
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
File: muOXelmM-YG98IVk3ctr8rapZBs.mft (raw, json)
Hash identifier: pE62kart9jhaTVFdeXOy9b4M6waFL7P4hbDVIjCVgMM=
Subject key identifier: F2:6E:C1:73:D2:24:14:90:D6:2D:61:B4:84:84:6B:79:CD:BA:04:4E
Authority key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Certificate issuer: /CN=A911725F/serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
Manifest number: 7E
Signing time: Thu 03 Sep 2026 08:05:22 +0000
Manifest this update: Thu 03 Sep 2026 08:05:22 +0000
Manifest next update: Thu 10 Sep 2026 08:05:22 +0000
Files and hashes: 1: muOXelmM-YG98IVk3ctr8rapZBs.crl (hash: S4lh9n0p75dAqDkdn0hYx8+67Ak/pWVuqqPtTgq5zN8=)
2: C0838B364D3211F19F7BE348C2833773.roa (hash: J3Z7es5Uh4rR/ZxShTh4SGcaI5GZVCJNn9Qv4oL/qLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Validity
Not Before: Sep 3 08:05:22 2026 GMT
Not After : Sep 10 08:05:22 2026 GMT
Subject: CN=6a992a42-4698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:3a:15:70:9d:29:b1:95:b0:cc:0e:16:cc:
95:8c:41:1a:aa:9d:b2:51:06:cc:da:3a:60:7c:96:
23:a9:99:5c:30:3b:25:39:ac:09:29:07:a9:29:fd:
ac:b6:e4:99:ad:a3:93:d7:c2:9e:ea:0f:e5:80:c2:
f3:56:cf:4a:52:fc:bd:a9:4c:bd:20:a1:2f:e8:98:
c4:40:d1:77:23:75:88:03:eb:f5:8f:fb:fd:d6:fd:
b8:e6:93:fe:32:1c:37:fb:15:0b:b1:e6:55:2f:de:
12:ff:4f:75:4b:b2:6b:c5:86:00:e6:59:8e:a6:9b:
f2:ca:58:88:43:47:df:c2:30:00:ca:12:73:e4:c7:
47:8d:38:11:f5:d4:e6:10:5d:c6:7d:68:a9:83:e5:
73:5d:53:94:ef:0f:d9:e8:a9:ac:e4:b7:c9:28:f1:
b2:65:95:f7:17:82:4d:ae:ab:a4:ae:e1:90:04:ea:
30:2e:3e:2e:ce:77:51:6e:ca:6f:1e:88:27:cf:38:
04:27:c9:b7:34:5f:3c:4c:78:fd:6e:0f:96:23:64:
31:04:d3:e7:c0:b7:d4:1d:e8:4d:9a:f5:13:0d:bd:
0b:cc:5e:7e:e7:0a:16:e6:2e:26:93:34:0b:67:bd:
e8:8e:8e:bb:d9:e3:33:f8:d6:19:09:d1:17:00:59:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:C1:73:D2:24:14:90:D6:2D:61:B4:84:84:6B:79:CD:BA:04:4E
X509v3 Authority Key Identifier:
keyid:9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:d2:5f:6e:d9:39:01:0f:cc:e5:37:2b:27:85:3d:cd:4b:
52:1c:49:67:fc:00:5c:4d:aa:41:df:e3:66:b7:56:5f:57:29:
bb:10:dc:b9:e1:2f:70:31:29:69:e2:97:a2:2d:e7:ab:f1:34:
25:a8:31:97:7a:a3:95:4b:07:65:bc:ce:04:2a:52:8b:3d:f9:
d9:3e:70:76:1b:56:f8:e5:85:90:12:12:0a:fe:48:ce:64:7f:
49:7e:52:c9:90:e2:26:2d:c9:78:9b:86:3a:59:cd:06:35:c1:
71:8d:a1:5b:11:14:ec:0f:2d:33:e2:63:66:7d:c5:22:b8:2e:
b7:55:89:58:47:17:12:59:3e:93:6e:20:d6:9d:29:ce:11:be:
d7:55:9f:40:b7:e2:ec:65:ef:33:4e:81:55:f5:65:ec:05:7b:
ba:f2:a4:00:22:54:b8:76:3e:0b:14:c0:68:86:1d:d5:d2:c8:
93:af:aa:f0:9d:5f:08:c8:92:db:6f:3a:f9:a5:86:b9:ef:02:
94:24:54:c7:d8:6f:60:ed:34:87:47:95:50:d4:4c:1f:bc:89:
c3:9e:31:88:33:02:a9:9f:8f:5f:11:ff:d3:04:ba:18:9f:8c:
c2:91:fa:26:f4:d8:ec:1f:0f:03:32:f3:b1:4d:40:70:d1:4a:
2e:88:1b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:39 2026 by rpki-client