
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
File: MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json)
Hash identifier: eEZ3791onj5mTlhP4fIsYuXcx/aCBTHWA5cHcldv4LU=
Subject key identifier: 2A:84:12:FB:A5:32:E6:FE:41:F7:83:68:07:77:D9:09:FE:E3:D2:8F
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Certificate issuer: /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
Manifest number: 1A
Signing time: Fri 13 Mar 2026 07:49:15 +0000
Manifest this update: Fri 13 Mar 2026 07:49:15 +0000
Manifest next update: Fri 20 Mar 2026 07:49:15 +0000
Files and hashes: 1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: xCMGk+XKnVo38WZzoLa5TqR87kn7Q77O5HextMXoBBk=)
2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 07:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Validity
Not Before: Mar 13 07:49:15 2026 GMT
Not After : Mar 20 07:49:15 2026 GMT
Subject: CN=69b3c17b-a90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:6e:08:95:00:73:5b:03:2a:01:c5:0e:78:
4e:cf:da:d6:42:f6:0f:5f:b0:f6:7a:ff:67:d4:c2:
78:a5:a6:97:34:2a:3d:83:d2:83:8b:c2:d7:dc:dd:
34:94:6d:60:33:c0:e4:9c:41:aa:3f:05:53:ea:2c:
e1:8d:1f:9b:4f:73:d8:0d:44:50:91:95:0e:e3:ea:
b8:b4:6e:df:38:a0:6c:21:ad:a4:12:18:3d:3b:99:
2b:6a:83:b3:28:b2:6d:3e:9b:a5:96:73:bc:2e:87:
7c:b5:76:16:d6:d5:7d:a3:56:7d:76:b6:12:29:73:
2c:98:26:91:b5:d8:a7:42:76:78:a9:73:2e:28:4b:
40:dc:6c:07:c3:e2:68:0b:e9:be:64:5f:5f:32:f1:
60:5a:c3:ba:32:a2:27:62:8c:0a:3c:48:58:7c:fb:
f5:e9:34:bb:01:88:ad:21:7f:8a:40:39:6a:30:e6:
60:f5:ee:4b:72:6a:a7:d2:d1:76:cb:ad:c2:6f:d5:
4d:64:0b:73:6d:78:74:ca:7c:ee:36:32:b3:ca:09:
24:98:e6:b7:c1:49:ab:ae:e4:c1:ec:a7:1f:95:ea:
e8:19:21:05:fd:5a:e0:8b:60:d8:c3:d5:e2:dd:3c:
04:b5:fd:24:6d:e3:a2:0a:0d:0b:2f:76:db:a9:1c:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:84:12:FB:A5:32:E6:FE:41:F7:83:68:07:77:D9:09:FE:E3:D2:8F
X509v3 Authority Key Identifier:
keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:e9:9d:5d:03:cd:5d:9a:22:16:65:cc:10:aa:66:52:b2:
1b:62:9e:b4:dc:4c:ec:a0:ae:38:41:f2:b1:db:4a:2d:a3:0d:
28:09:ee:46:67:cc:51:7d:8c:f0:c3:c1:43:67:a5:89:6d:87:
76:e7:52:86:04:78:08:ae:9e:73:da:9f:0c:5e:2b:46:5f:99:
0f:38:3d:75:9e:1b:e9:0b:e0:b0:d3:b2:06:d9:7f:8b:d2:a8:
88:c9:ea:25:89:3a:22:66:aa:f0:25:e2:55:ae:cd:56:20:80:
ec:ec:0b:ce:59:3e:8e:72:e6:b7:1c:e8:14:2f:46:38:6f:df:
c9:43:05:ea:0f:54:5e:4a:47:8f:18:af:c2:04:5b:9b:4c:5e:
73:4b:78:54:d4:35:67:55:32:f1:26:c2:d6:50:42:27:e5:44:
17:95:84:70:d0:23:26:96:d1:1a:01:e8:83:b7:84:7f:b9:99:
b2:59:bb:a1:97:1a:b2:ee:7c:c4:2b:10:6c:6b:3d:58:69:1f:
e5:d9:4f:0c:58:87:f9:60:ed:af:18:35:df:0b:56:8c:b2:58:
b1:06:cb:e8:0e:9b:d0:c3:59:fd:9b:12:4c:80:82:77:5c:6e:
48:2d:d8:6c:9b:2b:9f:a0:22:07:b5:81:bb:65:16:a3:23:ef:
07:c1:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:37:39 2026 by rpki-client