
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
File: MUIxLklxwu35BoX7-ycBqtETRho.mft (raw, json)
Hash identifier: w/bZunJvlyG88ejB9SiRH75/JQMOb61QVHZL09vAOdI=
Subject key identifier: 97:6B:C1:1C:B5:32:B5:0C:22:BD:AC:BB:56:09:41:84:68:A8:38:D2
Authority key identifier: 31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
Certificate issuer: /CN=A91F0500/serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
Manifest number: 4F
Signing time: Tue 27 Oct 2026 08:36:02 +0000
Manifest this update: Tue 27 Oct 2026 08:36:01 +0000
Manifest next update: Tue 03 Nov 2026 08:36:01 +0000
Files and hashes: 1: MUIxLklxwu35BoX7-ycBqtETRho.crl (hash: zLZhSoSJ/tztCkD/56EYpU8TDMM1nUQ/rIOJFENrFaM=)
2: 4A1C3B3E583911F1803EAD1AB0833773.roa (hash: U73r8bNjOpORwGTwTGq9EMOQxt2BgsG5nN01tCAPjcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0500, serialNumber=3142312E4971C2EDF90685FBFB2701AAD113461A
Validity
Not Before: Oct 27 08:36:01 2026 GMT
Not After : Nov 3 08:36:01 2026 GMT
Subject: CN=6ae06272-7966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:97:8c:32:11:70:67:10:57:97:72:63:bd:
7a:89:bc:e7:b7:db:90:37:0b:6a:59:e9:63:56:3b:
df:e2:53:fe:8d:ba:5c:2f:3f:02:63:15:a8:58:83:
5b:8d:54:c7:3b:ea:1c:d9:ca:40:9f:44:71:f7:8a:
b2:01:6b:70:46:be:85:9f:35:bc:6b:0b:4e:7c:de:
f5:7f:4c:6d:14:03:b3:d1:b7:c1:1b:d7:89:40:a6:
e7:ea:0f:1f:e7:6d:25:c0:f1:59:1c:26:97:7a:3f:
4b:56:24:a5:d4:06:ec:8e:40:3e:cb:4b:79:0c:c7:
ed:83:b3:32:3c:6f:c6:16:cb:0f:37:57:4e:a0:ca:
2b:98:1e:82:ef:a8:02:2b:df:0a:cf:da:c7:74:a1:
79:23:4e:c4:e8:0f:98:a2:33:0f:70:ff:a9:e1:9e:
0d:05:da:33:1a:d6:ac:37:51:ae:82:c5:00:f7:6a:
e1:36:f4:a9:9d:a8:5e:73:65:5a:73:10:bb:fb:af:
bf:34:74:d3:82:7f:a0:b8:2b:46:1e:14:9f:44:d0:
00:64:d8:4c:33:6c:38:76:e7:3b:6e:af:f4:e5:30:
06:2a:8f:1e:ac:a5:c2:33:b6:73:12:2d:c8:27:e7:
35:c6:07:cf:6b:4f:c5:e9:cf:46:e1:24:0d:63:b7:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6B:C1:1C:B5:32:B5:0C:22:BD:AC:BB:56:09:41:84:68:A8:38:D2
X509v3 Authority Key Identifier:
keyid:31:42:31:2E:49:71:C2:ED:F9:06:85:FB:FB:27:01:AA:D1:13:46:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUIxLklxwu35BoX7-ycBqtETRho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0500/B33401AC583811F1AD247216B0833773/MUIxLklxwu35BoX7-ycBqtETRho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:6e:e8:a0:56:6d:60:8d:b7:b4:51:4e:cd:13:90:ba:81:82:
92:aa:c2:b3:13:eb:6f:d6:72:b5:54:9a:4b:09:00:79:c2:36:
1e:b4:b7:3c:44:6b:c2:bf:5b:99:bc:4d:58:68:ff:7e:48:c3:
46:4a:70:7d:17:4b:d4:7a:05:2d:1d:32:32:04:8b:ed:24:71:
f5:68:4e:a2:3e:5b:0d:48:d1:d5:74:9a:10:26:ad:ad:24:7a:
3a:e1:03:3d:40:91:95:33:86:7a:4c:7d:2e:27:cd:6b:0c:41:
5a:38:8c:d7:9c:3c:77:c6:fd:c4:35:16:e5:e8:e6:cc:34:9c:
87:b9:16:a1:aa:36:62:c8:6b:81:ee:f7:e2:f4:f2:b2:f0:46:
12:be:25:31:56:f1:e7:fc:9b:63:57:90:df:60:6b:97:6f:8d:
7b:72:c9:5d:6f:2a:2b:84:c0:12:05:e4:c5:4f:46:31:f9:20:
db:29:15:c9:ae:20:55:84:d5:2f:3f:c4:ba:bb:63:0b:b4:3d:
44:08:6b:da:b5:25:f4:56:ce:78:a9:e0:1b:4c:fc:e7:4a:66:
dc:58:30:e5:20:b6:31:e5:08:5b:0a:7b:86:d0:39:1d:67:59:
d1:95:ca:01:6a:a3:29:88:78:b7:26:65:be:d8:c2:24:61:21:
15:6f:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:28 2026 by rpki-client