
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
File: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft (raw, json)
Hash identifier: CN47z/Cqg21KqtRLVaetBPnYe+ZfnVCHzEGPWdze0vI=
Subject key identifier: 34:AE:D3:0C:21:03:95:F1:E3:EB:5E:20:3F:03:F5:EC:76:04:D8:57
Authority key identifier: 32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
Certificate issuer: /CN=A9172B41/serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
Certificate serial: 0532
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
Manifest number: 0525
Signing time: Wed 20 May 2026 23:38:02 +0000
Manifest this update: Wed 20 May 2026 23:38:01 +0000
Manifest next update: Wed 27 May 2026 23:38:01 +0000
Files and hashes: 1: MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl (hash: f232Bh3OuKAsiA0PG87xQbpBYZU6tsSbzBuPwqn3AuE=)
2: 5C7731E64B7111EC8E9FCB48C4F9AE02.roa (hash: qt4s9HBAeJcBPk0Llq0F/Y+xml+HCsgruEcd0L0uDYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl
rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B41, serialNumber=32E0F700E3872451A1A832CD7DDE4175BFBA8369
Validity
Not Before: May 20 23:38:01 2026 GMT
Not After : May 27 23:38:01 2026 GMT
Subject: CN=6a0e45d9-e9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:18:9e:4f:e1:54:b1:4d:26:39:d0:6a:ab:
01:1c:9a:67:b3:71:fa:93:9e:53:af:0a:ee:f7:a0:
86:82:42:5a:58:aa:eb:a4:5a:f1:83:2e:c3:32:d4:
de:ec:3f:7c:1a:06:6c:72:8b:03:32:69:3f:a9:46:
55:87:ad:60:19:a3:06:f8:54:bf:70:e0:61:a0:86:
b0:ba:54:c3:92:4b:65:25:22:c3:d9:67:bb:1a:2e:
9e:75:36:f1:82:b2:18:ff:f2:7a:e2:05:53:e3:57:
08:53:39:5e:ac:b1:f2:dc:75:1f:06:33:3e:34:84:
46:b0:3f:f3:66:c0:53:9e:9d:8f:2e:a0:9d:66:f0:
15:40:c0:9e:4e:ee:ec:1b:14:e6:30:2b:13:b5:49:
d1:f2:4c:c4:a8:f4:75:05:a3:9a:ba:b9:55:34:00:
ac:fe:6e:ad:70:66:f5:a1:45:80:e3:fd:86:a2:b6:
84:69:18:38:a0:ba:15:74:16:eb:d6:9e:31:5c:56:
01:46:e1:3a:59:4a:c9:9a:59:08:23:01:2c:b9:c7:
6a:bc:8b:2d:9f:26:0a:14:c0:50:09:76:b5:59:f3:
fa:07:b4:6b:e3:2f:4e:92:a5:90:79:fb:eb:46:39:
4f:c2:b1:41:1d:b3:0e:0d:41:e3:4c:5f:ca:89:dd:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:D3:0C:21:03:95:F1:E3:EB:5E:20:3F:03:F5:EC:76:04:D8:57
X509v3 Authority Key Identifier:
keyid:32:E0:F7:00:E3:87:24:51:A1:A8:32:CD:7D:DE:41:75:BF:BA:83:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B41/16C0A7164B6E11EC81DD9B3AC4F9AE02/MuD3AOOHJFGhqDLNfd5Bdb-6g2k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:df:ec:b1:3b:fa:7f:e5:6a:05:81:fc:b9:47:3d:c4:fa:d0:
13:6a:4c:f7:17:f3:4e:0d:f3:b8:27:d4:f9:14:00:2c:e0:f9:
31:fa:a0:91:4a:77:b8:1e:bd:11:0a:8d:5c:8d:0c:72:1a:e1:
db:08:41:8d:54:5f:1e:4f:2c:59:a6:93:ba:3d:c8:2b:66:90:
5b:4a:fa:be:59:fa:dd:26:51:ed:91:9c:fd:3c:f6:98:62:da:
a9:a8:e2:4d:07:e0:16:90:3e:db:ba:34:ce:66:03:7b:9e:67:
dc:5d:6b:6d:1f:85:b9:fc:98:6e:61:98:fd:f1:cf:81:f5:26:
61:f4:cd:36:b3:e3:b9:40:75:c0:d4:5a:f4:2d:2d:9b:39:81:
8c:55:e7:28:6b:6b:37:ba:46:3b:a4:cd:f5:93:05:f6:f2:db:
84:0f:c0:5b:2b:11:0a:bd:ce:cb:ca:78:98:02:8c:79:40:7c:
00:dd:a8:ed:e9:06:b8:71:2a:a2:f6:99:7a:e3:92:df:b8:34:
aa:22:0a:b0:3e:88:76:a0:de:bd:5e:d6:48:0c:0e:3e:8c:40:
88:da:31:76:4a:21:18:16:a1:98:9d:d1:df:ee:ee:b7:8c:c3:
46:3d:0f:ae:a4:99:37:cf:73:5d:11:ef:a1:91:48:2f:0c:5f:
bc:6f:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:13:31 2026 by rpki-client