
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier: PXIExbR7uID0XKcPYdwXzHCX92g8vwT1akpscMCRIGA=
Subject key identifier: 11:28:A2:CF:39:0B:BD:4C:06:73:53:EA:3A:A4:0D:A0:86:55:59:DF
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial: 056B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number: 0560
Signing time: Sat 04 Apr 2026 23:10:33 +0000
Manifest this update: Sat 04 Apr 2026 23:10:32 +0000
Manifest next update: Sat 11 Apr 2026 23:10:32 +0000
Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: wyned+e9hxP6C/Zz5haGPdtCSYCMTB/76XOe8FyHnzk=)
2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Validity
Not Before: Apr 4 23:10:32 2026 GMT
Not After : Apr 11 23:10:32 2026 GMT
Subject: CN=69d19a68-3fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:5b:e3:84:9f:67:44:cd:ec:4a:8d:82:b4:
79:cd:eb:ba:12:08:fc:50:4f:f2:ce:2c:29:41:e8:
10:9e:0d:e0:ca:6d:85:1b:41:50:95:8e:b0:dd:92:
56:8e:4a:cb:17:48:76:ad:61:86:7f:96:0c:5d:1f:
b9:de:ac:a1:5c:5c:1c:54:ba:d5:ff:49:5a:22:5c:
24:b9:15:a8:fc:03:5a:72:d8:ea:2a:c7:ed:f2:60:
dd:4d:51:83:cd:27:9d:19:38:67:cc:ed:f1:5d:05:
62:53:bd:34:62:e1:ec:2e:bf:46:ac:34:fc:92:35:
99:07:f9:f2:84:11:b9:cf:5e:96:f9:ba:7b:8c:b1:
94:0a:0b:6c:7f:4a:98:91:1d:22:cc:0f:b1:bc:df:
56:ed:6c:77:6d:c1:b7:f9:d6:84:ba:c8:8a:01:b4:
ff:dc:68:f2:78:73:22:a5:97:40:42:34:97:c6:49:
0b:8d:3c:78:86:34:4f:10:88:7d:1d:eb:e1:61:99:
4b:c1:40:8a:d8:5c:39:c4:80:66:b3:e4:56:88:fd:
55:31:73:05:3f:24:9d:ef:4a:9c:f9:21:16:73:59:
07:7e:2a:e3:eb:f7:56:b2:8c:12:b1:8f:cf:a9:e1:
17:d2:c4:17:96:5f:2c:a8:ab:cf:19:36:6b:c3:88:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:A2:CF:39:0B:BD:4C:06:73:53:EA:3A:A4:0D:A0:86:55:59:DF
X509v3 Authority Key Identifier:
keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:23:63:47:56:54:06:21:f8:57:5a:49:d1:75:b4:92:96:07:
5c:e9:c7:a5:b5:78:57:e5:14:22:1f:c0:46:9a:d5:67:51:f2:
e9:1f:89:8b:d7:4b:2f:98:4e:58:35:c2:da:c6:8f:ef:69:88:
f2:e6:ed:2b:48:cf:4d:05:ce:3f:61:74:11:9b:bd:e0:4e:22:
85:97:5d:64:2a:94:d4:f3:d2:9b:07:fa:af:cc:1b:2c:1a:19:
e1:90:0d:9e:17:13:9d:fa:dd:72:c9:db:13:1e:09:b3:51:c6:
fc:e5:50:e2:a8:82:e4:a2:a1:e3:28:6f:93:e4:b7:5f:62:3f:
7a:f1:42:4b:b0:44:d5:e6:e1:87:a4:17:10:f1:2a:d1:25:e1:
cb:8c:8f:62:bf:d1:31:19:8f:1f:94:10:34:d1:53:e7:19:cc:
8c:bf:76:2a:30:5c:2a:d3:4a:01:83:d9:55:b2:3a:98:ef:03:
77:39:21:7b:c6:0f:ce:4c:13:ae:61:3c:57:e8:27:21:35:3f:
50:80:81:25:6b:b1:f0:49:d1:a0:fd:25:49:c0:76:85:eb:cf:
92:a1:f3:48:2e:fb:67:e8:fc:65:1d:8c:4f:82:38:57:48:71:
0d:96:65:63:59:d7:20:a1:77:c5:cf:63:78:b5:c8:d1:13:58:
03:6f:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:25:44 2026 by rpki-client