
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: G1Q2586qXvKDlbdekQ9yVctNmxGjy/heR/uyTh4623k=
Subject key identifier: F9:BD:44:39:AD:05:52:3D:87:16:18:54:CD:FC:B0:72:BC:99:DD:16
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 0299
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 028D
Signing time: Tue 12 May 2026 16:03:12 +0000
Manifest this update: Tue 12 May 2026 16:03:11 +0000
Manifest next update: Tue 19 May 2026 16:03:11 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: /XGDB2nGsyTxuAv+iQMS3OMx/lAoL4pzH8Y3ZJOvmSw=)
2: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
3: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: May 12 16:03:11 2026 GMT
Not After : May 19 16:03:11 2026 GMT
Subject: CN=6a034f40-7e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:ec:a2:5a:14:0c:85:b8:d0:f4:39:08:ec:
01:d4:85:1a:85:e8:6f:f9:97:90:c8:ec:99:3f:bb:
cb:fe:18:dc:03:f6:ee:84:86:f1:43:e0:08:ed:bf:
f3:66:1f:c8:3f:80:a2:09:df:8a:1a:da:20:cd:61:
fe:3a:41:e6:42:64:9a:e8:f0:9e:59:92:5d:6b:e1:
4c:3a:a3:a6:78:8c:a1:1f:61:3c:99:fd:d1:80:9d:
19:ff:e5:9c:f1:48:79:be:a2:91:83:b2:c4:f2:16:
39:e5:12:8a:7d:96:05:dc:6f:bc:8d:d5:d9:28:26:
69:9a:12:1c:81:82:21:53:b7:f7:92:44:fb:50:ab:
fc:e7:1d:8d:01:b1:79:9f:69:74:a0:ea:d5:bf:75:
ab:b2:dc:0c:78:9e:57:7e:d4:25:87:a4:c5:a8:c4:
3c:3b:de:35:a2:6a:c2:7a:df:eb:d5:bc:f8:39:a9:
1d:e0:e4:cc:ba:9c:e2:e0:cf:10:bb:e5:e1:a7:a9:
d7:39:dc:57:18:6d:07:84:7e:d8:a8:37:ee:62:ac:
a1:09:d5:09:bd:20:ac:7f:a9:59:46:51:d1:fb:36:
0c:16:c0:b0:17:6f:e5:eb:60:70:b4:4d:ef:10:59:
cd:8b:f8:56:36:9d:8f:21:8f:82:c4:08:16:29:02:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:44:39:AD:05:52:3D:87:16:18:54:CD:FC:B0:72:BC:99:DD:16
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:63:86:46:f8:ea:26:be:07:86:9c:03:cd:29:59:62:db:44:
52:c7:5d:22:04:2d:a6:5f:9a:f5:3a:a5:30:07:80:9a:8e:af:
be:61:48:96:5b:7f:da:14:e1:c3:d4:dd:0c:cf:94:6f:02:7f:
ea:b9:1b:57:9e:cd:8c:e4:63:ca:75:0d:be:7c:78:71:e6:7f:
8d:fa:1e:cd:0a:e4:8b:0c:8c:fa:56:31:9e:5e:d6:fb:8a:10:
b2:34:a3:ee:3d:3b:f9:75:aa:c0:d8:b1:80:13:bc:03:ee:70:
21:50:f1:56:b4:60:5b:77:cf:a7:b4:e4:7e:6a:b3:0e:71:92:
a4:3e:fb:1f:8e:da:3f:ca:0b:9d:f6:a8:1e:91:05:21:52:92:
b1:ff:d9:4a:c8:50:a5:73:a2:91:18:ee:11:12:30:e8:46:a9:
ac:bf:56:89:c3:61:03:97:ad:23:f6:79:3c:a6:86:86:db:4a:
9d:2d:d0:0a:bd:57:98:86:92:2c:10:78:e7:a9:35:9c:47:05:
58:12:87:ea:38:a4:fd:a4:eb:4d:a8:13:72:10:c2:a9:23:88:
5f:20:f8:7e:d4:06:bf:f7:f2:98:c6:f2:cc:9d:d7:26:f6:97:
f8:54:d4:02:d5:aa:b8:c2:49:46:10:38:bc:27:ea:ca:37:51:
dd:f3:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:54 2026 by rpki-client