
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
File: MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft (raw, json)
Hash identifier: G8beAlYmEUxZl4dreFTgg9IcczwcNxMznLDgrpxPOj8=
Subject key identifier: 5F:0A:0C:A8:A4:75:C3:5B:02:1F:D7:30:97:F5:57:2F:D5:40:2D:8A
Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
Certificate issuer: /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Certificate serial: 73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
Manifest number: 66
Signing time: Sun 19 Apr 2026 07:39:36 +0000
Manifest this update: Sun 19 Apr 2026 07:39:36 +0000
Manifest next update: Sun 26 Apr 2026 07:39:36 +0000
Files and hashes: 1: MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl (hash: ZB7wsbUEh0z2HETdnB/XUmYRJswrIQ8O8Pm7gXVm4uU=)
2: 5E0AA532B55911F082D2971FC4F9AE02.roa (hash: aPEZKsWstiqxwiHejFAqoUVMW0U3pGBKVVLgUOD9JAw=)
3: DD1D106AB55611F0ABCE9254C4F9AE02.roa (hash: HXVArtG7682TOfdIk9HoiDIPKWjHdrg5PVF+pT8VfXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423
Validity
Not Before: Apr 19 07:39:36 2026 GMT
Not After : Apr 26 07:39:36 2026 GMT
Subject: CN=69e486b8-bf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:46:ac:50:33:49:2d:3e:4f:b9:7f:63:e4:
70:14:0a:17:21:4b:7e:27:0e:6f:07:9e:07:a0:2a:
a1:c0:2f:39:97:56:97:5a:31:d4:fa:01:29:8c:c2:
59:b6:2a:f2:83:92:d0:c6:3c:fa:cc:11:05:bf:42:
7a:ec:25:bf:19:ff:3d:84:fa:81:62:1e:8d:bb:07:
08:d3:1c:2f:ec:37:c9:81:85:06:e7:19:1e:06:d7:
9d:7b:cf:0a:5f:0a:cb:e3:60:7e:88:0a:a6:60:d3:
e4:0f:56:f6:8a:b4:7e:f6:a8:64:75:7a:fc:a6:8c:
b6:df:58:51:4e:08:3a:05:d1:17:76:47:25:d4:bb:
2e:84:15:b0:84:b7:1c:9c:01:51:b9:50:3f:21:96:
d9:eb:90:0f:03:77:07:7f:fd:5c:3a:be:b6:e1:7d:
6c:02:e4:ad:ca:f0:5a:ce:15:81:c3:f0:f8:01:ae:
28:c7:ff:be:a1:25:e6:f0:44:62:b1:50:51:31:95:
8f:cd:23:ac:6b:f3:09:97:e9:a8:1e:93:b8:4e:64:
24:ba:69:22:f0:2d:ae:ac:6c:d1:e0:a3:04:5e:48:
d9:6c:80:ff:6e:2a:49:1a:a5:77:e4:be:a1:56:db:
c2:67:1a:2c:cb:53:d3:35:36:f0:0e:98:d3:58:3b:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:0C:A8:A4:75:C3:5B:02:1F:D7:30:97:F5:57:2F:D5:40:2D:8A
X509v3 Authority Key Identifier:
keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:ae:e8:0d:58:ae:90:70:f3:24:34:e0:a3:26:7f:51:f4:4d:
1a:a2:0e:45:1e:b0:b6:5f:b2:22:92:f8:20:b0:c0:a2:89:70:
4c:19:89:17:4e:6d:c8:5e:b1:65:77:d2:3d:45:7c:91:48:8e:
3b:1d:e2:bd:63:d3:3a:a2:f0:0d:2e:db:e6:a6:85:82:30:fe:
b7:33:5f:8a:e7:1e:65:b0:a7:8f:c6:6f:e0:d5:59:34:ba:30:
a7:61:ba:b7:7e:d8:66:32:d1:40:e4:4e:6c:b4:e1:4e:79:6f:
df:2c:08:90:63:17:c7:43:a3:48:74:03:fb:0c:4e:9a:4d:08:
f1:72:b2:ad:d1:81:4e:af:63:f0:49:91:f2:44:3c:ea:67:21:
86:ab:ce:5f:9a:e9:79:e4:98:41:fd:a6:97:34:d4:ca:c3:b6:
73:73:aa:d5:07:43:c7:da:46:d9:9c:41:b0:2b:fc:c6:3d:f0:
a9:c0:08:a9:e9:2e:ca:5d:c6:49:65:a7:50:3e:e9:16:ad:7c:
b8:0f:a4:e4:8c:07:0b:f8:22:e6:35:b2:9b:af:4f:ec:fb:6c:
ee:57:b0:76:67:1f:bf:08:01:63:61:7d:9d:48:7f:dc:a1:53:
03:44:11:f9:9d:9b:b1:ff:0c:e6:c5:02:61:e7:3c:21:01:63:
2a:81:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:49 2026 by rpki-client