
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier: blDZnw3LTy9B+J+jmjSADuwi82wahNAcbXv/m9+lOzY=
Subject key identifier: 45:ED:79:9E:7A:CE:0B:3C:D5:77:E4:07:57:07:E4:E4:8B:38:42:DF
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number: 054E
Signing time: Sun 01 Mar 2026 23:26:08 +0000
Manifest this update: Sun 01 Mar 2026 23:26:06 +0000
Manifest next update: Sun 08 Mar 2026 23:26:06 +0000
Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: Yez7WQZYssUAa4H84Ic5zPTfgzxr9NEJxDJ0OmMYDGo=)
2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Validity
Not Before: Mar 1 23:26:06 2026 GMT
Not After : Mar 8 23:26:06 2026 GMT
Subject: CN=69a4cb0f-347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:fd:52:87:a0:68:c2:9a:4e:97:06:8d:a6:
cc:78:68:33:99:61:83:23:a9:58:2a:c7:31:7c:e9:
03:23:30:20:83:a3:6a:e6:39:09:64:dd:c4:a5:08:
6e:41:c4:08:6c:22:62:3d:b9:6b:65:28:a3:74:85:
c3:5e:b0:2b:24:b4:42:5d:d2:fb:81:79:27:2b:7e:
37:a6:73:89:24:d3:58:0e:72:0e:38:7d:bf:39:03:
24:77:5f:f0:1b:fe:64:77:41:8f:8e:21:ff:67:7f:
d2:c6:9b:fa:15:c5:c9:70:06:60:7d:a5:41:cb:5b:
e0:4f:9c:f7:36:70:aa:fe:78:98:f2:76:45:ec:b8:
62:9e:06:04:53:11:3c:ab:51:b3:88:94:e1:ba:4f:
40:98:ea:87:c5:ff:7d:01:74:4d:7c:ab:7a:ee:09:
94:ce:fd:13:02:03:7e:75:4c:1d:46:15:98:15:0e:
34:78:4f:b6:d6:62:ea:f3:0e:d1:95:7f:17:6c:da:
98:36:be:5f:84:0b:f4:03:74:4c:95:89:ec:f6:64:
f8:15:44:1d:0a:64:fc:7f:53:4d:7b:20:1a:65:bb:
94:f3:f2:3a:76:69:5d:59:63:d7:f2:d6:f8:92:b4:
66:66:84:9b:85:55:6b:29:c0:64:6e:b6:c2:76:fb:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:ED:79:9E:7A:CE:0B:3C:D5:77:E4:07:57:07:E4:E4:8B:38:42:DF
X509v3 Authority Key Identifier:
keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:20:05:f6:8d:d6:e8:1f:b3:bd:5b:95:e6:aa:9d:73:77:23:
72:d3:43:8b:c9:b8:94:31:73:58:b1:6c:bd:57:b8:55:cc:65:
ae:de:1a:c7:85:78:99:7a:ea:2f:73:53:0f:28:1e:3e:d2:51:
75:e5:04:b2:fa:68:88:7c:17:ef:51:33:b9:dd:e3:8f:23:b0:
d3:0b:bf:46:aa:7c:17:58:6e:b4:14:0c:39:0a:29:2a:c8:78:
db:42:dc:21:31:05:dd:e2:73:c6:3b:21:51:2e:76:50:ef:75:
91:8d:e7:25:93:9f:06:f8:0d:b5:59:a7:d4:f3:64:17:ce:79:
27:c2:ad:5d:d7:f0:50:2f:73:6b:1c:b2:e3:0e:e7:4f:7f:5a:
4c:cf:06:90:57:07:5d:f0:46:d7:2b:83:7c:c4:f6:3c:c1:ad:
8e:71:63:b8:ba:81:37:f6:e3:30:a4:92:2e:25:9d:e2:b4:ac:
85:2d:39:cd:75:92:55:ce:13:a3:6d:c0:37:a8:e2:a8:7c:18:
00:eb:c4:01:f1:2f:29:43:70:f0:c9:13:34:66:14:69:63:e0:
35:04:41:f1:21:65:c8:1e:8b:2a:ba:58:03:20:5f:37:b8:b1:
bc:fb:f0:10:8f:4b:9d:6e:75:59:67:4b:84:ff:db:ad:6c:e9:
69:9b:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:31 2026 by rpki-client