
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
File: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json)
Hash identifier: S0iJlK8IjIyIeHc3fICt0rVU0Vwn4hEXh251b1o2AZA=
Subject key identifier: AA:AA:2E:93:53:91:A7:36:CB:21:9D:BE:CA:C1:79:2A:60:94:6A:62
Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
Certificate issuer: /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
Manifest number: 40
Signing time: Wed 13 May 2026 08:37:34 +0000
Manifest this update: Wed 13 May 2026 08:37:33 +0000
Manifest next update: Wed 20 May 2026 08:37:33 +0000
Files and hashes: 1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: ASp+ycTjp8iAZPilvVq1ChER3hkolh7wNcuE2Lex6JY=)
2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Validity
Not Before: May 13 08:37:33 2026 GMT
Not After : May 20 08:37:33 2026 GMT
Subject: CN=6a04384e-3e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:ba:54:bc:27:d7:d6:5e:79:d3:fd:cc:3a:
ab:cb:e8:9f:9b:eb:5b:07:73:23:0f:5a:12:24:80:
fc:c6:11:e0:a6:93:db:2f:b0:81:99:39:28:af:8f:
74:87:38:b1:9c:a8:f4:85:16:dc:08:74:4e:16:5e:
e8:d5:c0:7b:6d:d4:52:65:b0:6f:dc:49:06:4b:81:
a4:cb:68:16:ce:ea:07:c4:ad:c8:f9:16:c3:bb:18:
35:a8:c4:31:7a:ef:a0:2f:96:d7:73:7d:05:e4:5d:
a1:7a:9b:29:40:95:74:9e:6c:7a:81:d0:64:c1:ea:
4d:32:bb:3f:41:f0:cf:25:69:9d:30:68:d3:d6:17:
2c:25:bd:08:fc:c3:e1:9a:af:40:39:4d:b2:3c:60:
17:59:dd:0e:5e:68:ca:a1:60:fd:2a:bc:47:4a:78:
dc:48:cf:92:62:e3:7d:57:a0:b5:65:b1:c5:19:84:
03:8a:57:13:0e:e5:6b:e6:3d:b7:16:af:6b:06:a8:
ff:c2:23:fe:e0:38:44:b6:ad:a2:a3:0b:79:e3:a2:
e8:2d:d3:e1:49:c1:bf:c1:5f:a9:24:18:87:66:b5:
57:4c:3e:02:70:b9:50:de:e2:8f:c9:9e:61:73:84:
c6:ab:e6:97:80:55:ab:3f:47:73:30:35:65:ee:55:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:2E:93:53:91:A7:36:CB:21:9D:BE:CA:C1:79:2A:60:94:6A:62
X509v3 Authority Key Identifier:
keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:ba:01:47:99:25:14:01:23:20:78:a2:05:a2:c2:2b:66:85:
7b:a8:69:b4:db:99:d4:f3:10:ca:a2:0f:c6:ad:40:6e:02:78:
a3:ae:fc:70:99:d9:7a:a9:3c:f5:5a:d8:7f:d8:db:1f:a5:06:
f6:37:5b:15:e6:bd:9a:d6:1b:fd:4c:af:33:47:57:9d:59:9d:
83:e2:45:30:f5:3b:69:51:75:d2:72:66:cf:24:3e:f3:5e:19:
18:3f:2f:7c:8f:a0:2c:5a:fb:43:b8:cb:4b:e3:78:08:6d:d3:
5f:d3:64:9b:c3:41:86:b3:43:08:8c:4f:3d:b0:2b:f5:20:70:
11:7e:50:14:7d:04:3c:49:56:ee:ef:15:6e:c3:57:ae:05:18:
62:eb:ef:ad:5c:a9:c9:ed:56:ad:70:5d:c5:1a:fe:4a:f3:61:
ff:3c:b3:aa:97:aa:13:29:0b:5c:10:7e:09:fe:35:0b:95:c0:
3a:f0:ee:01:17:ac:67:6d:98:07:c7:26:db:09:5c:db:b2:9d:
1d:27:76:d8:c5:e5:24:a0:be:8c:8b:59:8c:ba:8a:92:a9:0b:
62:e0:82:0a:ea:e3:3f:de:94:66:36:11:32:12:62:93:05:3a:
29:10:a4:1b:68:75:c3:36:65:0c:ed:10:f4:54:d0:e0:df:32:
26:c0:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:53 2026 by rpki-client