
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
File: mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json)
Hash identifier: 0MaV1vlrgdnOlBhwbsEsHq01eLLK8OCyd/1QZFxNLuA=
Subject key identifier: 94:A8:CE:21:9E:6F:8F:8D:FE:4A:10:D5:9A:5D:CC:42:C4:B8:C3:D9
Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D
Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
Manifest number: 87
Signing time: Thu 29 Oct 2026 08:24:14 +0000
Manifest this update: Thu 29 Oct 2026 08:24:13 +0000
Manifest next update: Thu 05 Nov 2026 08:24:13 +0000
Files and hashes: 1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: hiOObSVIPspOe4461/5XBJzU3cpo9be1BilZBRvm9EM=)
2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl
rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 08:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D
Validity
Not Before: Oct 29 08:24:13 2026 GMT
Not After : Nov 5 08:24:13 2026 GMT
Subject: CN=6ae302ad-fc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:c5:ef:a5:95:0d:ab:f7:e2:63:75:53:80:
35:41:5d:e5:18:96:d4:c5:b0:c2:bd:7e:11:1a:5e:
2f:43:e6:97:e7:2b:ec:73:e1:24:c3:23:74:fe:68:
e0:d0:09:68:ef:94:87:7e:39:11:fc:1d:23:d9:aa:
55:77:76:d6:3f:52:63:49:46:08:83:ed:3d:63:28:
84:63:b3:8b:ff:c2:73:25:eb:a8:27:3f:41:7a:d9:
00:69:91:4f:68:90:9c:1a:40:bb:eb:06:19:cf:9b:
26:91:2c:14:8b:19:2d:bb:03:ec:4c:81:d0:55:e4:
89:1c:11:b8:68:7f:ea:f7:e9:98:13:18:a5:f4:55:
dd:0b:d7:0d:17:d5:22:6f:eb:36:f0:d0:f3:0d:4e:
30:fc:ca:42:2b:77:8f:b8:07:04:a9:cd:c3:66:12:
75:9d:f1:3c:bf:2e:6c:d4:c0:f0:5d:15:09:f8:3f:
a5:5a:5d:99:7e:7f:22:c7:c9:7e:72:6a:1b:ad:a4:
e5:b3:e3:be:43:d4:3d:f4:19:a4:96:cf:21:d7:1d:
6a:9c:6f:a0:c8:bc:ae:49:8a:c8:b7:3d:d4:7e:6f:
3e:b1:7c:e2:92:99:e0:21:0b:96:6a:d4:9d:47:76:
94:3c:94:1b:76:e7:fa:7b:1f:5a:d2:de:68:64:7e:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:CE:21:9E:6F:8F:8D:FE:4A:10:D5:9A:5D:CC:42:C4:B8:C3:D9
X509v3 Authority Key Identifier:
keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d4:fc:31:5a:9f:af:aa:53:8c:64:9a:05:02:61:b5:aa:5d:
0d:09:79:ec:de:b5:71:68:ca:4a:ef:89:e9:70:63:05:2c:d9:
e0:68:04:c6:df:93:61:4b:a9:7a:cf:74:07:02:c0:f9:5b:9d:
43:a5:01:57:bd:12:4e:50:fb:4d:bf:98:07:45:91:13:06:3e:
98:c0:e4:44:1a:fb:e6:5e:39:f3:e1:2d:a1:1d:a0:66:36:c6:
f1:9c:35:da:46:eb:2f:a3:bf:16:6e:3b:d5:e7:1b:9a:26:22:
fb:06:30:40:a5:19:13:5f:92:3b:8b:a1:0b:dc:d2:7c:f1:6b:
60:74:1e:b2:96:ce:ba:d1:91:f3:bf:55:ec:a7:1f:80:25:77:
9b:16:e4:48:14:b7:cf:b3:55:48:70:cb:0b:bd:a7:10:ac:07:
6e:e7:70:67:97:54:d3:fd:75:cf:73:57:47:15:96:48:20:6f:
7c:16:06:54:ae:a1:11:2c:b2:0f:12:d6:bf:73:8a:03:83:66:
d9:16:3b:ad:8e:2f:65:37:a0:ab:5c:42:b7:16:a4:df:a2:fb:
57:28:c3:81:78:18:a5:fd:fb:47:20:95:48:f1:e8:23:47:6e:
73:cb:e8:6c:e6:6f:46:2c:2c:b8:af:ff:3d:7c:24:13:8f:dd:
81:e9:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:17:10 2026 by rpki-client