
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
File: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft (raw, json)
Hash identifier: tLLsXY8UtHxbH7mVZOzDWDsK8F/TDS8+8KlTqj8boRI=
Subject key identifier: 86:3A:D7:78:78:9F:41:E7:9F:54:46:97:9A:E5:C4:5A:28:BB:6D:75
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
Manifest number: 93
Signing time: Tue 21 Apr 2026 08:01:41 +0000
Manifest this update: Tue 21 Apr 2026 08:01:41 +0000
Manifest next update: Tue 28 Apr 2026 08:01:41 +0000
Files and hashes: 1: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl (hash: IMfYAimKfZ3GQHm5qLs2uIHY3Bsa0fCyjPSla3R4wic=)
2: D008EA4AC92211F0AD92BA21C4F9AE02.roa (hash: C7uwuCI7TqrSFDaQH8Zzgy3OnejNXfnU7UwlS3rMRx4=)
3: 9E1FAF62C91A11F08AC0C673C4F9AE02.roa (hash: k/R5dEj2eRfr7v4Cwra7e+lRrjtz7qmR7/pXUFo+/fk=)
4: B2815168C92411F0B6E88126C4F9AE02.roa (hash: CKGad+jxEPQI1Q563YDVR4xdQQ2X4PcTAVEPopEqkPg=)
5: 7D679C84C92511F09CF68054C4F9AE02.roa (hash: S9XUSJnxKvgsBDvTpONrUcHMGtxkSO4X3tK4EZVr99k=)
6: 230E492ECB6711F0991B7E4FC4F9AE02.roa (hash: tNXsHZohUwAzxEAZYS9aP/mod2gm0YLp4U1BMbJHsAQ=)
7: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (hash: DHpdbRF2Zso6P1hxGHzUsRdlrbKQ33Y/CNHuuhJjb5g=)
8: B3994B8CC92411F0928E8126C4F9AE02.roa (hash: yEb+i+mak4WjK+zJpb4ckWnaPd4JzdPaxKZm8fn0XYU=)
9: A0000D2CC91A11F08D74C673C4F9AE02.roa (hash: sY76HWNe2DtCJtYS74CJx7prfOKVaNPpOF+PUbbT4H0=)
10: 1C2DE6A6D4A311F08D323E54C4F9AE02.roa (hash: tfqU0yp7k06G8a+YLVOyxW/4efWaKePEWJ7Jmic77aU=)
11: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (hash: tyQ+cSqsH2Qv0ddD7XoDmKPDoTkmyW/CRBZ+upSwUfo=)
12: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (hash: J+N6n3SeJ3oLYT75VTw2zC42AXSFHd8KnFgk9GXKxmI=)
13: 5537463AC91911F0AFA34C6DC4F9AE02.roa (hash: +Aqpgsv63vqmtQkR3ggdxV7iptUt9Fzgpnq420IOOtc=)
14: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (hash: /+8j5V7Q4inRuiyHFTWZNWPR7MOmulWdNP3/6QLql64=)
15: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (hash: 5dwmeSZ0SRVIGYAiO2cL5WhMdIRKKwW4wqbG2GaMUhM=)
16: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (hash: AgB/Lpuse8T/z5cV67IzFShDTNVxyKAZ8KwUvRhawFQ=)
17: B2F27AFAC92411F09F068126C4F9AE02.roa (hash: 18KHmFviCpW+1MpSyrjZy2QFKZiIGjy/6kV7DRcX0Y8=)
18: 9E825176C91A11F0876AC673C4F9AE02.roa (hash: d71K3UhmJpGSIPnHwtXjuIVmSy3U1s/D91e+1fG5beE=)
19: B40A9A4EC92411F09FAB8126C4F9AE02.roa (hash: 3N14qaLKIE8BN0vWJd2KtmivGDsUthfcKYgKyJWVe3U=)
20: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (hash: hVwh2ep8Iw7o7hX3MNdhNDewDGbex1WLUmhHf+4i9PI=)
21: CF90DFC212CF11F1B02B4C33073D8C67.roa (hash: 4vEQszLqSUSi5HdPNVAdCQg1VP3AugiHQg4qbzxjlik=)
22: B1E31BF6C92411F087908126C4F9AE02.roa (hash: GQFH/AinoWYWy/+S33nOX1sOOYYuDreBoZl3vsEFu7k=)
23: 9F9D4E9EC91A11F08745C673C4F9AE02.roa (hash: iYpQ7cVbxOGpGyj+MLYh3y7Qiox2JCzWYbEYeJID7GU=)
24: 567E4552C91911F0BB194C6DC4F9AE02.roa (hash: BXcg8YArXJ5CmD6evpZM4dq8jMTCCVwQHO6BvkW3b7g=)
25: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (hash: ZW6jL59jikFz0FLaafnNnq4L3V9q7AF9K/n1i2MST+s=)
26: 56F1C6BCC91911F08B394C6DC4F9AE02.roa (hash: 9wQRu1QKNg69dDtFHpg0T3l3JfjisxEs+Y4cuvLOD4o=)
27: 58EF9BECC91911F080D34C6DC4F9AE02.roa (hash: BGmFZ9dRfD8EZt0V672OP6EF10Q8PY5YgUnIZ7TDMZ4=)
28: 576F51B8C91911F0AB974C6DC4F9AE02.roa (hash: B7o39MCNiwPkqimijPdHtCcLEzghu38rFNT9tzx72Xo=)
29: B4B21A80C92411F099228126C4F9AE02.roa (hash: rjpeXMm4lHb5Ck0Ms0tdS2iF+f13HUBBUzVVJWV4PPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Apr 21 08:01:41 2026 GMT
Not After : Apr 28 08:01:41 2026 GMT
Subject: CN=69e72ee5-478a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:4d:1b:fa:84:72:05:62:b3:3e:4b:4d:4d:
00:4d:3a:4e:d1:3e:03:50:c7:e5:52:91:06:69:36:
e2:66:8f:f8:59:b1:5f:cc:2e:15:04:d1:dc:c4:dd:
df:92:3c:bd:c6:0f:16:f3:e5:3e:27:0c:56:c4:16:
1f:af:34:20:8f:98:6f:a5:b0:14:d5:6c:c9:bd:5f:
dc:37:63:5d:7a:26:ed:90:c8:fe:2e:e0:e3:fa:70:
9f:85:03:0e:28:29:11:f4:13:1d:96:35:81:52:b0:
73:1d:28:51:ec:93:f5:93:ce:4b:9f:90:0a:04:9d:
9c:99:38:ee:bd:ad:c5:f0:a7:2a:61:cc:7c:a4:1a:
24:c0:0f:f8:6f:ab:97:86:c5:bf:4d:6f:20:ff:ef:
56:3c:18:32:01:af:ac:47:9a:0f:6f:ce:33:ff:c5:
c4:a2:87:dc:fc:14:77:d1:d6:b1:67:e5:a6:2f:9f:
61:e3:16:51:9c:ad:35:12:af:89:8f:db:c9:d0:5a:
69:3b:94:7a:e2:76:b2:95:7a:8f:9b:c6:39:a0:c8:
a1:dc:c7:88:9c:eb:95:bb:17:20:0c:15:7b:64:fb:
2d:80:02:c3:67:10:5b:f0:a0:d2:46:6f:b7:78:d6:
80:9d:33:47:7f:b6:a3:25:c8:45:3d:6e:59:78:4c:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:D7:78:78:9F:41:E7:9F:54:46:97:9A:E5:C4:5A:28:BB:6D:75
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9d:92:e3:fc:21:84:9d:83:67:1e:c7:98:94:6d:e0:c9:cc:
39:d8:55:f3:2c:ee:8c:7b:97:45:6e:a3:4c:21:95:99:5d:30:
f4:8c:1c:88:05:a2:e7:1a:e4:2c:91:df:19:65:d9:01:a3:d2:
19:fe:54:4e:83:66:9a:94:5c:fc:2e:49:a2:9a:f2:14:c8:62:
30:d2:5b:30:e2:02:4c:b9:23:a3:bb:f7:83:bf:1e:97:42:57:
52:56:e5:ef:54:75:e2:82:f4:eb:bd:f2:e6:c8:ea:cc:76:8f:
eb:d5:ed:d4:c9:38:14:2d:0d:f7:c5:35:fc:7d:62:48:ed:61:
04:65:f1:13:c2:1b:3b:8e:39:aa:59:1e:98:ce:b4:92:3a:90:
46:f4:67:2d:07:cf:9e:c2:9c:3c:1f:9d:49:7b:08:4f:93:94:
b4:e1:c9:95:a3:21:fe:75:54:0c:f5:a4:cc:15:40:31:90:c0:
dc:33:23:36:e2:21:17:90:54:00:33:ac:35:a1:07:00:16:e1:
5b:65:1a:97:60:dc:03:8b:6c:4f:9f:a5:08:d5:7d:0c:49:f0:
1f:f9:54:b2:04:00:1c:2b:be:48:f6:25:38:66:79:5f:7a:84:
65:fa:28:a1:0c:7b:6f:a4:80:3a:0b:57:07:71:3a:cb:f3:7a:
dc:16:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:29 2026 by rpki-client