
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier: UrU+ljBB8iSQlXJ7wUN9n0/ux3LYTUKYhgYv+Ds+wWs=
Subject key identifier: 22:DC:97:D5:A7:3B:F9:29:9E:1E:5C:A6:97:7E:4E:E9:8C:8B:66:29
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial: 0582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number: 0577
Signing time: Wed 20 May 2026 23:22:55 +0000
Manifest this update: Wed 20 May 2026 23:22:55 +0000
Manifest next update: Wed 27 May 2026 23:22:55 +0000
Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: 9sgy/CKlvWMZK5OUDa0NQxWA8gZQNgG80UXqIFVZbMY=)
2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Validity
Not Before: May 20 23:22:55 2026 GMT
Not After : May 27 23:22:55 2026 GMT
Subject: CN=6a0e424f-63e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:38:18:02:ba:26:64:3c:18:22:b1:01:92:
be:50:eb:a0:ba:c8:e5:60:01:5f:3a:dd:7d:2f:9e:
8b:58:77:e5:c4:22:37:c0:bc:72:9d:23:13:7c:4b:
e9:41:3e:1e:5d:12:00:3f:01:57:28:5d:37:f7:12:
79:2b:78:fc:a8:5f:31:af:2c:82:96:9a:36:e3:c8:
d0:91:e1:2a:a1:b5:82:b2:8a:10:20:43:9a:b2:57:
44:ad:f5:d4:4c:0d:35:1b:35:7e:61:90:95:31:20:
42:09:9c:a0:7f:28:db:28:87:fb:79:b2:30:cd:99:
2e:9d:66:dc:0d:90:dd:61:89:e8:a0:a6:f2:1a:65:
ff:91:33:4b:33:be:0d:68:35:c2:c0:25:ed:3c:8b:
f0:72:6b:da:5d:bc:91:67:00:79:68:f6:be:b6:d4:
f8:f3:c7:9f:0c:44:f1:6e:ab:67:56:06:cb:8a:d8:
0d:60:13:39:3a:87:6f:33:c7:99:c8:de:69:a1:bc:
5b:ef:23:25:4e:f7:f8:84:92:3b:b5:f2:bd:c9:d1:
d1:d3:59:a1:c7:0c:6d:66:c6:51:c0:c5:d6:9d:86:
22:f7:1c:74:97:af:f6:17:6e:39:c5:54:76:25:e8:
f9:5c:93:0d:c1:e5:f0:de:d0:9e:86:02:06:14:74:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:97:D5:A7:3B:F9:29:9E:1E:5C:A6:97:7E:4E:E9:8C:8B:66:29
X509v3 Authority Key Identifier:
keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:44:25:90:1f:b5:80:74:e8:94:fe:a1:a0:bc:d4:9f:9f:
d5:b0:bf:56:83:48:65:99:86:1b:15:b2:68:bc:44:e9:f8:77:
ca:37:e0:a5:ad:51:38:69:25:da:6e:5e:8a:81:5a:ec:3c:fd:
08:de:06:98:8a:ae:8e:3a:99:1d:de:0d:14:64:f4:77:07:4f:
87:f0:82:b5:6e:f4:27:f5:6a:e1:53:ea:f7:f6:47:20:b7:b2:
d0:b8:84:00:19:3d:0f:a7:7f:7c:c4:f5:8c:93:fa:1d:02:d4:
b7:15:14:b1:c7:ff:83:ab:c9:79:ba:7c:a0:52:25:41:44:94:
90:77:3a:7d:e3:79:48:d5:3f:b2:d4:47:7d:99:d3:c0:36:78:
da:67:5d:c9:8b:2d:a4:7f:d2:40:ed:c1:06:4c:c5:97:fa:ae:
46:5c:3e:25:35:21:98:0c:e5:cc:0e:b9:2a:45:ac:8e:ff:41:
4b:7f:c3:44:30:8b:aa:ec:69:5c:f1:3a:9f:1f:32:91:d5:85:
a2:ff:11:9a:7b:d6:73:da:a9:77:f7:c2:13:d0:31:0a:9f:0c:
8c:07:55:54:2c:e3:0b:3d:c9:9d:ce:08:e9:36:83:9f:95:93:
ab:9b:19:2a:4b:a9:f7:a0:0f:9f:ad:27:18:e2:54:1a:16:be:
2e:ff:38:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG
REE3RUY0OTAwHhcNMjYwNTIwMjMyMjU1WhcNMjYwNTI3MjMyMjU1WjAYMRYwFAYD
VQQDEw02YTBlNDI0Zi02M2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsq44GAK6JmQ8GCKxAZK+UOugusjlYAFfOt19L56LWHflxCI3wLxynSMTfEvp
QT4eXRIAPwFXKF039xJ5K3j8qF8xryyClpo248jQkeEqobWCsooQIEOasldErfXU
TA01GzV+YZCVMSBCCZygfyjbKIf7ebIwzZkunWbcDZDdYYnooKbyGmX/kTNLM74N
aDXCwCXtPIvwcmvaXbyRZwB5aPa+ttT488efDETxbqtnVgbLitgNYBM5OodvM8eZ
yN5pobxb7yMlTvf4hJI7tfK9ydHR01mhxwxtZsZRwMXWnYYi9xx0l6/2F245xVR2
Jej5XJMNweXw3tCehgIGFHToMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLcl9Wn
O/kpnh5cppd+TumMi2YpMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD
NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU
X1BmQ2pjRGZzLW45cC05SkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADG1EJZAftYB06JT+oaC81J+f1bC/VoNIZZmGGxWyaLxE6fh3yjfgpa1ROGkl
2m5eioFa7Dz9CN4GmIqujjqZHd4NFGT0dwdPh/CCtW70J/Vq4VPq9/ZHILey0LiE
ABk9D6d/fMT1jJP6HQLUtxUUscf/g6vJebp8oFIlQUSUkHc6feN5SNU/stRHfZnT
wDZ42mddyYstpH/SQO3BBkzFl/quRlw+JTUhmAzlzA65KkWsjv9BS3/DRDCLquxp
XPE6nx8ykdWFov8RmnvWc9qpd/fCE9AxCp8MjAdVVCzjCz3Jnc4I6TaDn5WTq5sZ
Kkup96APn60nGOJUGha+Lv84aQ==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:22 2026 by rpki-client