
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier: mlh3WHPUchomhF59clJ+i3m5A3fjpJrz336xuJZcVKg=
Subject key identifier: F1:1B:CC:9A:69:6C:58:C4:99:D5:8F:1D:23:6B:25:7E:5B:AC:2D:58
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number: 0AFC
Signing time: Tue 24 Mar 2026 19:12:25 +0000
Manifest this update: Tue 24 Mar 2026 19:12:25 +0000
Manifest next update: Tue 31 Mar 2026 19:12:25 +0000
Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: I4aWlOrRG/cTwXAHHPAYJb0B5ASwNR/kV9JbFP3xJ3Q=)
2: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: pZZtHGFQRbt0wHLJTk6iKV6lnlHB4kiYZ8oDEDgL+Hw=)
3: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: j6vtGdsn58n5PFNIgokVa7egz01S/Wt3cjqK2/oPYCU=)
4: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Ks6wPXQrbbeCTTlosIDswm4J7H1L/F650F9YqKuuo/A=)
5: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: fvHEuQxM7QtSBpohLsHjlXFRVApMH4LnofLEq5KCpls=)
6: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: i+DeWSxP+SUrPsRvRk++UVMLgUpYl/0wKKoB8sZiS1A=)
7: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: 02OkEZdFmEpHGfisQA3gcJEbG2uFhlx+shvED8B5SFQ=)
8: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 9TteqD6INKZgRh3A2cwFyNm4pTulPoLeS0psHfIr0EU=)
9: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: iwYxtbph75PfLUWyrRQ1ZKsYXZDAuMWGHem1wlC1TsY=)
10: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: kLpSmWdSGg8Mg4g60+DwwIcGfuFqFbChFN5SNdpQQCc=)
11: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: yp48JDkpR5TQy5O1NVCB2GBTzUPaSfD8syejqe9qTmg=)
12: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: MJ4t9mNOzArFswvJlj8ONWt12fku2oXbHOQN2lvyrzo=)
13: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: 30Ay1Zbq76x+Zxtcn+jqASaeqsesqa1rZ5wxXWBIbpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2874 (0xb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 24 19:12:25 2026 GMT
Not After : Mar 31 19:12:25 2026 GMT
Subject: CN=69c2e219-05a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:a0:b3:fd:bc:51:5c:f7:11:10:b0:c4:8f:
3d:a8:2a:b9:6c:20:70:74:26:8c:00:ee:e9:26:53:
98:24:8f:6b:d0:fb:63:44:be:ef:65:3f:51:15:c2:
19:c1:1d:1e:ff:42:32:1d:e3:b1:a8:03:d3:2f:1a:
40:2d:f7:3e:7f:ed:59:9f:27:44:37:60:33:25:f6:
e9:20:9c:e4:67:05:20:ca:23:8c:07:66:32:9c:e7:
3b:62:2c:96:8c:ee:cf:4c:a5:0c:2d:a4:85:1d:b2:
65:b9:5b:d3:c4:e9:48:6a:ac:f2:8f:93:7b:af:09:
7d:2b:43:5a:f5:97:53:a1:84:e7:1a:b8:3b:9f:0a:
c7:ed:fc:12:ec:4d:b5:a9:50:2b:b5:4c:f2:1e:c5:
7d:8a:6e:3a:17:2c:91:20:fd:29:5a:92:a0:51:29:
fb:ec:f1:f6:f4:e2:f8:83:f5:11:f2:fc:57:52:c0:
44:6e:c9:66:19:6f:d5:34:ff:b5:3a:d1:35:96:6c:
0f:fc:50:9f:4f:16:c7:42:b3:ed:6e:aa:31:c6:f0:
af:92:99:53:3e:13:20:9d:b5:1a:c2:ba:37:a6:c2:
8a:a0:e1:a9:78:35:f7:f5:40:2b:68:14:87:68:a9:
0b:b2:f0:f4:58:99:0d:60:08:65:c6:03:0f:02:ac:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:CC:9A:69:6C:58:C4:99:D5:8F:1D:23:6B:25:7E:5B:AC:2D:58
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6b:b8:e7:71:04:01:c8:25:c8:7c:f1:0d:4c:50:5a:cc:41:
db:2e:e7:16:1c:f9:57:0c:ad:5e:4c:38:b4:af:80:d1:7f:d9:
44:ef:6a:5b:d5:6e:0b:ec:1e:2d:36:87:08:75:39:cb:36:22:
3b:06:58:dc:57:3d:60:ef:e9:b2:87:01:b4:60:45:49:9f:08:
ad:c6:a9:b6:be:ea:7f:f2:07:49:c7:39:5d:91:53:80:2d:36:
2f:22:2c:20:b7:d1:95:78:de:43:31:16:5b:1a:61:e6:a7:56:
d9:ca:d4:69:78:d6:62:11:71:1a:9d:00:59:78:b7:0a:11:a0:
d6:8f:b7:bd:14:d8:f8:b4:a9:f4:d2:08:48:7c:d2:63:2f:43:
24:84:bc:53:66:1c:08:81:f7:1b:57:54:15:6e:e0:56:ec:68:
54:ad:69:e8:ef:18:0b:ff:a3:71:fb:6a:22:de:0e:4c:d4:92:
7d:b5:9f:9d:17:b7:2d:8e:24:3b:7e:f0:16:08:19:77:ac:53:
91:b5:87:70:7f:84:2f:4e:74:18:d0:1e:b9:00:99:30:cd:81:
a0:85:79:4a:7b:9d:d4:8c:fd:b2:af:8e:81:8f:fb:e3:b1:11:
2e:7d:01:f2:e3:95:09:0b:a1:b3:e5:9f:17:fe:85:08:9d:39:
61:9a:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:20 2026 by rpki-client