
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File: MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier: Uur5oZmoqDE5kI98tvHbIe//wE3krrjlXlBoF/ylKYQ=
Subject key identifier: 8C:B2:28:F5:87:FE:1E:EB:DC:DD:57:7F:52:E7:5F:E3:03:3E:5E:FE
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer: /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number: 71
Signing time: Mon 11 May 2026 08:05:27 +0000
Manifest this update: Mon 11 May 2026 08:05:26 +0000
Manifest next update: Mon 18 May 2026 08:05:26 +0000
Files and hashes: 1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: Ha1MULN9ooV2ADNI3QDpgHOheLNOXHsYZqyNLhl2EiY=)
2: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=)
3: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: HXVArtG7682TOfdIk9HoiDIPKWjHdrg5PVF+pT8VfXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Validity
Not Before: May 11 08:05:26 2026 GMT
Not After : May 18 08:05:26 2026 GMT
Subject: CN=6a018dc7-57ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ea:e1:a9:d0:5d:2b:c2:f3:b9:a1:b0:84:56:
7e:c9:a6:5e:c0:b7:ea:ff:bb:27:b1:3a:64:43:cd:
5b:46:49:f8:27:de:7c:ef:16:f7:cf:de:b1:da:46:
d1:bc:ca:8e:f4:67:6e:bb:dc:0e:78:2f:2a:60:d0:
43:98:05:5b:3a:58:37:42:de:88:44:34:73:b7:1e:
29:fe:be:97:56:48:2f:f8:36:e7:7d:6a:4c:a5:55:
29:ce:f6:30:c9:d4:9c:65:05:cd:37:19:cf:36:d8:
6e:2a:7a:05:3f:2e:7a:3d:3d:4b:ac:72:41:f5:22:
4a:b1:e1:66:76:ea:38:38:e4:f9:11:0c:de:14:25:
ce:be:16:3a:b8:45:6e:53:a4:ee:c6:fd:64:28:d2:
07:47:fa:4e:9d:60:ae:3e:03:e5:6b:94:9d:1a:ff:
e7:39:f2:6b:df:a3:9a:f5:6d:ae:a2:06:93:b1:e2:
6c:be:99:ec:16:bc:27:6b:15:57:dd:d6:73:1b:fb:
09:f8:e3:08:cc:f7:67:db:19:1d:95:90:8d:0b:6f:
7e:11:fa:eb:04:94:63:47:72:87:70:cc:a6:e9:34:
2d:92:95:38:7e:41:8b:da:1e:0a:0c:46:76:fe:1a:
58:22:ba:6b:28:75:36:55:1c:76:a9:b7:b1:47:32:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:28:F5:87:FE:1E:EB:DC:DD:57:7F:52:E7:5F:E3:03:3E:5E:FE
X509v3 Authority Key Identifier:
keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:45:b4:3e:20:bc:75:53:ca:ac:9e:a9:eb:58:af:f4:4a:5d:
dd:39:8b:b5:04:c9:d3:6a:57:f3:cb:ae:30:40:54:4b:92:75:
a6:a8:79:87:1d:a8:17:cd:6f:9b:a6:52:81:5e:46:69:31:4b:
a1:dc:ee:16:ac:03:ea:fd:b1:de:9c:a9:aa:cc:7d:5c:46:84:
c8:26:40:6a:01:10:72:c1:13:ab:96:5a:1d:f5:3e:fb:55:79:
02:c1:48:49:6d:05:ed:b7:4d:67:bd:4e:ab:a3:21:73:f6:8f:
9e:2f:5e:ec:6f:d7:ee:78:23:1a:b5:7b:1d:92:9f:ec:87:21:
93:c5:15:05:67:4b:10:2e:b3:a2:df:d1:c7:ad:56:4d:ea:5f:
79:b0:b1:cd:e0:ae:b6:bb:d2:e4:86:95:3c:bf:7a:bf:c2:6b:
76:fb:ed:b9:dc:15:9c:16:e0:73:8b:9c:70:4c:c1:be:fa:9b:
22:2a:40:b2:74:2d:96:4f:30:83:be:af:fc:07:14:b8:dd:6f:
21:0d:20:db:30:96:40:1b:8f:3c:91:ee:c8:fa:a2:33:66:69:
4f:0c:00:6c:3c:6d:67:81:00:8c:c6:95:be:40:a9:da:be:a9:
44:67:8b:f9:50:74:b6:1a:c9:5e:a3:2e:16:21:34:27:de:9d:
cb:5c:4b:a0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RUZFRTExMC8GA1UEBRMoMzE0MkExQTg2MUQ5QTQ0QTkzMjdGMDY2MTlGRUM4QTZB
OTYyQjQyMzAeFw0yNjA1MTEwODA1MjZaFw0yNjA1MTgwODA1MjZaMBgxFjAUBgNV
BAMTDTZhMDE4ZGM3LTU3ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCT6uGp0F0rwvO5obCEVn7Jpl7At+r/uyexOmRDzVtGSfgn3nzvFvfP3rHaRtG8
yo70Z2673A54Lypg0EOYBVs6WDdC3ohENHO3Hin+vpdWSC/4Nud9akylVSnO9jDJ
1JxlBc03Gc822G4qegU/Lno9PUusckH1Ikqx4WZ26jg45PkRDN4UJc6+Fjq4RW5T
pO7G/WQo0gdH+k6dYK4+A+VrlJ0a/+c58mvfo5r1ba6iBpOx4my+mewWvCdrFVfd
1nMb+wn44wjM92fbGR2VkI0Lb34R+usElGNHcodwzKbpNC2SlTh+QYvaHgoMRnb+
GlgiumsodTZVHHapt7FHMs+vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjLIo9Yf+
Huvc3Vd/Uudf4wM+Xv4wHwYDVR0jBBgwFoAUMUKhqGHZpEqTJ/BmGf7IpqlitCMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFRkVFLzBGOUU5MUY4QjNE
MTExRjA4NkMyMkQ1QUM0RjlBRTAyL01VS2hxR0hacEVxVEpfQm1HZjdJcHFsaXRD
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTVVLaHFHSFpwRXFUSl9CbUdmN0lwcWxpdENNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF
RkVFLzBGOUU5MUY4QjNEMTExRjA4NkMyMkQ1QUM0RjlBRTAyL01VS2hxR0hacEVx
VEpfQm1HZjdJcHFsaXRDTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBHRbQ+ILx1U8qsnqnrWK/0Sl3dOYu1BMnTalfzy64wQFRLknWmqHmHHagXzW+b
plKBXkZpMUuh3O4WrAPq/bHenKmqzH1cRoTIJkBqARBywROrllod9T77VXkCwUhJ
bQXtt01nvU6royFz9o+eL17sb9fueCMatXsdkp/shyGTxRUFZ0sQLrOi39HHrVZN
6l95sLHN4K62u9LkhpU8v3q/wmt2++253BWcFuBzi5xwTMG++psiKkCydC2WTzCD
vq/8BxS43W8hDSDbMJZAG488ke7I+qIzZmlPDABsPG1ngQCMxpW+QKnavqlEZ4v5
UHS2Gsleoy4WITQn3p3LXEug
-----END CERTIFICATE-----
Generated at Wed May 13 03:01:28 2026 by rpki-client