
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json)
Hash identifier: PhgrcEl4SLURRXwjcg8IJ2lNCC6ONQ8xtf147QkPytI=
Subject key identifier: D9:0D:41:23:5A:9B:17:15:41:37:1C:63:74:EA:F4:ED:99:99:21:0C
Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
Manifest number: 0B8F
Signing time: Sat 04 Apr 2026 19:52:06 +0000
Manifest this update: Sat 04 Apr 2026 19:52:05 +0000
Manifest next update: Sat 11 Apr 2026 19:52:05 +0000
Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: k3nTmI2K+lmNR1geKoIXitY3o4WovXU8yuQC5HfVUBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Validity
Not Before: Apr 4 19:52:05 2026 GMT
Not After : Apr 11 19:52:05 2026 GMT
Subject: CN=69d16be6-6880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:3b:b0:9b:9a:f0:09:e0:35:b0:7d:dc:79:
77:17:d5:0d:9d:d3:08:6c:e0:cc:01:a1:14:51:a9:
82:63:7f:4d:68:c7:e9:29:ff:74:de:30:61:25:52:
4f:ae:f2:44:cb:5a:6f:a1:d6:dc:b3:35:f0:7b:57:
5e:0b:a5:bc:aa:8b:e1:80:ec:dc:65:6d:df:9b:8d:
12:25:ce:31:13:0e:c1:03:74:64:58:08:68:5f:39:
9e:be:33:ef:a8:6d:5e:79:03:7e:3c:48:81:63:f7:
63:ee:7a:48:0d:6e:e5:4e:e9:05:cd:d5:d5:3c:0d:
9c:83:0f:68:50:21:cc:f8:94:73:e6:22:2f:76:9d:
b3:9f:7e:82:ba:bc:8b:8f:cf:b6:c3:42:ae:6b:a5:
ac:cb:07:5a:c5:35:0a:ef:eb:88:9e:71:2e:ca:32:
4e:ff:d0:83:aa:06:cf:24:45:5e:eb:ca:00:2f:41:
91:a9:20:2a:1f:cd:39:e5:04:de:fb:94:f2:bd:3e:
85:66:24:71:8a:9c:73:92:36:3c:18:d4:22:de:61:
e5:c8:94:f5:37:c9:f5:12:a4:c4:bd:c7:da:a1:47:
b2:5b:9c:47:e7:10:6d:00:33:9d:de:2b:68:58:3e:
a5:dc:30:56:02:29:ce:ff:1c:43:af:99:76:6c:7b:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0D:41:23:5A:9B:17:15:41:37:1C:63:74:EA:F4:ED:99:99:21:0C
X509v3 Authority Key Identifier:
keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f9:b6:60:97:ec:e8:d0:42:9a:2b:3c:9e:34:29:13:be:aa:
d2:4a:a5:17:dc:06:de:99:2d:0f:cf:0c:f2:94:65:1e:36:4c:
4d:89:c9:d3:e9:5f:3d:cb:f2:ab:d4:fd:f5:6e:91:e3:1b:dd:
e0:74:c8:90:6f:b3:53:87:8e:02:23:aa:27:a9:d5:ad:9e:b0:
77:59:d3:66:fb:c2:7c:73:53:2e:13:e8:1e:5d:41:bb:b2:38:
5e:c6:9d:bc:86:cb:fe:c3:1a:bc:68:0f:dd:85:6c:e0:59:b5:
67:00:03:70:dc:a9:46:ba:9c:28:78:ec:72:83:4a:90:b5:55:
04:a4:60:7e:40:af:59:5d:f1:f1:57:ce:90:11:7b:ac:9f:63:
cf:50:9b:c3:3a:a2:81:07:23:fe:f4:ee:48:97:c4:d7:55:e1:
23:8b:9f:27:0d:2f:28:9a:f9:28:89:77:76:f4:e5:fc:54:9d:
09:2a:4c:d7:cb:64:db:f3:f2:ce:9c:62:9b:97:2b:68:5c:12:
be:aa:8b:67:b0:9d:c8:62:cc:e7:78:fd:4c:e2:28:b9:bf:97:
3e:84:4c:57:ec:6b:f2:bb:97:f9:a5:d8:bb:34:7f:03:03:95:
2f:be:04:01:24:09:f2:be:8f:c8:cd:47:47:3b:ce:fb:36:1c:
fe:6e:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:09 2026 by rpki-client