
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier: NKVmMHoyZbzovjSLJcM/1urqDtw0c7FnCpmrTCtqeMc=
Subject key identifier: 7E:A2:1A:E2:7D:C5:92:A8:7E:E7:16:02:0E:14:4C:92:4D:49:06:ED
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial: 1E7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number: 1E51
Signing time: Tue 12 May 2026 16:05:08 +0000
Manifest this update: Tue 12 May 2026 16:05:08 +0000
Manifest next update: Tue 19 May 2026 16:05:08 +0000
Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: KzyybuAp4kmLE6FcMzdS0NugcdGbpUTH8IRoS4+irVw=)
2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=)
3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=)
4: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7807 (0x1e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Validity
Not Before: May 12 16:05:08 2026 GMT
Not After : May 19 16:05:08 2026 GMT
Subject: CN=6a034fb4-5379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:c1:27:8f:4c:bb:fc:e0:6a:02:61:96:f7:
d9:f8:0b:9c:27:d5:5e:08:16:b0:27:21:da:94:e5:
57:c7:a1:89:40:88:2a:ae:9b:bf:0f:cb:f0:47:31:
74:ae:07:f1:0f:81:1c:12:e5:a3:27:47:33:78:10:
f8:4e:e2:b3:8c:dc:99:d7:a8:fa:79:40:69:34:2e:
98:c5:d8:86:95:1e:d1:8f:18:3d:31:f1:84:c6:f1:
a3:9d:c8:af:4d:5e:a0:97:f7:db:78:b8:52:0f:02:
83:ad:98:1e:00:b9:c8:ee:b5:5b:2e:e9:a6:f9:43:
e6:73:84:f9:c9:3c:4d:3a:78:7b:41:b3:8b:6a:24:
eb:9e:7b:91:85:64:2e:ca:f9:f2:e1:ab:6c:be:55:
d6:df:2b:2f:d6:ff:41:a3:0c:51:b7:b4:19:07:4d:
bd:80:dd:ac:5e:f9:22:b7:5a:82:24:44:34:17:bb:
3e:f7:61:7a:f0:e7:48:94:90:aa:73:12:03:a9:9a:
c2:bd:4a:a0:c4:a3:61:80:69:d1:bb:85:6c:78:da:
4d:26:97:11:5e:56:55:4f:99:cd:36:2f:dc:8c:d0:
6b:0f:66:dd:9a:7f:a0:24:51:36:4c:8d:2e:52:f0:
07:bc:9e:22:27:2a:96:15:cd:e2:99:59:1f:23:29:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A2:1A:E2:7D:C5:92:A8:7E:E7:16:02:0E:14:4C:92:4D:49:06:ED
X509v3 Authority Key Identifier:
keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:d4:66:7d:c2:e2:70:43:b4:91:19:d9:73:4b:fe:77:db:19:
70:bb:fa:32:64:6d:39:60:c6:d0:2f:1b:01:2f:fe:e3:2d:63:
6f:34:2a:b4:1a:10:fb:60:04:d2:9a:40:24:bb:94:9e:2f:50:
25:ed:cc:50:f0:c2:8f:03:de:d8:86:dc:a6:0f:bb:71:02:c7:
e4:f8:92:4a:6c:b2:0b:5c:4b:c6:a8:8e:c0:d0:bb:a1:bc:5b:
12:48:08:c0:c6:e5:c7:dd:2a:73:8e:43:e0:02:dd:36:02:7f:
c1:fd:1c:23:99:0e:77:5e:b2:5f:0c:ee:8a:b0:d1:b5:51:be:
ab:ed:be:cf:34:7c:63:6e:65:7c:3f:22:80:0c:40:c0:f3:b7:
52:a5:63:cc:04:29:44:e9:5f:2d:fe:dc:ba:b8:8c:73:66:e7:
08:f7:54:23:c5:c9:4c:9a:b6:62:d9:92:60:66:d2:fe:16:14:
fc:1e:9d:f3:06:e1:55:15:02:be:01:a3:0d:5c:2d:80:0b:62:
32:05:85:5b:d1:52:38:65:40:0a:04:71:7d:55:75:e3:55:6a:
cb:17:21:60:b6:62:fe:7b:94:74:2b:7d:1a:00:fe:d3:2e:51:
2f:73:d0:b6:d0:45:9e:30:35:0f:38:92:5f:52:1b:bf:34:71:
c4:f8:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:56 2026 by rpki-client