
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
File: MfUEGe8ZsP2mG2Y5DBLur27L50E.mft (raw, json)
Hash identifier: wn5jRr1A71m8T6mJ4jDS2qvApPAQzFIxz8qwvziMgS4=
Subject key identifier: A5:99:CF:7A:FB:37:4E:DB:21:54:90:B4:83:0A:F5:00:C2:99:47:31
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Certificate issuer: /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial: 08B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
Manifest number: 08A7
Signing time: Mon 02 Mar 2026 02:07:24 +0000
Manifest this update: Mon 02 Mar 2026 02:07:22 +0000
Manifest next update: Mon 09 Mar 2026 02:07:22 +0000
Files and hashes: 1: MfUEGe8ZsP2mG2Y5DBLur27L50E.crl (hash: 8XJD0ipkBTubd6gWwvdPIpTaN9leeI7RH2Ei5xd0FpY=)
2: 1F820766D66F11EAB2766134C4F9AE02.roa (hash: jo2tlsDnQpDCJoIB4q0RoosjQ73xETRA4+QuzTTxC+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Validity
Not Before: Mar 2 02:07:22 2026 GMT
Not After : Mar 9 02:07:22 2026 GMT
Subject: CN=69a4f0dc-7089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:63:5f:d9:73:cb:89:f8:14:ab:68:d3:b0:
36:fd:9c:e1:20:40:ca:dc:e0:6e:6f:24:af:a9:2b:
7f:19:77:e5:b8:57:d5:f7:c2:4b:d0:1b:3c:39:c6:
58:ea:49:99:ff:3d:20:cc:83:af:6f:17:97:31:08:
34:72:91:6e:1a:5e:a0:2f:1c:4a:46:64:00:bd:7d:
18:8a:32:de:9f:04:b7:c2:8e:fe:ba:a2:ff:a4:65:
a9:9f:d1:d2:5d:cd:7e:7a:b8:de:9d:4e:43:af:38:
90:5f:11:a1:ac:f2:af:92:a6:ce:e5:8f:d3:6d:97:
45:9c:40:86:ca:36:9f:08:d8:6d:49:68:9e:bf:46:
d9:03:34:86:54:c9:5c:db:22:c6:4c:b2:d1:2f:62:
3c:d0:1a:cb:da:16:3a:43:df:45:62:8a:f6:81:38:
5b:49:60:38:02:69:cd:b7:77:1d:1f:e8:4e:4f:44:
dc:19:49:34:23:75:59:e9:fb:fe:a0:a3:9f:de:bd:
e5:4f:0b:16:bc:1a:a6:5f:28:ff:a1:ce:cd:2f:39:
f2:5d:88:54:f4:b0:e5:2e:68:52:fa:fe:36:62:02:
46:d9:d8:64:b7:eb:a3:ee:20:41:7b:96:b7:96:ce:
8a:b4:08:e3:80:1c:90:0f:08:d1:6e:af:aa:1a:ac:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:CF:7A:FB:37:4E:DB:21:54:90:B4:83:0A:F5:00:C2:99:47:31
X509v3 Authority Key Identifier:
keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:2b:94:e4:e9:1a:e1:63:41:be:cf:b9:d0:a4:a0:be:60:
45:5b:d6:2c:d7:26:d5:69:5d:d5:e4:15:92:77:07:f6:5c:75:
21:9d:62:da:f0:70:78:1e:bb:1c:96:f2:89:10:89:b3:2e:e7:
b0:c5:f6:5b:e1:e9:5c:2a:ff:9c:10:b5:52:31:29:c2:3c:b5:
4a:10:67:ba:27:80:11:c8:d7:f6:64:6c:cd:3a:f5:aa:49:95:
b7:28:05:c1:6d:1b:40:02:9a:5d:03:29:74:1f:4e:95:14:65:
b8:d9:ca:07:ce:02:6f:3f:50:d7:72:69:cc:73:28:dd:ab:05:
08:aa:d4:1f:bf:f6:54:1b:19:a1:cc:36:59:ab:85:40:87:47:
bc:51:b0:43:38:8b:c6:bc:14:23:e4:26:93:05:c4:e9:a2:14:
14:90:83:d6:34:b7:06:6c:c5:2e:7f:e4:1e:89:39:7a:e3:06:
13:65:5a:e4:58:e7:c1:83:c9:9a:bd:19:33:e0:fe:ba:82:25:
a0:83:c5:14:a3:67:95:8a:1a:cc:a4:f0:40:f7:40:79:f7:b7:
46:3d:21:4a:52:76:24:f4:a3:e0:1d:c2:83:56:07:53:17:4c:
14:a1:53:2d:e6:d4:aa:b0:d4:bb:58:1b:43:41:a0:e3:d8:95:
82:00:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:37 2026 by rpki-client