCZ9U3yBugkDTJJ0=)
2: 198EDB1034E511F1828F838E91833773.roa (hash: 5rQyQHbY+5t3PI7uWTPeIpLhKz0IBw52hEVYsHCpwMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Validity
Not Before: Sep 21 07:54:51 2026 GMT
Not After : Sep 28 07:54:51 2026 GMT
Subject: CN=6ab0e2cb-a8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:54:45:7c:db:af:15:aa:dd:f6:77:70:30:
00:00:fc:15:a9:87:4a:ff:71:30:04:35:8a:8d:93:
b5:ff:e0:40:11:90:9e:a4:4d:9d:b8:0b:fd:f2:dc:
8e:7a:3e:70:32:49:d4:71:72:69:3b:2c:80:bf:89:
13:57:2a:15:73:ed:dd:cc:17:4c:45:79:60:8c:91:
b8:e7:4f:79:95:36:c2:2f:01:14:65:72:22:29:58:
2c:51:ab:3b:51:03:67:2e:60:b9:d9:cf:64:78:a1:
26:e0:30:eb:23:77:51:49:59:d2:68:53:44:9a:cb:
cb:8a:7c:53:03:29:d5:d4:93:3a:bf:6a:b2:fe:6b:
84:bf:cc:d5:12:ac:1d:1d:09:43:51:b9:15:1d:9b:
fc:42:94:c0:97:5f:b4:38:9b:4b:36:88:b3:33:2d:
8e:70:e5:98:1d:a4:1f:ee:8e:d8:68:67:1c:06:f9:
9c:36:3f:33:06:a5:b9:87:21:73:6d:06:ca:6f:23:
0a:40:f1:23:42:02:4b:6d:41:ca:a1:ca:35:1a:ac:
c9:b0:e4:39:23:f3:44:12:a1:01:b9:44:5f:ed:d7:
27:f6:3c:6f:5b:8b:ac:38:e2:df:a4:3b:9f:65:29:
cc:19:ac:cc:58:94:c5:f5:ad:13:6b:32:4d:c7:4d:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:6B:AC:24:AF:16:07:BA:A6:59:ED:1F:49:02:64:C6:38:11:4B
X509v3 Authority Key Identifier:
keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:30:e2:75:a4:f1:4f:f1:88:d4:cf:40:84:62:8b:66:65:ae:
ff:3b:ae:f2:7d:c5:5f:d2:cb:b6:71:28:ea:35:7e:78:1e:58:
1c:85:72:cd:50:81:18:01:68:dd:a7:97:4c:32:21:c1:40:8f:
b8:d2:92:90:d1:a5:77:32:83:51:51:68:0b:64:aa:b9:d4:18:
eb:e8:12:04:47:16:4b:6f:29:02:68:33:59:9d:be:01:6e:df:
49:3f:c7:b8:b3:47:53:8c:0a:7f:fb:eb:cc:ae:8e:98:e9:ad:
68:d6:90:15:cf:6f:00:c1:e3:8f:15:3d:b5:0a:f6:cc:7a:5d:
73:db:11:c3:99:73:98:ab:f4:9c:a5:42:52:e5:f6:a2:2c:2c:
63:fb:3a:04:2a:42:0b:d1:b7:86:a8:42:67:8a:8e:9b:05:e5:
a9:b9:3b:4a:fc:c0:43:01:38:15:6e:b1:2e:f5:ce:1e:65:6a:
84:27:6f:62:3f:ff:6f:2a:ab:c9:d4:b9:6a:5a:03:a0:50:21:
f8:ee:9a:cb:e8:2c:d0:6b:78:ef:1f:8c:38:0d:11:74:22:87:
83:4c:3f:d0:58:9a:b7:26:17:6a:1a:5e:95:91:3b:20:9b:dc:
db:3e:ec:63:89:4f:54:ac:fc:0b:17:ca:f4:bb:31:56:31:61:
5d:2f:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:45:14 2026 by rpki-client