
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json)
Hash identifier: 5PIUx1gR/0EsjGreIw3o3dNLY2ew8EpDoIofS0bigTM=
Subject key identifier: AE:C3:D3:B6:0A:5C:DD:FA:7D:D7:1E:A5:7A:05:34:2E:A2:38:D7:37
Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
Manifest number: 070D
Signing time: Wed 22 Jul 2026 22:45:06 +0000
Manifest this update: Wed 22 Jul 2026 22:45:05 +0000
Manifest next update: Wed 29 Jul 2026 22:45:05 +0000
Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: MXWYZNUH/H0KHHgch2GKFocFAhz6FojaalZwoQSO4Kg=)
2: C8D28C084D0D11F1BB69BE04B5833773.roa (hash: xIXzdhPfo53rwNh2Mlgu0y8PEjCEJhfEi2ZuL9DtaEc=)
3: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: 3MyKsLacs+jSNFLg0g6siYMmeYjfiDOjgCzdQeB8N4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Validity
Not Before: Jul 22 22:45:05 2026 GMT
Not After : Jul 29 22:45:05 2026 GMT
Subject: CN=6a6147f2-e787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:17:d1:3c:72:c3:eb:53:25:d6:30:8a:40:
55:59:75:f9:e8:2b:d4:71:77:42:1a:0b:63:7d:1a:
79:11:d9:15:d3:88:21:e1:c9:45:da:89:7a:11:89:
23:c2:f4:b4:9f:b7:90:a7:29:82:7c:d3:15:1f:25:
a0:21:6c:6b:c9:61:f8:45:ef:d4:7a:d0:6d:5c:06:
72:16:77:53:0d:7b:d6:83:49:68:42:4b:1f:d4:be:
b6:16:c9:75:a8:44:e8:0b:15:03:11:01:e0:f7:d6:
dd:7e:5b:94:1a:38:e6:61:19:c3:0e:5e:5b:60:d4:
d3:c8:69:7f:65:6e:6b:f6:38:82:3b:41:e7:89:6f:
47:f6:bc:34:40:b4:86:ca:32:4d:aa:80:15:41:f4:
be:c5:79:ec:6c:70:05:f3:be:89:59:88:57:ab:02:
d6:73:3d:68:ee:c1:f6:93:9e:89:46:c7:cc:29:6a:
1e:2d:b5:57:d6:eb:21:bc:de:4a:c8:3f:95:3b:92:
08:63:d3:e7:d9:e8:2d:4a:e0:27:d7:5b:2a:9f:b0:
04:6a:78:3d:9e:62:04:74:d5:e6:7a:9b:d2:44:a8:
1e:84:b3:dc:ed:6a:33:cd:f6:66:36:5a:ed:b3:9f:
59:10:23:59:bd:f8:28:5e:09:2a:46:46:e0:6b:df:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C3:D3:B6:0A:5C:DD:FA:7D:D7:1E:A5:7A:05:34:2E:A2:38:D7:37
X509v3 Authority Key Identifier:
keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:12:91:f6:a6:43:6a:f4:a4:c6:3f:9d:ce:75:eb:3e:55:93:
07:1d:ee:cb:eb:72:f5:c9:a9:bb:40:91:c0:89:e9:08:f2:84:
af:52:85:b3:1a:5a:3d:ed:91:f0:93:9c:9a:a7:23:79:1d:22:
4c:26:8d:4b:ed:ac:ca:6f:05:b2:87:58:6b:fd:74:80:25:14:
18:dd:dd:65:4d:7d:75:89:db:c1:82:e6:2b:fd:75:b5:85:d6:
7f:50:bf:74:0a:49:12:c2:ed:59:cf:1b:6b:ea:7a:f3:b6:57:
43:2f:ae:cd:c9:17:33:9d:9c:5f:0d:17:f0:09:c7:45:e9:ee:
03:2f:4c:af:9f:09:60:c4:7b:cf:b8:cb:70:95:5a:ca:fc:a3:
c8:74:9a:5d:ff:ce:d5:42:9a:bc:7a:24:f9:30:9f:0c:e4:6b:
8a:55:46:a6:46:78:29:ec:bf:66:7a:8b:35:84:98:e7:ec:13:
21:42:2b:73:23:81:34:7d:e5:14:5f:db:eb:5b:20:44:62:93:
46:c5:f7:ce:74:e8:8d:c1:4c:37:80:22:dd:3c:ca:46:6d:83:
4b:58:c5:94:57:3a:4f:7f:89:3b:9a:80:da:d7:9a:71:bb:ca:
d6:94:23:ec:e4:72:d7:c4:68:b3:1b:9a:e4:ed:73:65:4a:44:
da:ba:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:31 2026 by rpki-client