
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier: RvH3Gkq10/poQ8KU8WB2jp5ZWMp9EXRAlte2e5mqNxw=
Subject key identifier: B6:6B:0F:50:7C:36:88:8B:B6:1B:EA:A2:0B:71:E4:7D:2F:25:6D:63
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial: 0571
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number: 0566
Signing time: Thu 16 Apr 2026 23:17:05 +0000
Manifest this update: Thu 16 Apr 2026 23:17:04 +0000
Manifest next update: Thu 23 Apr 2026 23:17:04 +0000
Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: OqPrGQOWjc3ADBNrVe5ty6ANyvO7v8qlNwCOBCspKEU=)
2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Validity
Not Before: Apr 16 23:17:04 2026 GMT
Not After : Apr 23 23:17:04 2026 GMT
Subject: CN=69e16df1-de03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:17:ea:2e:ef:8c:0f:15:dc:ab:01:44:13:
fc:45:50:2f:f5:6d:b2:c2:4b:8f:72:00:bc:6e:73:
01:a6:ed:eb:f0:43:f2:89:6d:83:aa:4d:15:68:43:
c5:74:3f:4a:e0:f7:c5:31:14:b2:1e:41:2b:c2:77:
4f:79:25:0d:a5:f6:bb:7e:36:66:e9:4b:ec:03:b5:
1d:59:16:c1:be:f0:c3:77:cd:2f:86:ed:03:ad:01:
97:98:d3:92:f8:19:0b:37:47:00:47:68:91:91:80:
98:f2:10:6e:23:5b:9c:8c:01:5a:1a:fd:c4:ea:e8:
9a:d6:5d:86:43:ce:a5:ef:c6:59:8b:a9:a2:22:a8:
6c:aa:73:75:c5:66:5e:49:f5:f2:70:aa:fa:f5:04:
54:9f:38:0d:51:df:d5:7b:d8:52:73:ef:28:55:5c:
05:98:80:84:a5:f7:0a:fd:ac:52:ca:62:f8:ef:dd:
39:8d:95:73:a7:46:66:b7:c8:7b:be:0f:bd:31:ab:
68:6b:34:36:72:37:c8:c0:22:cd:7e:1c:51:d7:bb:
bc:bc:0c:2d:84:ab:ed:61:d1:76:ce:69:a5:e4:03:
02:3e:18:68:5d:86:49:de:ad:33:7e:27:07:c6:6b:
bc:8f:48:d4:73:8d:2b:bb:3d:a1:16:e0:67:5f:c3:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:0F:50:7C:36:88:8B:B6:1B:EA:A2:0B:71:E4:7D:2F:25:6D:63
X509v3 Authority Key Identifier:
keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:67:60:58:be:29:92:68:61:a6:49:cd:5f:43:c8:e5:bb:e8:
e6:48:94:73:dc:ee:17:47:5c:45:16:9e:2a:1b:57:1e:59:6b:
92:e1:00:da:ab:7e:c9:8e:62:98:99:37:53:b3:f2:25:6e:67:
78:e0:ca:85:1b:8c:d7:84:fe:7e:68:ef:eb:c4:f6:71:09:13:
5e:2c:26:ae:d5:c9:e5:22:ba:f6:ad:63:95:98:04:40:45:50:
5a:89:39:00:ac:88:b4:3c:1a:78:de:4b:5b:3e:6b:c5:28:f4:
86:33:9a:b8:35:22:5d:5b:d6:72:e4:02:bc:7c:97:1c:db:c7:
56:c7:17:35:71:b5:0c:a5:34:05:98:74:b9:26:39:ec:8d:25:
53:4f:9a:6b:f6:b1:ec:2d:a9:69:79:27:6c:b9:34:5c:24:cb:
e7:9c:70:7a:6c:22:bd:27:5f:61:df:9f:01:59:fe:f4:52:0b:
d0:53:54:6e:6c:8a:78:93:34:87:d3:04:b6:1f:16:9d:aa:0e:
4f:16:0c:9b:62:5c:b0:38:b3:d7:0e:44:da:d2:57:fb:90:14:
69:6d:c2:a9:50:e2:96:c2:9e:b8:29:bb:71:8a:b3:96:82:a2:
f2:fe:f8:56:d4:46:65:2b:de:ef:b5:f4:8a:bc:fa:37:0c:2f:
b1:5a:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:51 2026 by rpki-client