
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier: PovUYSU+XnQF3tQES+AsyjwT2Pv7PD0NUtVrR0UBECg=
Subject key identifier: 51:1B:33:56:75:E8:A9:73:EF:39:C7:59:24:CD:14:7C:C4:89:19:64
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number: 0B01
Signing time: Mon 30 Mar 2026 19:22:40 +0000
Manifest this update: Mon 30 Mar 2026 19:22:39 +0000
Manifest next update: Mon 06 Apr 2026 19:22:39 +0000
Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: zkR8bXzqa6Gpq2LbzNJHv/RmfFZpgBU4YQXRDbamN78=)
2: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
3: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
4: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
5: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
6: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
7: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
8: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
9: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
10: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
11: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
12: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
13: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2891 (0xb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 30 19:22:39 2026 GMT
Not After : Apr 6 19:22:39 2026 GMT
Subject: CN=69cacd7f-705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:bb:4e:63:02:db:57:9b:54:a7:ab:e1:5f:
c3:bd:e9:a5:af:b4:58:fc:03:94:e8:c5:01:eb:87:
0c:eb:5c:cf:24:01:8e:f9:ee:c0:ca:b4:ca:6a:e6:
ce:4d:a7:99:ec:fc:50:b3:a7:20:86:44:51:d5:75:
4e:c2:ca:77:e8:42:5a:bf:36:81:7e:d5:f2:c9:de:
83:fb:15:02:ed:97:ec:a2:3e:7b:8d:2e:e6:5a:10:
00:9c:70:43:84:d9:f9:12:a9:91:40:90:63:2b:d3:
d5:8f:fb:58:0f:ae:45:e2:5d:7a:16:ab:2e:80:fc:
b4:07:72:2f:de:12:d3:1b:d2:72:b3:0e:a0:c4:8a:
16:bb:4a:15:97:8d:06:8b:4d:33:f6:d4:93:ff:67:
46:93:1c:37:90:72:58:fb:44:c0:2f:2f:a2:79:0c:
3e:cd:bd:66:32:b8:cd:a0:36:4d:3b:b6:95:2a:e9:
fe:f9:bb:1f:45:6c:4a:01:dc:5b:0d:ff:3a:00:09:
bb:cd:4e:04:ee:f2:b9:e4:bc:12:19:09:70:7f:68:
5c:79:08:b8:46:39:18:8c:bf:73:80:ae:27:53:71:
0b:82:38:96:64:d9:62:c1:83:d0:f6:45:2a:5a:b6:
8b:f7:2e:59:3b:be:a3:f2:44:ce:60:57:a3:a7:eb:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:33:56:75:E8:A9:73:EF:39:C7:59:24:CD:14:7C:C4:89:19:64
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1a:45:b6:49:24:a0:95:3b:14:ca:3b:4c:1d:e1:62:d0:8d:
9e:fc:5e:01:13:5b:78:aa:22:0b:2a:72:90:47:e2:6c:32:8c:
c5:af:0b:8b:2e:9f:c3:ba:1b:f7:d3:28:d6:a6:15:66:af:d5:
fa:bc:36:b9:2e:cb:b8:95:13:f5:06:92:b1:bd:f2:81:0b:91:
b0:70:bf:50:95:a0:2a:aa:1d:08:05:99:1c:82:cf:8f:33:bf:
b2:66:69:87:02:5e:98:85:e8:1b:7a:fb:61:6a:d7:5e:23:9d:
48:e1:d8:5a:ef:69:17:23:69:53:5a:28:ca:e6:72:2f:51:46:
b3:f3:8e:93:de:d9:01:34:b4:d3:59:dd:c5:82:cf:ed:4a:7e:
c5:41:18:57:69:92:6e:31:ee:b4:29:94:73:46:08:47:c7:15:
b7:33:53:ea:3d:98:76:4e:ed:b9:31:5a:87:0f:c3:34:e6:32:
35:f1:f5:db:20:fa:5f:c6:03:f2:52:18:a5:8f:23:58:37:b6:
8e:24:71:08:8e:21:8a:12:fc:7f:2a:74:8a:dd:8c:7e:0f:6c:
95:8b:4e:d0:f3:06:53:f2:15:1e:ef:20:ef:21:83:13:e5:45:
d7:6a:33:aa:51:02:4c:5e:93:88:2e:95:01:0f:b2:90:ea:1b:
9c:e7:2d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:05:35 2026 by rpki-client