
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
File: MJoqNkM0qd26Sm1EBB15pdMrr6s.mft (raw, json)
Hash identifier: 6if1udoH72BWtYkyFvMxQ1jWW8rPi8C1hmOi3Gel1xs=
Subject key identifier: 19:5B:82:FC:7D:80:C6:49:F9:18:7E:66:CF:A3:30:61:8E:E4:79:BF
Authority key identifier: 30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
Certificate issuer: /CN=A91AC100/serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Certificate serial: 035E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
Manifest number: 0357
Signing time: Wed 25 Mar 2026 00:35:05 +0000
Manifest this update: Wed 25 Mar 2026 00:35:04 +0000
Manifest next update: Wed 01 Apr 2026 00:35:04 +0000
Files and hashes: 1: MJoqNkM0qd26Sm1EBB15pdMrr6s.crl (hash: Edb3F0e4IvHeZ/plOHgzqPbV7PMT0qSJwATDQ0h36bA=)
2: 29B6EA80F2C411EC97A42B73C4F9AE02.roa (hash: +qcJCRAGVhzKkI0FF2xeqLTe7clyP76xtKn0mfX/LKw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl
rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC100, serialNumber=309A2A364334A9DDBA4A6D44041D79A5D32BAFAB
Validity
Not Before: Mar 25 00:35:04 2026 GMT
Not After : Apr 1 00:35:04 2026 GMT
Subject: CN=69c32db9-3361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:3d:b5:50:5e:90:39:b6:d4:c0:32:d0:8b:
3a:ca:83:96:fc:73:73:8e:b8:0c:cb:37:46:28:b1:
01:47:56:24:f2:b5:50:5f:34:a3:b6:f6:98:d0:e2:
c2:7b:52:e0:7f:27:09:8a:9a:8b:4c:53:88:64:97:
46:3f:6a:f5:51:2e:21:66:2b:e6:a7:f5:ee:0f:79:
58:cc:b3:45:66:3e:8a:30:11:4a:08:54:77:75:39:
6c:03:94:69:03:46:34:c4:4d:2a:69:dc:78:4d:27:
1c:08:22:67:11:64:ae:ee:70:81:f2:5b:2c:05:0b:
1d:8e:a8:54:25:4c:5e:d4:dc:fb:eb:ac:27:be:69:
33:c6:c3:87:14:5d:0e:70:67:bf:0f:bd:2b:b2:14:
4d:8f:f1:0d:d5:b9:71:c7:e1:14:9e:89:be:64:db:
c3:b1:2a:33:e4:70:cb:04:f5:9a:b0:8e:40:a0:0b:
fa:32:69:bc:45:df:50:b3:e3:da:09:1e:2d:87:77:
e9:58:83:8d:c3:b7:a4:20:44:93:68:92:2f:6c:f0:
9d:3c:d4:02:e8:74:7e:2a:dc:3c:9c:9e:dd:44:22:
10:fb:25:b6:3b:ac:47:87:ac:2e:ee:12:92:cf:79:
75:6a:35:e0:33:c6:08:b0:a7:1d:ea:99:d3:cf:92:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5B:82:FC:7D:80:C6:49:F9:18:7E:66:CF:A3:30:61:8E:E4:79:BF
X509v3 Authority Key Identifier:
keyid:30:9A:2A:36:43:34:A9:DD:BA:4A:6D:44:04:1D:79:A5:D3:2B:AF:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJoqNkM0qd26Sm1EBB15pdMrr6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC100/E43DC5CAF2BC11EC88AC9452C4F9AE02/MJoqNkM0qd26Sm1EBB15pdMrr6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fb:96:14:98:4a:96:62:ed:e0:6b:f3:79:c3:69:55:09:1e:
51:dd:cf:ec:b6:a3:68:6e:e7:4c:eb:b2:06:0f:74:86:ee:ec:
32:6b:ec:95:e0:c8:29:58:0c:58:7c:a7:56:56:78:65:9a:b8:
dc:fd:41:2c:1c:d4:c0:d7:c4:5c:a6:9a:b9:06:f7:0b:9f:62:
c6:21:17:09:77:19:d2:01:73:2b:45:2a:5a:e4:07:a1:48:b6:
c1:73:1f:38:03:32:d9:51:2a:9d:d5:dc:c5:6a:62:b0:44:ee:
e4:75:c1:07:5f:a2:3b:32:9f:e7:29:c7:30:32:31:de:2a:3a:
6f:8b:19:79:f6:bf:03:65:3a:34:f1:08:67:93:d0:57:a2:90:
ad:89:f0:8e:c4:37:2b:f8:0a:44:c8:0a:d0:0f:55:d4:e7:db:
97:52:d1:8e:e9:c0:92:1c:30:53:df:79:5e:96:7b:14:73:19:
09:77:a0:da:90:f0:9f:9a:dc:c9:a9:ab:cb:1f:aa:a6:2f:14:
b4:59:12:06:c7:2f:7d:7a:c0:30:e5:6b:53:51:e6:ec:9b:b8:
55:32:21:73:9a:37:08:0d:24:87:0e:f5:54:4e:c5:07:a5:a6:
8c:fe:9d:3d:65:63:ef:c5:27:f3:62:72:97:c1:54:b5:8a:ba:
f2:1d:88:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUMxMDAxMTAvBgNVBAUTKDMwOUEyQTM2NDMzNEE5RERCQTRBNkQ0NDA0MUQ3OUE1
RDMyQkFGQUIwHhcNMjYwMzI1MDAzNTA0WhcNMjYwNDAxMDAzNTA0WjAYMRYwFAYD
VQQDEw02OWMzMmRiOS0zMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeY9tVBekDm21MAy0Is6yoOW/HNzjrgMyzdGKLEBR1Yk8rVQXzSjtvaY0OLC
e1LgfycJipqLTFOIZJdGP2r1US4hZivmp/XuD3lYzLNFZj6KMBFKCFR3dTlsA5Rp
A0Y0xE0qadx4TSccCCJnEWSu7nCB8lssBQsdjqhUJUxe1Nz766wnvmkzxsOHFF0O
cGe/D70rshRNj/EN1blxx+EUnom+ZNvDsSoz5HDLBPWasI5AoAv6Mmm8Rd9Qs+Pa
CR4th3fpWIONw7ekIESTaJIvbPCdPNQC6HR+Ktw8nJ7dRCIQ+yW2O6xHh6wu7hKS
z3l1ajXgM8YIsKcd6pnTz5LTkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBlbgvx9
gMZJ+Rh+Zs+jMGGO5Hm/MB8GA1UdIwQYMBaAFDCaKjZDNKndukptRAQdeaXTK6+r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzEwMC9FNDNEQzVDQUYy
QkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFkMjZTbTFFQkIxNXBkTXJy
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01Kb3FOa00wcWQyNlNtMUVCQjE1cGRNcnI2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzEwMC9FNDNEQzVDQUYyQkMxMUVDODhBQzk0NTJDNEY5QUUwMi9NSm9xTmtNMHFk
MjZTbTFFQkIxNXBkTXJyNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfvuWFJhKlmLt4GvzecNpVQkeUd3P7LajaG7nTOuyBg90hu7sMmvsleDIKVgM
WHynVlZ4ZZq43P1BLBzUwNfEXKaauQb3C59ixiEXCXcZ0gFzK0UqWuQHoUi2wXMf
OAMy2VEqndXcxWpisETu5HXBB1+iOzKf5ynHMDIx3io6b4sZefa/A2U6NPEIZ5PQ
V6KQrYnwjsQ3K/gKRMgK0A9V1Ofbl1LRjunAkhwwU995XpZ7FHMZCXeg2pDwn5rc
yamryx+qpi8UtFkSBscvfXrAMOVrU1Hm7Ju4VTIhc5o3CA0khw71VE7FB6WmjP6d
PWVj78Un82Jyl8FUtYq68h2IvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:05 2026 by rpki-client