
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
File: mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json)
Hash identifier: G5yG2d/gg4fJxbjbFdtlgPRjryiUPrawUuI7uvKq2Cg=
Subject key identifier: 4E:E7:5B:AD:DC:76:86:BA:BB:96:FC:19:FD:D4:BF:99:AE:9F:48:F0
Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D
Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
Manifest number: 6B
Signing time: Thu 03 Sep 2026 08:13:35 +0000
Manifest this update: Thu 03 Sep 2026 08:13:34 +0000
Manifest next update: Thu 10 Sep 2026 08:13:34 +0000
Files and hashes: 1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: GDZW2OQSw1n9OcuPScsyi54SX7kKafU0jicu/h2wTWk=)
2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl
rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D
Validity
Not Before: Sep 3 08:13:34 2026 GMT
Not After : Sep 10 08:13:34 2026 GMT
Subject: CN=6a992c2f-0207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:29:e5:d9:48:75:87:70:71:9d:3a:b2:83:
f4:57:66:d3:29:84:9f:a0:01:60:3f:04:02:81:4f:
8d:39:27:e7:8c:55:ed:4f:b5:c0:66:b7:b7:50:45:
48:68:f4:3f:85:86:91:f5:a1:7c:6b:28:68:bc:0b:
56:dd:ad:72:ef:19:76:be:11:ed:20:86:5b:16:73:
5f:25:13:77:8a:ae:68:1c:93:9d:91:9f:8e:96:cd:
cb:28:5c:e7:63:a9:63:32:c3:7c:9a:14:6b:a3:b0:
c5:cc:61:c5:f7:6e:21:d6:57:be:8f:91:b5:7a:ea:
5b:67:e9:15:9e:eb:78:8a:4f:be:6a:07:86:70:d7:
f5:e5:9c:5a:80:21:40:dc:0b:66:b3:57:69:70:e7:
8e:65:85:8b:fc:df:b4:14:c7:89:c0:f6:33:72:34:
06:8b:ec:f7:c9:04:13:af:29:1e:d5:d5:4b:42:7d:
96:d9:3c:5c:03:6c:f4:0c:d5:4f:a7:92:cb:e1:55:
f0:68:b3:55:a9:3c:5b:a5:48:6b:c3:1e:49:61:11:
9a:90:6e:c8:ee:46:85:5d:94:8f:37:5e:52:d7:79:
82:73:40:27:c1:8d:2f:7f:ba:dd:48:31:0d:6c:d3:
05:68:e3:37:30:a4:ed:be:94:c4:a3:f8:24:26:0c:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E7:5B:AD:DC:76:86:BA:BB:96:FC:19:FD:D4:BF:99:AE:9F:48:F0
X509v3 Authority Key Identifier:
keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:34:88:46:83:36:94:6b:25:98:11:8d:1e:89:08:32:f4:
91:27:77:36:5d:4d:0b:25:e7:8c:9c:82:36:37:9f:21:18:f4:
68:14:d8:6e:56:5f:b5:05:9b:7d:0e:0f:6f:e8:0a:73:26:49:
89:8a:ac:10:2c:cd:f3:68:95:97:1e:34:66:ef:7c:86:97:99:
3d:f9:9f:c3:20:87:21:d7:d9:e9:a2:09:48:b4:f0:c1:3e:4f:
75:c7:b5:2f:52:dc:af:d0:c6:b7:ef:f9:23:4d:5d:f4:72:5e:
99:1b:35:3d:7c:c9:fb:6e:b7:4c:b6:0b:c2:2d:21:0c:10:19:
35:46:6a:5d:27:6b:5d:c9:ee:ac:1a:2e:5f:64:8d:75:ef:b7:
b7:df:da:66:11:3b:60:e6:ce:8f:48:44:af:a8:c1:3b:05:c9:
b4:3c:07:2f:bb:64:6a:83:e5:42:81:6e:c4:ec:0b:21:76:81:
51:1f:d1:53:8f:eb:9e:ac:81:6e:ee:4c:99:83:ca:34:d6:9c:
76:41:d5:39:e7:8f:78:5d:7f:e8:6e:27:ed:7f:ec:84:e6:78:
42:8a:59:2b:46:5f:25:3e:ae:23:69:0f:07:01:f3:2f:fa:fe:
f6:1d:b1:a7:a1:c9:65:24:6c:02:d0:8b:5f:d6:a2:2e:b2:5c:
c1:21:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:42:22 2026 by rpki-client