
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
File: MUIxLklxwu35BoX7-ycBqtETRho.mft (raw, json)
Hash identifier: ObQQbTQX1kPGsGYP3GUZAcGp+nLsloB8qiQKkAbKZQ8=
Subject key identifier: 93:24:7C:25:68:3E:99:B7:ED:91:96:89:CB:CF:24:24:88:3F:75:13
Authority key identifier: 31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
Certificate issuer: /CN=A91F0500/serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
Manifest number: 20
Signing time: Mon 27 Jul 2026 11:16:16 +0000
Manifest this update: Mon 27 Jul 2026 11:16:15 +0000
Manifest next update: Mon 03 Aug 2026 11:16:15 +0000
Files and hashes: 1: MUIxLklxwu35BoX7-ycBqtETRho.crl (hash: dTefhQX4BRI5snYuKBJI6gLhBSfz1ZB+rzCi2rPEUf8=)
2: 4A1C3B3E583911F1803EAD1AB0833773.roa (hash: U73r8bNjOpORwGTwTGq9EMOQxt2BgsG5nN01tCAPjcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0500, serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Validity
Not Before: Jul 27 11:16:15 2026 GMT
Not After : Aug 3 11:16:15 2026 GMT
Subject: CN=6a673e00-b6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:38:4c:6d:9e:41:9b:a1:1d:a9:f0:67:92:
34:2a:f6:47:e1:4d:9a:a1:89:33:8f:5a:3c:fe:1c:
bb:63:06:e6:e8:9c:ef:54:cd:dc:fd:23:b2:3c:9a:
c3:44:5f:b5:81:94:d4:20:ad:c4:ce:11:e8:3b:2e:
e4:2a:28:38:3f:62:bd:bf:d7:c5:ad:12:2c:60:69:
98:b0:82:76:3e:40:85:d8:1d:b9:0f:03:a4:b7:23:
37:8e:7e:f3:4d:c7:a8:79:ea:53:45:2f:3c:b3:94:
93:bc:a6:40:9e:e4:de:e9:da:90:33:0d:35:77:65:
eb:21:2d:74:f1:65:92:43:a0:bc:49:e4:8a:30:7c:
9d:57:2f:e6:8f:92:94:54:2b:13:a0:8d:c0:32:e5:
17:83:c2:75:f4:0c:03:40:65:32:28:72:2c:7f:49:
1d:7c:d5:bd:8c:35:d6:22:17:e7:ae:e5:04:5d:17:
43:ac:79:27:fe:18:54:48:50:40:57:a6:2a:3b:e9:
4e:20:75:60:36:b6:87:62:3b:2e:d8:2e:79:46:b3:
5c:55:9f:f9:4f:6b:3c:d2:5b:00:05:37:cb:9e:4a:
78:e6:b0:dd:ff:c2:29:32:af:55:77:76:1a:7e:2c:
fd:d7:3c:f9:8c:f0:23:e9:bf:b4:55:84:c3:c6:82:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:24:7C:25:68:3E:99:B7:ED:91:96:89:CB:CF:24:24:88:3F:75:13
X509v3 Authority Key Identifier:
keyid:31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:4c:4a:f0:4f:cf:75:3b:5a:25:fc:d7:57:4f:f6:4c:d4:be:
fb:57:48:2d:05:ad:83:5e:78:ca:44:3a:eb:6c:a0:0e:26:c4:
39:5c:42:f2:38:79:9b:19:c6:90:4f:31:5a:3d:1a:9e:98:b8:
9c:ba:5e:99:a9:35:24:18:54:a8:06:2c:e5:1d:39:89:5b:60:
7a:c9:0c:c5:00:85:50:18:d1:e7:5f:ac:84:18:1a:07:c0:7c:
5e:23:19:54:6c:fe:42:43:47:9e:24:49:c5:b4:27:64:5c:e4:
3b:bb:e1:ac:c1:1e:c0:08:fb:9f:2f:f7:fd:99:b1:95:66:6d:
5c:2d:da:db:65:7b:0d:3d:94:6f:09:3e:e2:78:c1:67:21:b1:
cc:dc:21:91:cb:a3:a7:e7:87:2a:38:ec:65:7c:16:2a:a9:ca:
91:b6:41:d2:20:aa:c4:5a:e7:0d:9b:55:53:4b:db:e9:cb:0d:
c4:85:ca:61:5c:87:59:3c:7b:1c:74:6a:74:ee:02:fc:f9:68:
d1:5b:c1:1a:70:6f:82:5f:30:97:d6:65:a1:85:07:7d:12:38:
cd:df:82:ae:34:84:40:ff:c8:45:6f:18:32:fa:80:ef:7c:68:
39:81:a3:a2:aa:bc:45:3f:4f:a9:9f:56:09:02:71:42:f0:6b:
0c:ca:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:21 2026 by rpki-client