
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier: w2uPTH5Ms5Gwo5BJBQ81hQv68/QcxndNnXIl53Vr44Q=
Subject key identifier: DB:2F:47:10:55:FD:35:67:0D:5B:4F:06:C3:0E:C9:7B:AD:1E:C9:9E
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial: 0CB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number: 41D2
Signing time: Thu 26 Mar 2026 15:04:10 +0000
Manifest this update: Thu 26 Mar 2026 15:04:09 +0000
Manifest next update: Thu 02 Apr 2026 15:04:09 +0000
Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: ugPu9WDI48MVY2Xfw7U7wNFSADUrX6UtUbGKFJ7r5/Q=)
2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: TEur0qITEPg5x6Wpffov2L2nrpJe0RCHF8zhwpKPkvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3257 (0xcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Validity
Not Before: Mar 26 15:04:09 2026 GMT
Not After : Apr 2 15:04:09 2026 GMT
Subject: CN=69c54aea-050e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:b0:56:d3:53:21:0e:43:2c:7a:52:54:d3:
b9:09:82:62:0d:f7:cf:32:d6:de:4e:c9:f7:3c:55:
92:99:3d:11:93:34:e8:99:be:6b:06:e5:58:0e:58:
fa:3c:96:df:90:00:17:2b:88:df:d8:76:38:a1:cd:
04:d3:14:d4:7e:e7:d7:6c:5c:08:01:52:a0:35:93:
31:49:df:f4:6e:08:03:9d:e5:01:42:58:83:b8:0f:
50:40:63:e0:30:aa:1c:3b:a6:fe:5e:60:0e:77:69:
ab:57:22:7e:e7:cc:e3:2f:aa:50:8d:60:43:60:73:
b8:62:3d:05:98:2b:83:63:0f:81:5b:10:f0:cc:76:
b5:d7:91:95:cc:af:3c:f3:eb:6e:97:55:84:02:70:
d0:5e:7d:b6:3e:c9:c4:bd:ea:66:d6:97:19:9f:5c:
47:ef:8c:82:af:5a:35:4b:fb:13:89:c8:8a:2e:8b:
4f:2d:2d:1e:1c:61:0a:fe:c5:1f:64:88:ee:69:a1:
2a:47:64:d1:bd:f6:5b:c8:0e:bb:6c:c9:c7:bc:2b:
b3:99:85:25:97:a0:36:93:2f:63:86:dd:f9:60:17:
c1:12:55:7d:1e:b2:a8:51:81:9a:66:e0:3b:5e:f4:
0d:43:39:e5:a7:06:54:34:16:81:7f:cc:d6:e5:88:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:47:10:55:FD:35:67:0D:5B:4F:06:C3:0E:C9:7B:AD:1E:C9:9E
X509v3 Authority Key Identifier:
keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2f:d6:27:20:43:a8:6d:2c:f1:49:7c:dc:ce:06:c6:18:1a:
dc:de:bb:2e:86:b4:78:a5:77:5d:e5:ec:57:1a:34:cd:46:cb:
50:f5:24:d6:bc:d1:fb:50:b4:0b:a3:23:39:bd:6d:06:90:10:
79:63:3d:08:65:ac:18:53:af:7b:26:21:e4:26:43:57:c2:97:
19:22:2b:1a:33:7d:22:75:bb:2e:21:39:21:e5:cb:6f:97:8c:
4c:ba:39:26:15:f9:7a:aa:c6:84:69:c0:09:a7:7a:50:0f:14:
42:b0:ef:4e:08:4e:5d:40:cb:c5:b3:d9:0c:11:0f:53:ff:66:
9f:37:19:21:0b:15:ae:88:22:c9:17:22:05:a9:eb:e9:1d:1b:
14:fc:aa:00:14:c6:02:39:e7:68:a6:03:2e:41:6a:c2:3f:c8:
1d:30:e4:99:6d:6c:96:7e:d5:78:73:a0:04:ac:e9:44:bb:b8:
07:49:51:f3:0f:64:2d:2f:d3:01:ed:b3:1a:18:ac:7a:4b:fd:
55:8e:64:95:9e:4a:43:a2:3e:5c:e2:62:14:61:53:43:c1:c5:
94:6b:68:9b:a9:0f:04:64:ba:2e:fe:6e:4c:b8:71:28:61:f7:
18:6e:94:b4:f8:e2:5d:1d:ed:8b:6d:b0:a6:b9:54:1c:ec:83:
6e:e9:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:58 2026 by rpki-client