
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
File: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft (raw, json)
Hash identifier: yDsLTb4wRsUj8BKHIDvlSOEe4nDZT8zeddJjv0gIVWg=
Subject key identifier: 16:73:61:35:86:58:C0:BA:20:4A:F9:1A:D5:08:A3:6B:F1:85:74:62
Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
Certificate issuer: /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Certificate serial: 4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
Manifest number: 4A
Signing time: Mon 01 Jun 2026 09:10:14 +0000
Manifest this update: Mon 01 Jun 2026 09:10:14 +0000
Manifest next update: Mon 08 Jun 2026 09:10:14 +0000
Files and hashes: 1: Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl (hash: T4EBaTYVCTK48jaFFxpV0/2cJaap1XG8FvGDdN/mTpg=)
2: F526FD64F20611F0B4D6054A4A6F56BC.roa (hash: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5
Validity
Not Before: Jun 1 09:10:14 2026 GMT
Not After : Jun 8 09:10:14 2026 GMT
Subject: CN=6a1d4c76-c256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:9b:b9:48:5a:c5:66:2b:9c:fa:ff:d9:dd:
6d:da:aa:19:8e:8a:f8:63:a2:dd:66:c2:71:b4:fb:
95:08:77:d7:d5:f8:f1:e0:ba:2e:a0:89:a4:98:33:
0f:db:4d:a3:bb:b5:5a:e2:ef:e8:4d:be:08:d3:a4:
dc:e6:17:f9:62:b0:7a:01:fb:fc:a0:60:09:1a:00:
3f:f3:89:1e:4e:b6:1d:79:34:79:26:60:93:86:8e:
ab:4f:c6:7a:a7:8e:f3:c1:40:17:d4:52:19:00:82:
25:1e:bc:c8:cf:5e:14:67:a7:22:08:89:68:1f:d4:
4a:7f:c2:bd:87:fd:7f:90:27:fd:5f:47:56:f7:16:
ca:42:0f:39:c8:db:0c:49:eb:c6:05:f3:86:1d:75:
bb:e7:ed:74:37:20:69:5c:fd:3b:b1:92:ef:d4:21:
b6:87:d2:95:82:11:96:27:04:af:bc:e8:1a:a3:44:
6c:14:ed:e3:7b:6d:d2:4b:7b:e9:dd:78:d0:07:7c:
b0:c5:ae:6c:eb:b9:72:fb:32:1c:1b:f7:78:17:de:
5b:d2:67:41:d6:17:14:20:18:e7:c7:cf:c3:5a:5d:
c0:91:e9:c6:01:71:87:8d:54:6f:60:a1:61:d6:92:
05:ea:d3:56:ed:29:46:2b:ac:52:81:ee:03:4f:d1:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:73:61:35:86:58:C0:BA:20:4A:F9:1A:D5:08:A3:6B:F1:85:74:62
X509v3 Authority Key Identifier:
keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e6:a2:d4:48:bf:86:6c:a7:6f:aa:4f:1a:35:4f:e4:34:84:
20:9a:4e:88:23:68:b4:5d:69:ae:9e:8a:88:70:8e:99:ea:55:
3c:07:17:92:78:65:c4:47:b4:e8:5e:4f:b8:33:f5:be:cc:c6:
71:d1:40:3e:05:8c:05:d2:eb:bc:fc:44:26:c8:be:f7:fb:54:
cf:21:6c:ed:ed:86:7a:37:06:e5:e1:d3:7d:f1:5f:f2:98:ba:
a4:6d:04:44:03:54:b3:37:27:48:27:37:5a:e4:51:74:cb:e7:
38:10:c0:77:d6:4a:f2:80:59:23:41:06:b8:9d:9a:f5:76:b5:
50:d3:1e:8c:cc:92:cc:01:18:4e:ba:a9:46:ef:4a:e6:7e:b5:
e2:27:e7:b6:e6:3c:75:e4:b2:e9:dd:87:03:49:67:04:2b:db:
cb:97:83:e5:b0:85:74:01:0c:f1:8d:12:f0:50:2e:df:bb:e3:
c2:d9:ba:58:b6:18:40:73:8a:06:82:73:f2:00:6a:d5:fd:b5:
40:3d:bd:7d:8d:d1:8b:e8:46:94:1b:24:c4:bb:13:bb:83:b5:
2d:37:ee:b0:7a:6d:4a:83:7c:62:22:cf:54:2a:e8:94:a2:16:
0f:e0:71:76:ee:ff:ad:80:71:4b:58:be:49:3b:2a:b8:ea:5b:
c8:78:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:41 2026 by rpki-client