
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
File: muOXelmM-YG98IVk3ctr8rapZBs.mft (raw, json)
Hash identifier: +Ma7bmztXvitvdapPtNYz+oLgI17iTlawFIgTDH+d3Q=
Subject key identifier: 51:9E:08:39:89:26:8A:D0:97:44:4E:E4:13:B6:86:4B:6B:0F:3C:8D
Authority key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Certificate issuer: /CN=A911725F/serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
Manifest number: A2
Signing time: Fri 13 Nov 2026 07:37:13 +0000
Manifest this update: Fri 13 Nov 2026 07:37:12 +0000
Manifest next update: Fri 20 Nov 2026 07:37:12 +0000
Files and hashes: 1: muOXelmM-YG98IVk3ctr8rapZBs.crl (hash: OOgn0QKQs+lcgwxk170NgxmGD94K27n5TfIb62V0KwU=)
2: C0838B364D3211F19F7BE348C2833773.roa (hash: J3Z7es5Uh4rR/ZxShTh4SGcaI5GZVCJNn9Qv4oL/qLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 07:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Validity
Not Before: Nov 13 07:37:12 2026 GMT
Not After : Nov 20 07:37:12 2026 GMT
Subject: CN=6af6be28-1b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:47:9e:b1:e4:a6:f5:2e:ab:c7:fc:a4:6e:
59:e9:ee:4e:a0:ba:86:b6:20:81:e5:74:85:cf:65:
6f:5d:5a:ef:e9:f3:e8:03:c0:c4:18:50:9c:39:02:
fd:6f:89:f7:32:16:0f:7d:8f:d9:e8:7d:cf:46:c5:
59:bf:b3:c4:90:4c:ec:62:0a:7a:98:c0:6e:a6:21:
5f:24:a5:8c:33:1d:7a:5d:9a:cb:92:27:b7:8f:8d:
77:2c:a3:6f:9d:86:8f:a9:72:22:9d:0f:20:9f:e3:
d2:8d:87:14:19:b9:79:2c:d9:20:47:dc:94:47:16:
a2:76:8b:6c:de:07:96:a9:79:4c:c0:22:eb:c9:e1:
8b:87:71:c5:4a:4f:ed:b3:13:bb:4d:56:47:36:43:
5d:3d:3e:5b:42:6a:11:01:6c:73:5a:82:b4:5f:91:
91:d8:e8:8d:04:33:3c:aa:12:f1:79:59:a2:8a:0b:
63:a2:ee:d3:cb:67:5e:63:4c:f9:1b:91:4f:0a:52:
2a:05:13:99:ea:52:ec:42:0e:6c:cf:5b:24:1a:73:
37:54:9d:eb:fe:c2:d1:f6:59:25:d2:1f:a9:01:32:
41:14:6c:91:ee:fe:13:78:b3:f2:eb:25:b5:66:ba:
e9:71:d3:27:3a:50:f4:0b:5d:a7:69:1d:86:7a:96:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:08:39:89:26:8A:D0:97:44:4E:E4:13:B6:86:4B:6B:0F:3C:8D
X509v3 Authority Key Identifier:
keyid:9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:2f:81:46:e5:2a:2a:9b:a2:9b:02:69:0f:55:3d:fa:1d:b0:
21:af:1e:b2:ec:9c:b2:df:27:31:b6:81:ca:33:ef:27:04:a2:
a9:2f:50:39:39:64:3a:56:0d:0a:08:a1:be:52:1e:a9:cd:e1:
a3:53:d2:9a:97:55:da:4d:30:b9:7c:2f:d8:b2:86:3a:3f:44:
05:1f:88:b5:6d:ad:54:1b:6f:72:85:83:72:08:28:f2:20:d5:
1f:5e:58:9e:24:4f:90:11:f3:f7:9f:34:26:c6:3e:1a:4d:10:
51:0d:2a:a3:d6:f6:39:ca:85:b3:21:fb:3a:6b:c4:f9:f7:22:
2d:98:76:b9:ad:e1:38:72:61:86:69:8b:cc:65:5b:4f:87:31:
06:8b:b8:24:b9:69:68:cb:af:e9:aa:b0:8a:1b:92:b7:69:70:
63:89:e4:9e:a0:d3:7b:9f:b2:2a:e6:8c:b6:2b:0b:78:65:69:
99:1b:8a:47:30:c3:20:b3:73:63:15:c4:95:6b:5d:38:05:ed:
07:4e:12:c3:1c:1e:60:50:47:e9:39:86:5b:e7:40:ed:99:3a:
e7:ca:52:db:b6:15:70:00:1a:92:6f:28:7d:a3:f2:7e:a9:e8:
81:94:fb:fd:95:14:8d:5e:47:37:ae:03:f0:ba:b8:ac:8d:b6:
b0:4c:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:40 2026 by rpki-client