
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier: nmeTpqJeVdW1VQtiXggUcs+tMXRX6pUVBrpHV0sIYl8=
Subject key identifier: 91:F1:2B:C5:13:C3:A4:30:BB:7C:C6:F3:69:8B:29:26:5A:D6:2B:2E
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number: 0B17
Signing time: Tue 12 May 2026 19:25:02 +0000
Manifest this update: Tue 12 May 2026 19:25:01 +0000
Manifest next update: Tue 19 May 2026 19:25:01 +0000
Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: vZPbz6ePikURhe9xbq1KwJgrFTkxDiZ5ON72vyOs/QY=)
2: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
3: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
4: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
5: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
6: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
7: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
8: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
9: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
10: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
11: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
12: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
13: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2913 (0xb61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: May 12 19:25:01 2026 GMT
Not After : May 19 19:25:01 2026 GMT
Subject: CN=6a037e8e-d77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:fb:0e:96:12:67:6f:3e:58:de:b5:d2:58:
a0:92:5d:4b:18:73:c2:d4:46:f8:cb:b9:fd:19:27:
e3:8c:9f:7e:55:4e:b4:d7:1a:f9:9b:b3:69:e4:72:
b5:b1:76:00:75:a1:cf:94:ba:54:c2:20:12:62:12:
5c:a7:4c:0f:90:a1:b2:03:82:c3:21:64:63:b6:88:
6d:fb:b6:fa:90:03:ab:b1:55:d2:83:9b:25:6c:b6:
c9:91:7a:df:f4:b5:6a:da:29:37:0b:1c:14:01:db:
f7:21:7f:21:74:1b:3d:3f:55:2c:ed:76:d9:f7:b9:
6d:25:24:c2:8c:fb:3c:c7:da:ca:38:e5:e1:a8:4a:
03:f3:87:bf:95:33:25:38:47:42:04:6e:6e:5c:e6:
62:57:2d:07:f5:b0:b1:2d:22:e0:9d:84:08:5f:e9:
99:86:73:05:dc:f9:07:ce:91:4f:cf:08:4f:65:e3:
0c:28:59:ee:eb:91:d7:48:7f:53:7f:12:ac:66:79:
df:eb:6a:3b:31:64:a0:7c:c3:b9:0e:7b:e9:c8:b0:
1e:56:72:cb:08:84:dd:35:8c:62:b2:1c:f4:3e:37:
88:c4:d1:68:14:46:01:f0:5f:f2:57:59:a3:c8:f4:
f6:f1:4b:42:66:79:43:35:96:47:ae:5b:74:e6:24:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F1:2B:C5:13:C3:A4:30:BB:7C:C6:F3:69:8B:29:26:5A:D6:2B:2E
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:dd:b8:48:16:3b:1f:44:fb:8d:18:a8:24:02:18:88:c3:ac:
b1:f0:bc:a3:7c:85:e0:91:99:b2:e0:3f:31:d1:f6:7d:70:6b:
c7:01:83:d7:30:90:e6:ef:b6:d5:35:97:2a:d5:02:14:0f:8e:
ed:6a:12:bb:98:0a:47:98:36:cd:2b:6a:c7:b9:e5:6d:91:73:
5f:e5:dc:a0:8b:da:55:87:30:ef:56:7b:2f:62:4a:9c:14:20:
75:91:02:54:87:f0:32:1f:0c:14:4f:1b:36:e3:fa:85:45:fe:
dd:1c:63:53:16:7c:ab:ac:32:d9:43:38:a0:33:43:95:5f:15:
08:45:59:52:a6:0c:25:52:8f:d5:d1:49:25:41:7a:d4:e0:44:
e1:dc:82:0f:bb:cf:8e:b2:c6:f6:9d:ff:d9:eb:2d:fe:ba:65:
14:17:9d:70:c9:3d:79:48:c1:f4:48:a8:5d:3b:2d:a3:dc:94:
e8:25:79:60:cc:b1:bf:39:de:b5:4a:b5:85:5c:49:3a:24:de:
2e:9c:ab:13:6d:b0:7d:2d:c2:54:fe:7e:4e:33:49:a5:87:dd:
80:d2:cf:a8:d3:82:6d:cb:76:b5:d5:da:71:8f:0d:c8:67:46:
a2:7d:94:7f:4d:96:40:91:7d:53:ba:89:e5:3c:01:5b:af:92:
bc:87:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:43 2026 by rpki-client