
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier: xvCeiZZciBxrgAR77No35gThzpjottZlxQy+POW7+PQ=
Subject key identifier: AF:87:03:C3:B5:84:79:3F:DB:39:F9:53:78:22:B1:CE:32:2D:31:C1
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0BAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number: 0B61
Signing time: Sun 04 Oct 2026 19:17:40 +0000
Manifest this update: Sun 04 Oct 2026 19:17:39 +0000
Manifest next update: Sun 11 Oct 2026 19:17:39 +0000
Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: KOBdukuEJlZHRdr3S1mfwn1PknGyRDvI8D4jy/yod4Q=)
2: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
3: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
4: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
5: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
6: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
7: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
8: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
9: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
10: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
11: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
12: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
13: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2987 (0xbab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Oct 4 19:17:39 2026 GMT
Not After : Oct 11 19:17:39 2026 GMT
Subject: CN=6ac2a654-9b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:52:a4:e4:cb:55:83:31:55:d0:9a:8a:63:e4:
0d:23:b3:ed:7c:fb:c0:5d:80:37:40:59:2d:4a:88:
7c:4a:c5:6c:a9:33:b3:1d:eb:45:af:21:d6:32:05:
56:e2:5e:5e:e3:b0:19:e5:12:2a:59:6f:cf:87:50:
52:0c:a6:fc:b0:92:1c:cb:34:98:6d:cf:85:8d:67:
49:b0:8b:c1:1e:0e:42:e7:b3:88:3f:4f:54:c9:9e:
0c:da:06:60:c4:78:4d:37:64:5d:68:22:8e:ef:87:
2c:81:ae:38:34:79:4a:86:b5:d3:5e:22:79:17:dd:
43:b1:ee:0c:52:a2:cd:02:94:e9:c9:08:10:76:53:
db:4f:f1:8f:94:dd:97:0e:df:1f:95:55:7f:ee:32:
45:30:e5:a5:c8:48:2d:e9:06:c6:37:a8:9c:1d:5d:
ac:29:65:9e:bc:27:0a:5a:5e:e1:70:77:72:d2:00:
4f:5a:b3:29:96:b5:9c:f8:a0:d0:29:00:71:38:76:
e9:ab:d1:0c:28:f5:72:69:86:86:69:29:33:c4:93:
30:55:c7:55:31:43:7c:4a:06:d2:5d:00:3e:e0:e1:
02:71:25:31:3d:72:40:8e:72:65:6a:f6:ef:b5:57:
d8:fc:80:0b:b8:72:cb:3f:6a:56:e6:6a:bf:29:fc:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:87:03:C3:B5:84:79:3F:DB:39:F9:53:78:22:B1:CE:32:2D:31:C1
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:bf:74:36:c3:09:c5:08:26:ec:a7:23:5e:60:7e:4e:52:
0d:77:a9:f9:3a:4b:46:e3:c4:6a:e3:4f:57:cf:79:44:85:d0:
82:6a:ff:10:40:7e:2d:be:8a:14:35:db:c0:36:e7:f0:dc:05:
c6:6b:39:d8:ed:8b:a3:e4:2d:77:86:33:09:bc:03:e9:98:66:
bb:89:60:6a:62:b2:aa:5d:eb:0b:99:1f:2a:ae:2b:d7:a1:b5:
49:b9:90:86:48:ef:b9:2f:7b:b6:f5:c0:53:86:f9:29:00:71:
c2:e8:aa:f7:f1:61:34:8d:1a:de:bf:45:78:85:77:90:9b:17:
de:99:e8:3a:ec:b4:12:2b:26:4b:d5:47:35:ca:68:b0:2a:38:
41:0d:29:d8:9c:5a:4b:8f:79:e1:28:37:d5:84:d0:39:94:da:
21:7a:9d:8c:31:eb:78:cb:0a:fb:fa:09:57:09:14:58:12:95:
9e:87:8b:86:95:62:db:ea:ae:e8:9f:46:7a:c8:24:49:58:b9:
71:ef:ee:c5:9d:f7:51:cd:20:55:0b:ce:db:48:dd:a3:5c:ca:
3b:be:3b:76:35:34:45:f4:2a:09:21:d4:4b:97:c0:72:be:28:
ed:ac:0f:d1:17:6d:af:1d:53:2e:9e:4f:fa:4c:b5:f6:95:e7:
98:de:84:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4
M0NCRTE4NjcwHhcNMjYxMDA0MTkxNzM5WhcNMjYxMDExMTkxNzM5WjAYMRYwFAYD
VQQDEw02YWMyYTY1NC05YjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6VKk5MtVgzFV0JqKY+QNI7PtfPvAXYA3QFktSoh8SsVsqTOzHetFryHWMgVW
4l5e47AZ5RIqWW/Ph1BSDKb8sJIcyzSYbc+FjWdJsIvBHg5C57OIP09UyZ4M2gZg
xHhNN2RdaCKO74csga44NHlKhrXTXiJ5F91Dse4MUqLNApTpyQgQdlPbT/GPlN2X
Dt8flVV/7jJFMOWlyEgt6QbGN6icHV2sKWWevCcKWl7hcHdy0gBPWrMplrWc+KDQ
KQBxOHbpq9EMKPVyaYaGaSkzxJMwVcdVMUN8SgbSXQA+4OECcSUxPXJAjnJlavbv
tVfY/IALuHLLP2pW5mq/KfyIrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+HA8O1
hHk/2zn5U3gisc4yLTHBMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4
RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX
MC0zWWdHRHRUWkdEeS1HR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgGy/dDbDCcUIJuynI15gfk5SDXep+TpLRuPEauNPV895RIXQgmr/EEB+Lb6K
FDXbwDbn8NwFxms52O2Lo+Qtd4YzCbwD6Zhmu4lgamKyql3rC5kfKq4r16G1SbmQ
hkjvuS97tvXAU4b5KQBxwuiq9/FhNI0a3r9FeIV3kJsX3pnoOuy0EismS9VHNcpo
sCo4QQ0p2JxaS4954Sg31YTQOZTaIXqdjDHreMsK+/oJVwkUWBKVnoeLhpVi2+qu
6J9GesgkSVi5ce/uxZ33Uc0gVQvO20jdo1zKO747djU0RfQqCSHUS5fAcr4o7awP
0Rdtrx1TLp5P+ky19pXnmN6EEg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:51:11 2026 by rpki-client