
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json)
Hash identifier: lBfAUm1pUfuPpr2/WBc8EcPDMm5hzPc5NhM8XZIcqkg=
Subject key identifier: B8:2F:70:46:E0:C4:00:6E:B0:30:9F:7A:02:74:AE:32:C2:79:39:DA
Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Certificate serial: 0747
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
Manifest number: 073A
Signing time: Sun 18 Oct 2026 22:05:45 +0000
Manifest this update: Sun 18 Oct 2026 22:05:45 +0000
Manifest next update: Sun 25 Oct 2026 22:05:45 +0000
Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: 9sJNcDxXhZtOEj316yXtXQycJ/vHy0Bo0EYRSadeysk=)
2: C8D28C084D0D11F1BB69BE04B5833773.roa (hash: xIXzdhPfo53rwNh2Mlgu0y8PEjCEJhfEi2ZuL9DtaEc=)
3: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: 3MyKsLacs+jSNFLg0g6siYMmeYjfiDOjgCzdQeB8N4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 22:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23
Validity
Not Before: Oct 18 22:05:45 2026 GMT
Not After : Oct 25 22:05:45 2026 GMT
Subject: CN=6ad542b9-d251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:54:24:3e:da:d9:f8:72:0d:89:1e:07:c7:
47:8c:7e:57:a1:fb:69:d9:b3:c3:28:7c:9e:c5:05:
58:a4:dd:20:b0:35:26:98:1b:56:e7:e9:02:b2:2c:
fc:be:3d:fd:7d:ed:34:a2:bf:46:4c:94:a4:51:d7:
31:cd:25:e8:ec:92:68:0e:03:16:94:95:1b:a5:61:
10:b4:20:cb:af:58:a4:3a:d8:76:09:88:7a:03:d7:
9c:5f:1b:61:6b:5b:64:8d:23:0a:79:22:b0:28:c4:
b2:4c:77:ea:07:ad:44:6a:78:85:38:c8:55:f8:d9:
c1:52:65:96:82:a0:b1:5c:a4:cb:fb:85:7e:30:02:
90:b3:d2:72:d5:e3:43:f6:cb:c8:68:e6:38:00:b8:
51:85:97:a8:1e:c9:0c:93:35:f7:fe:44:09:10:bc:
d0:d7:45:6c:03:6e:a6:71:16:c7:de:b7:97:45:5e:
a8:21:dd:0c:84:00:77:11:6d:0e:e1:0d:96:6c:eb:
50:35:90:e8:6b:a8:78:e3:6e:07:a6:2d:2f:ba:ba:
1c:e1:8d:d3:6b:39:e5:f4:39:d2:e5:50:cf:b7:60:
9a:d9:6f:d9:1a:eb:d8:73:6f:c0:ba:92:0c:79:33:
23:6d:2f:9b:d1:ce:ff:9e:1e:72:0f:bb:fe:8b:91:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:70:46:E0:C4:00:6E:B0:30:9F:7A:02:74:AE:32:C2:79:39:DA
X509v3 Authority Key Identifier:
keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:39:d3:b8:46:26:80:af:d7:f0:30:56:40:cd:31:fc:aa:51:
3d:10:ec:d3:54:fe:de:47:b7:96:c1:bb:64:3d:d1:5a:fa:e5:
e0:5b:2f:84:84:32:9f:6a:53:83:c0:c4:f7:86:a8:cd:e8:b7:
33:73:a7:56:84:df:0e:9c:e5:c6:b4:9c:32:b1:bf:9e:26:61:
44:b1:13:df:99:36:18:de:e9:d2:5e:96:9d:5a:50:81:08:a4:
da:dc:78:71:70:19:5b:7b:6b:46:2c:68:01:9c:c8:d4:49:35:
40:cf:5e:18:21:a9:2c:2f:7d:2a:37:70:77:7f:cd:30:71:7e:
f7:0c:9a:a5:07:05:a3:3c:3b:ef:ac:7e:00:50:f8:f0:66:38:
a6:4b:64:11:c9:1d:64:f6:b6:3e:45:3c:75:23:72:3a:d9:b3:
39:a6:a4:8c:df:91:42:b0:32:02:0d:4c:4b:4b:05:83:4f:39:
19:a4:98:19:05:37:3d:81:31:12:fc:a6:e4:a7:66:fc:43:14:
96:9a:49:57:15:8d:ac:f3:c4:d5:10:56:c5:d3:1d:50:14:27:
df:0c:4c:c8:db:dc:51:30:a2:f5:53:09:25:4b:ef:21:b3:4c:
82:98:58:2a:28:8a:6a:d5:a8:b8:a4:22:e1:8d:7a:da:20:ed:
bd:d9:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:21 2026 by rpki-client