
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
File: MUIxLklxwu35BoX7-ycBqtETRho.mft (raw, json)
Hash identifier: f/x8xMPzt8oxwpiudXa3Ocptm4XUq7yi57l/leuQA3A=
Subject key identifier: 1C:57:B1:4A:D8:36:5C:54:7F:D6:0A:70:8A:B4:04:CC:22:9D:8E:A2
Authority key identifier: 31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
Certificate issuer: /CN=A91F0500/serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
Manifest number: 3D
Signing time: Mon 21 Sep 2026 08:30:50 +0000
Manifest this update: Mon 21 Sep 2026 08:30:50 +0000
Manifest next update: Mon 28 Sep 2026 08:30:50 +0000
Files and hashes: 1: MUIxLklxwu35BoX7-ycBqtETRho.crl (hash: QpZtiodYIZ5Q/JOj/UA/k8swItgoB5YrD6T8IF+OazY=)
2: 4A1C3B3E583911F1803EAD1AB0833773.roa (hash: U73r8bNjOpORwGTwTGq9EMOQxt2BgsG5nN01tCAPjcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0500, serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Validity
Not Before: Sep 21 08:30:50 2026 GMT
Not After : Sep 28 08:30:50 2026 GMT
Subject: CN=6ab0eb3a-fe10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:bf:47:87:08:3a:da:9f:f2:cc:bd:8b:a3:
10:fa:85:1b:25:22:e1:1e:59:0d:b6:25:4f:a1:61:
0e:dd:a6:26:86:77:77:17:68:f1:15:60:01:1a:50:
4d:0f:7f:3d:0e:86:1b:dc:ea:06:6d:52:59:c2:3e:
b7:dd:c7:fe:c6:ac:1b:38:82:be:af:11:64:a1:79:
be:69:11:98:ba:38:63:cf:f2:fd:be:21:11:dd:33:
9d:9d:29:07:6d:0e:1e:ad:89:37:81:04:16:0f:66:
47:44:43:dd:cc:98:04:d5:e7:8e:41:0d:c8:b9:dc:
aa:d4:c9:1a:21:9b:e1:8d:50:5a:09:44:87:7c:86:
e1:af:53:1b:b5:69:91:74:e7:cf:fb:c8:a2:ef:80:
41:0f:e4:c3:33:ab:7c:d4:50:7c:24:6a:86:8d:76:
76:08:ed:ea:be:d0:95:82:02:ed:0f:5e:2e:5d:9a:
84:45:f6:a8:c3:29:d0:fa:ad:e8:a4:22:f6:f4:4d:
26:57:9b:64:c8:23:6f:85:ae:19:cb:b0:ba:b1:bd:
36:d2:ad:f6:1f:dd:a2:84:39:8d:87:50:de:70:40:
8d:10:99:fe:9b:30:be:9b:29:54:73:75:62:21:51:
ae:3a:f2:2f:e8:d9:92:3a:0f:3e:8a:5f:03:f8:c5:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:57:B1:4A:D8:36:5C:54:7F:D6:0A:70:8A:B4:04:CC:22:9D:8E:A2
X509v3 Authority Key Identifier:
keyid:31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:0a:38:bf:de:b0:f1:bd:76:56:04:16:cc:66:4b:52:60:09:
0c:c0:c8:b4:0a:8c:6f:6c:f6:a2:d9:62:04:b4:9d:0f:2f:50:
f4:06:69:57:94:f8:c9:b8:a1:55:ba:d4:3e:9b:63:93:ed:c7:
2a:44:63:b2:df:b2:ec:37:ac:f6:dc:cd:af:7f:9a:03:18:43:
e3:fe:d6:a7:b6:29:4b:be:79:4b:26:ea:d7:dc:3c:f3:f0:00:
42:c4:7d:81:2e:3b:45:cc:ff:ed:e2:67:fa:cb:63:a9:e1:4e:
4d:3a:bd:cb:f9:a1:74:93:92:93:3b:17:a5:06:f1:5e:60:61:
e8:06:6c:c1:ee:56:92:73:67:5a:bf:b6:44:9f:da:c1:14:a4:
bf:a0:7a:f7:a9:d7:48:ce:fb:71:d2:a9:9a:1f:31:4f:fe:e2:
12:85:02:6a:35:74:ff:4e:b0:45:ed:71:d0:bc:b0:60:c8:c8:
c4:4a:f1:e0:6a:0b:45:13:31:64:b8:27:96:c8:80:0e:89:3e:
a2:84:2f:89:a3:34:22:8c:ed:ca:48:51:6a:dc:45:e4:be:88:
91:a4:5f:8c:22:41:e6:f2:c4:b6:35:be:c8:4e:c3:ca:e2:fa:
d3:b8:6b:2b:dc:8a:47:8d:47:7e:29:67:52:1f:cc:fe:ed:fb:
9f:f4:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:39:22 2026 by rpki-client