
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier: nq54bHC1AsgCFxPxICIoZO6jHiCyNtgyaRxHZBgQ4Vs=
Subject key identifier: 11:09:4E:47:23:E8:E1:32:87:45:21:1F:F1:7D:E9:97:67:25:91:EF
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial: 0D1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number: 4299
Signing time: Sun 04 Oct 2026 15:02:05 +0000
Manifest this update: Sun 04 Oct 2026 15:02:05 +0000
Manifest next update: Sun 11 Oct 2026 15:02:05 +0000
Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: iBHUK029kGE2zJr1PDAoftjxwp0HQuN3mdUzo8SkMgc=)
2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: LEzt89CvLVju98tJMXEY3BB8Z+2hDsrkV3y8xZ+yWY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3358 (0xd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Validity
Not Before: Oct 4 15:02:05 2026 GMT
Not After : Oct 11 15:02:05 2026 GMT
Subject: CN=6ac26a6d-a6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:90:ba:dc:cf:28:d7:07:cb:b0:db:3a:49:
94:d8:3c:fc:d2:b3:06:51:ab:d9:49:a0:73:2a:60:
3c:95:06:c8:a5:d5:54:e4:48:39:8d:bd:4c:4f:93:
32:99:77:2c:bd:6a:ae:02:03:ed:ef:a4:28:09:8a:
b4:0e:5e:6c:cc:c8:75:ca:7b:22:40:15:fd:cb:66:
56:47:86:e6:10:9e:02:7d:10:57:6b:f8:c1:bf:70:
6a:4f:f9:74:ca:41:e3:62:1c:d9:1c:a4:7b:91:e6:
dc:6d:de:bf:f2:57:4b:1d:e4:24:c8:3b:d6:05:bc:
a0:ae:c6:9a:5d:20:45:bf:0f:f8:51:72:ad:07:7e:
a7:a0:0e:8d:88:9a:41:48:f7:b1:82:87:6c:d4:e1:
58:2b:3a:23:3b:53:6a:81:94:1e:e6:ec:68:ae:bc:
ca:01:97:99:d3:09:21:42:e7:35:32:9a:92:61:ee:
67:49:3d:24:1b:aa:fc:f7:03:86:22:d8:14:6d:94:
48:60:8d:76:62:2a:3c:c2:ad:47:bf:1e:80:2b:3a:
2d:dd:7b:c6:36:2f:2b:53:20:13:3a:3a:39:e9:cb:
c2:dd:5e:a8:1a:6c:81:23:ac:b1:a6:46:25:cd:1c:
eb:b8:70:b1:25:63:9a:e0:80:92:c2:40:34:73:f9:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:4E:47:23:E8:E1:32:87:45:21:1F:F1:7D:E9:97:67:25:91:EF
X509v3 Authority Key Identifier:
keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:57:ba:2d:8a:84:ec:f7:96:5a:c8:82:76:94:c8:f0:52:cc:
d1:b5:bc:ba:22:38:7e:b1:9d:68:8f:be:a3:c0:6e:a8:2f:5b:
48:77:25:17:96:bc:68:fb:05:50:24:2a:8b:92:09:ce:7d:44:
07:27:48:b4:6f:e9:da:de:15:8a:94:22:c9:5d:fa:46:6b:c2:
8c:c8:20:3f:63:80:1f:03:97:3a:85:aa:eb:ce:f8:13:37:9f:
5d:bf:b0:c0:be:9f:3b:d1:9d:7e:7b:50:70:eb:ce:9f:4a:bf:
7e:5b:2a:53:ba:cd:42:2a:30:d4:77:01:12:a2:c4:74:fd:33:
0f:1b:61:09:ee:53:8a:45:05:15:10:f0:fb:db:f3:76:c5:27:
17:88:95:ce:3b:cc:ae:ac:ca:ce:45:ed:a5:f7:0b:16:50:b4:
d9:87:b2:49:68:46:ae:aa:40:90:39:2c:30:07:df:71:bd:39:
c4:0b:76:5a:b1:86:19:0f:43:4c:28:d6:8b:c9:88:86:ee:69:
a9:99:bf:40:cd:a9:55:52:4f:45:10:35:58:45:75:9f:05:14:
75:ff:f6:ed:f3:a7:2f:b1:97:98:91:83:92:c6:8d:fb:0e:a1:
76:b3:b9:91:86:f4:6e:ec:80:4f:d5:31:7b:f1:15:ed:37:5e:
f7:ca:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:28:23 2026 by rpki-client