
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json)
Hash identifier: P2LNg01BJcLa0aMj3I3BzI+OLY8gtI7XWypnskAUxbo=
Subject key identifier: 28:11:72:BA:8C:25:1E:31:E2:90:59:68:95:0B:44:4E:7B:1C:D1:66
Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
Manifest number: 0C99
Signing time: Sun 20 Sep 2026 19:49:15 +0000
Manifest this update: Sun 20 Sep 2026 19:49:14 +0000
Manifest next update: Sun 27 Sep 2026 19:49:14 +0000
Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: noIY24v7VUykh6/MLl1f+VgmOMJnPB4nmMqfuvV/sic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Validity
Not Before: Sep 20 19:49:14 2026 GMT
Not After : Sep 27 19:49:14 2026 GMT
Subject: CN=6ab038bb-40ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:46:04:71:8c:36:01:5a:ec:4b:da:ab:8b:
e3:af:43:fd:77:c8:2b:4c:6c:a5:7d:ab:28:db:2d:
08:53:c3:00:20:65:d2:d6:cf:c8:10:56:15:a1:a4:
6e:b6:c1:9b:b8:90:de:59:c3:e1:3f:ff:75:9e:1f:
c5:52:83:7c:41:d2:52:b7:3b:17:c9:ac:34:3e:8b:
3a:92:4e:12:61:a4:17:70:db:e8:da:3d:98:2f:57:
88:45:d4:25:e5:f0:d9:ff:4a:1c:d8:51:ef:aa:50:
81:82:e7:a8:66:d2:8e:be:bb:24:69:64:b0:7d:b5:
12:c3:5d:e2:2f:00:a2:aa:05:c8:81:5f:96:3d:8b:
d6:da:4a:1d:03:3b:77:2b:16:5a:e2:57:28:0e:02:
dc:71:b1:df:24:14:03:d6:a2:45:18:93:f3:41:5d:
a0:3b:88:a3:0a:63:7b:fb:ca:b0:6f:4e:c6:30:29:
10:6c:22:94:5c:3a:7d:24:25:7c:31:9a:de:bc:3e:
e3:b6:54:3b:33:db:d4:38:3f:67:4c:82:8a:a4:31:
a8:8c:35:ed:a8:4f:5c:1d:3b:7d:59:fa:d7:35:ba:
9f:db:72:5c:68:23:f2:25:1a:2b:53:7a:aa:ee:1a:
63:36:af:70:f2:73:6a:0e:55:0b:7a:f2:96:f8:95:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:72:BA:8C:25:1E:31:E2:90:59:68:95:0B:44:4E:7B:1C:D1:66
X509v3 Authority Key Identifier:
keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:82:ac:f7:53:31:9b:2f:67:5b:00:76:e0:5e:ec:51:c8:3a:
c5:59:0c:3e:9c:f7:9f:3c:2d:35:1f:d9:56:59:42:27:ee:be:
b9:33:55:1c:ee:71:f6:81:4f:a6:ef:47:4b:7b:2f:ad:88:6e:
4d:0b:8a:9a:be:d8:d7:b8:8e:73:4f:ef:d4:ef:f3:9c:c1:e3:
b0:8e:89:34:e3:2d:41:9f:31:22:5c:03:0e:87:e6:c2:e2:ce:
aa:9a:02:ac:55:44:46:ad:b5:69:11:b2:fa:46:55:57:4a:f6:
84:67:eb:d9:d4:48:f6:81:46:e5:32:11:f4:77:d4:05:2c:fa:
b9:37:48:23:29:0a:1d:c8:5a:a5:d2:36:18:24:ba:3e:6f:d6:
8c:df:9c:1b:c3:47:27:ea:ff:ff:81:bd:9a:2d:84:39:ac:65:
f1:f7:af:fc:f1:20:30:57:14:57:08:2b:65:5f:e5:08:70:1a:
fc:dc:78:19:56:86:11:30:bb:5a:2e:47:e6:7f:47:ad:41:01:
c6:5d:8a:ba:6c:a2:07:5a:60:0e:8e:fd:e8:13:a9:c0:4c:6b:
d6:db:95:0c:75:a3:8a:4c:3f:8f:16:2b:09:7e:9c:51:08:62:
18:05:21:9d:5a:40:25:cf:93:e4:74:9e:1b:03:7f:79:b7:c9:
bb:05:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:43:15 2026 by rpki-client