
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
File: muAi3ZD6yvK8XHN26KhM5QUeiWo.mft (raw, json)
Hash identifier: wFmbCFD31zK3NSruT2zXkCRz8rAlwHP5aCxeFi621Mw=
Subject key identifier: 18:D3:9D:6D:BF:F0:D9:D9:93:0D:5F:4D:A0:56:07:04:76:62:3F:02
Authority key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
Certificate issuer: /CN=A919271C/serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
Certificate serial: 07E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
Manifest number: 07D7
Signing time: Thu 10 Sep 2026 21:16:27 +0000
Manifest this update: Thu 10 Sep 2026 21:16:26 +0000
Manifest next update: Thu 17 Sep 2026 21:16:26 +0000
Files and hashes: 1: muAi3ZD6yvK8XHN26KhM5QUeiWo.crl (hash: saKtW7DsuCWyKBtisjCgosN5sn/96YfcIuaKkKY8eT8=)
2: 86A0946E3DE611F1A54E8A6D9C833773.roa (hash: ABolBpiR0euDJQImTKbKEYPpJHRmHZwRgzlkW2E+bnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl
rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2018 (0x7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919271C, serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
Validity
Not Before: Sep 10 21:16:26 2026 GMT
Not After : Sep 17 21:16:26 2026 GMT
Subject: CN=6aa31e2b-d24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:b5:e0:e5:59:3f:3b:b5:90:c1:95:91:85:
9d:74:ae:b3:90:64:50:ac:d3:7e:6a:8b:d4:71:64:
4e:99:b0:10:64:b8:1e:52:84:52:a1:60:e0:94:d0:
1b:ca:4b:4b:96:19:d2:d5:3b:69:c4:03:d9:a0:a4:
26:20:b8:ce:c6:77:92:be:1c:f5:3c:9b:fb:51:bf:
49:1c:25:9c:ab:0a:72:df:e6:49:4f:6f:b7:d8:6e:
1b:21:b6:94:0b:e0:08:fd:ba:7c:6e:2d:62:9b:db:
37:3b:a1:7e:d7:64:ab:ba:86:ff:67:0a:70:ee:a0:
2e:45:4e:ee:6a:bf:23:cb:38:10:fe:79:fa:28:ea:
f2:c3:a9:6e:32:bd:3c:bc:91:90:d8:dc:10:7b:94:
02:db:73:1b:e8:36:2d:32:16:c9:a6:b5:0e:ec:21:
f0:ba:04:53:c4:1e:7c:08:59:a9:19:9c:7c:ab:1d:
1c:19:3c:9c:d5:92:25:a6:d6:9b:10:ad:66:32:df:
49:5c:63:f6:34:6c:c2:70:71:6c:cb:bf:e0:60:51:
7d:fa:d8:eb:b4:77:c7:2c:58:62:35:0d:59:8b:40:
b4:93:7a:6e:5b:4f:b8:19:00:9b:e6:44:58:4c:da:
2f:f4:27:b7:41:fd:c1:e6:45:f0:97:aa:8e:3d:60:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:9D:6D:BF:F0:D9:D9:93:0D:5F:4D:A0:56:07:04:76:62:3F:02
X509v3 Authority Key Identifier:
keyid:9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fb:40:67:9b:12:42:dd:70:1e:a5:2f:05:aa:a6:85:0a:94:
af:8a:ed:5a:40:c6:7f:7a:6d:33:15:5f:57:d7:36:9b:72:e2:
c7:46:b1:7b:dc:8f:fc:74:0d:d6:66:eb:5f:a7:6a:ab:c3:7c:
8c:b3:ae:9e:27:0e:38:4d:24:87:90:5c:f4:99:e2:83:fd:c4:
9d:2b:6b:47:72:05:e9:69:a6:9f:5a:bf:02:ea:c6:85:b2:91:
fc:93:da:df:e1:15:19:f0:67:1f:cf:95:9d:e5:d6:9c:28:d0:
31:37:37:8a:5c:e9:a2:43:ca:47:7c:f2:c2:1b:8a:8f:4e:95:
ac:eb:5c:6c:fa:d9:2a:46:38:5d:5e:e9:14:f5:9d:35:eb:0b:
9b:00:b7:95:bd:85:31:22:66:99:31:82:c0:8b:0a:a0:60:f8:
95:be:77:5f:6f:6c:cd:29:c8:be:26:b7:d3:e7:a7:01:76:44:
3a:7f:10:eb:e9:03:6c:b8:23:6e:7e:ce:cf:d8:d4:a9:90:1a:
bc:7d:30:a4:d1:40:42:d7:d8:fe:f8:54:cb:63:4e:a1:52:37:
fa:83:d6:8c:d7:e9:22:90:12:49:38:2f:55:a0:24:4f:a5:c2:
9c:83:fc:52:56:56:57:71:0b:f6:f3:23:ba:b9:91:ee:51:78:
b9:df:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:07:48 2026 by rpki-client