
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier: qjro6+ZvrMnCqzHxxbvoINg9RLuzZs2Y8w7M229r9gQ=
Subject key identifier: 5F:02:A9:45:EA:69:60:BC:0D:C5:EE:02:2B:A0:E4:FA:F4:90:DC:83
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial: 05C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number: 05B7
Signing time: Tue 22 Sep 2026 22:48:06 +0000
Manifest this update: Tue 22 Sep 2026 22:48:05 +0000
Manifest next update: Tue 29 Sep 2026 22:48:05 +0000
Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: 27XpyQSvorbUD9ZMy1XHdYrTkiu09rVHnRA4re9ByAM=)
2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Validity
Not Before: Sep 22 22:48:05 2026 GMT
Not After : Sep 29 22:48:05 2026 GMT
Subject: CN=6ab305a5-ecae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:0b:17:49:e9:6a:ea:3f:ab:a8:56:8e:57:
c1:cf:a6:8d:97:3f:78:85:7a:ad:ea:47:39:23:40:
b6:23:11:d9:38:04:7d:77:d5:26:12:8a:0b:a6:53:
fc:5e:dc:bf:82:d5:54:ec:e2:f0:ab:fb:67:42:f0:
29:ec:82:30:ba:61:83:9d:ca:ad:b9:f0:3c:73:2b:
ec:5f:48:9e:3e:cd:62:69:22:dd:2a:41:4d:9e:54:
0e:c5:1d:60:92:46:3e:e2:54:9a:66:29:e8:70:22:
d3:07:65:71:dd:f0:fa:13:c7:13:54:33:f6:d8:ee:
e6:7f:44:c4:1b:6b:77:a2:7f:49:57:ff:9d:3b:c8:
d3:bb:6c:dc:97:b9:8c:45:f2:02:19:05:d0:3b:3b:
9f:61:2e:7b:01:ff:b3:df:e6:56:6e:d8:a5:f5:6b:
7b:88:a4:d4:f4:b6:fc:fc:9a:2a:67:f1:96:a5:29:
3a:f6:67:d6:6d:71:42:eb:45:94:2f:c8:52:5f:f3:
d4:b6:c4:06:88:10:57:ba:a6:1e:61:f5:27:f8:10:
59:d5:ac:38:da:b0:08:4a:8d:09:1b:67:4f:c7:61:
f2:54:b9:73:d0:76:4a:d8:cc:62:0e:3c:79:6e:59:
73:21:9c:c8:6f:b2:b7:ba:e5:7d:37:98:57:28:34:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:02:A9:45:EA:69:60:BC:0D:C5:EE:02:2B:A0:E4:FA:F4:90:DC:83
X509v3 Authority Key Identifier:
keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1a:0a:53:ea:31:69:3f:2b:2d:d9:b7:8b:be:59:7a:82:19:
9a:df:15:70:54:f1:97:48:de:e4:17:e5:43:61:d8:16:8d:e7:
43:23:6c:e7:da:0b:4f:43:8e:19:8b:b5:39:43:58:c4:5f:47:
4c:20:12:bc:24:89:cc:31:73:36:c4:bf:60:b4:86:15:67:8b:
92:4a:43:89:5f:7c:83:10:e5:e3:85:2a:1b:4e:89:be:18:bd:
10:54:b1:e4:fd:95:3c:be:d3:34:2f:76:fe:d3:56:f2:e1:8f:
f9:4b:bc:1a:92:fc:63:1c:5e:8c:37:93:7c:3d:3c:3c:b4:a1:
9b:eb:58:54:5b:95:56:63:f2:78:c0:9a:79:03:f6:7b:4a:91:
2f:f4:37:e3:cc:c4:10:c2:72:9f:0e:76:65:f5:70:35:77:cf:
eb:aa:37:b7:25:e3:9a:28:42:58:69:fc:1c:0e:d3:66:ac:e5:
d7:82:aa:59:9c:d0:65:57:f2:56:41:eb:df:70:2d:00:fc:e7:
6a:5f:42:55:38:ea:25:bf:7b:69:19:35:34:62:35:4c:ed:24:
1c:d1:11:e1:b9:51:97:b6:5e:ac:20:48:99:86:2f:74:74:4a:
96:9b:6d:eb:e2:5e:4a:51:c6:fe:10:19:03:e6:65:54:f1:d6:
1c:1a:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:32:50 2026 by rpki-client