
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier: hJC95a/rQfDaptv1aT7Uw0fMDkMdWuan9HZb5b/bcK4=
Subject key identifier: F4:E8:3A:16:35:ED:DC:23:7C:0A:C3:DB:24:F5:1F:45:18:9E:E9:A0
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number: 0B18
Signing time: Thu 14 May 2026 19:24:05 +0000
Manifest this update: Thu 14 May 2026 19:24:05 +0000
Manifest next update: Thu 21 May 2026 19:24:05 +0000
Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: P3m2otYlqihtpHkKhdIWd3VbdyXsGiE2dPDHOQvZBFg=)
2: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
3: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
4: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
5: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
6: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
7: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
8: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
9: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
10: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
11: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
12: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
13: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 19:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2914 (0xb62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: May 14 19:24:05 2026 GMT
Not After : May 21 19:24:05 2026 GMT
Subject: CN=6a062155-b718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:87:e6:64:c5:e0:7a:a5:68:6a:d7:c0:85:35:
7c:3d:b0:7b:9b:72:52:70:0f:1d:d7:11:74:47:8e:
04:83:5c:ef:f1:b3:83:14:29:84:9f:f7:06:7f:b8:
2b:fa:79:d1:77:92:a4:2a:64:71:76:e7:a1:23:30:
73:d8:a3:be:d8:2b:e1:5a:b5:9c:cc:ff:83:e6:0d:
61:ce:59:42:a4:38:5a:89:ff:83:41:15:70:7c:8c:
c7:fd:0b:4a:b6:25:aa:48:86:01:2b:78:35:a7:6b:
78:66:c8:bf:ae:72:14:0b:46:20:eb:b0:d5:e2:31:
10:f5:e6:ac:df:66:1a:47:dd:af:cd:3d:f2:c5:ad:
93:22:3c:14:7e:87:76:29:6f:b7:db:8d:14:29:b7:
05:3e:e5:91:0b:1e:56:bc:f6:e4:ed:eb:16:5b:a2:
1a:44:4e:f3:ca:23:37:aa:56:a1:53:49:3b:a9:d0:
b0:d4:ea:3d:21:2b:c7:a9:3c:a4:b3:45:12:49:cf:
93:c4:2a:e9:e6:b2:f7:42:75:16:38:25:e1:1b:4b:
24:cd:20:39:22:f7:49:f7:cb:c5:ed:59:4d:2e:e6:
93:53:c5:cb:75:92:c2:68:2a:a5:0e:60:84:b6:3f:
83:32:f6:ae:fb:4d:19:55:6a:d0:82:e4:20:ac:ac:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:3A:16:35:ED:DC:23:7C:0A:C3:DB:24:F5:1F:45:18:9E:E9:A0
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:69:68:28:5b:eb:39:57:54:83:14:ba:92:61:3d:eb:5c:d1:
79:17:56:10:d2:2a:52:0f:a4:c1:0e:f5:21:10:fb:9f:74:83:
fe:25:1b:fe:32:bd:4e:0b:66:5a:53:a3:db:9f:a9:fc:21:ea:
39:04:c2:d8:4b:eb:ef:84:c4:2a:3b:14:61:f5:a3:74:f3:63:
26:e0:7f:11:51:9b:80:f0:d9:9c:54:48:8d:a8:46:38:e6:57:
d6:e1:3b:c1:b7:44:17:aa:b8:5c:e4:54:9e:2b:98:1c:d2:42:
6e:4d:a7:fb:48:37:18:65:e6:72:57:8d:e2:b9:16:21:6c:d2:
99:2c:5b:7a:4e:e6:96:87:35:2a:13:59:54:7d:41:eb:28:3a:
48:7b:5a:4f:f1:35:f6:8c:df:93:1d:3b:f9:8a:3a:52:00:29:
c8:5e:b9:66:d4:fc:c7:aa:56:10:74:1a:36:32:13:36:ab:48:
e3:c0:b8:f7:07:53:dd:63:71:df:d4:c3:fb:f6:5b:68:25:58:
1a:ae:be:e5:71:42:a6:cd:73:01:6f:aa:17:ff:56:63:f6:62:
da:95:05:a3:e5:ac:64:63:93:8f:83:18:74:61:34:cc:50:b0:
e1:49:6e:48:df:cb:0d:41:d9:cb:52:86:39:d7:45:bf:ef:80:
dd:bb:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:46:44 2026 by rpki-client