
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier: MdOUpZ5GM6EV1p5yChYNcn9CguJSTqDzoQrEFyingbU=
Subject key identifier: 1C:0A:F6:9C:38:7D:AE:A8:85:5B:BE:D8:D9:AE:66:C5:59:70:61:EF
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial: 1E8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number: 1E60
Signing time: Wed 10 Jun 2026 16:03:56 +0000
Manifest this update: Wed 10 Jun 2026 16:03:56 +0000
Manifest next update: Wed 17 Jun 2026 16:03:56 +0000
Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: sBDDhO5zNrV56+mBxhPu6zWEBuitTQZ96XfOzHQv2rM=)
2: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=)
3: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=)
4: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7822 (0x1e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Validity
Not Before: Jun 10 16:03:56 2026 GMT
Not After : Jun 17 16:03:56 2026 GMT
Subject: CN=6a298aec-4c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:be:6b:6f:52:cf:32:44:81:49:0f:5a:1b:
27:2c:c5:fa:4d:9e:02:25:5b:81:48:cc:72:19:f5:
50:c9:a9:d7:a2:6d:da:66:aa:78:07:8e:1a:dc:2c:
77:13:04:ae:e7:cd:d5:fa:1f:f5:1b:12:9d:44:e1:
c6:04:e6:3f:17:3e:a5:fd:d3:a0:c5:ca:00:87:eb:
6d:bb:c7:fa:42:1e:1f:e9:8e:19:b1:b6:40:72:30:
04:e6:ea:10:e9:87:ee:f8:42:4a:1c:44:58:96:52:
34:54:ec:56:67:23:20:44:bb:f7:06:fd:08:8c:84:
16:bd:5d:0d:b9:75:48:39:4f:9f:70:ee:79:59:3c:
35:43:d6:b0:6c:15:f3:5b:4c:52:b9:d2:ea:ca:62:
53:6a:0e:80:be:32:57:53:67:0d:31:7e:e9:07:9f:
73:43:a7:02:6c:c2:32:52:b0:6e:b9:76:d0:e4:82:
c6:73:4f:c7:9c:1e:f5:82:b2:96:54:61:af:f8:6a:
6b:9d:81:a2:b3:a0:30:33:9d:00:1e:a4:4a:8c:5f:
2f:84:4b:3d:4b:85:42:3a:97:e8:0b:b7:49:ee:27:
c5:f2:90:bc:ec:c9:b5:cc:fe:86:67:d3:7a:a0:43:
1e:a8:67:ff:eb:b3:40:44:3c:d7:53:1a:02:b4:98:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:F6:9C:38:7D:AE:A8:85:5B:BE:D8:D9:AE:66:C5:59:70:61:EF
X509v3 Authority Key Identifier:
keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:36:d5:88:e7:5a:f3:69:b7:38:64:be:4d:68:f8:62:5e:0f:
3b:77:12:13:fc:3a:db:79:f6:01:9d:63:f7:88:d5:bb:4e:01:
dc:3b:00:f9:f9:af:00:66:33:fa:03:e5:8d:62:03:7a:f5:6c:
9e:ac:eb:0e:2e:69:2b:dc:75:ea:11:f4:17:25:c4:9b:f2:9c:
a1:83:1a:4b:1e:87:49:c1:7c:0a:fd:34:a7:c2:40:14:d9:5e:
b1:4a:e4:2b:1a:bc:4b:b9:ef:89:c2:05:97:73:72:92:ae:08:
36:db:f2:df:9f:d1:0d:14:5f:d8:0a:09:fd:57:58:f7:25:3d:
41:d6:2b:f5:41:f5:f5:90:a0:f4:d9:1d:af:14:c9:34:5d:82:
10:dc:e4:17:3a:95:a8:b9:09:17:b4:da:4e:a5:b3:b4:cc:2a:
1e:8c:ac:a1:56:1e:bd:56:3b:63:47:4b:20:47:6c:5c:5d:ae:
3f:49:50:1f:59:80:de:20:51:20:72:3a:8e:c5:79:f1:05:ca:
71:68:4f:dc:ed:95:1e:89:44:da:4f:ae:6b:0a:69:6e:bd:5b:
f4:4f:11:87:03:57:f3:a5:18:a0:f9:ce:cd:07:07:c9:d7:70:
cc:91:d1:2c:0b:58:a6:ea:01:4e:f0:8c:a9:28:cb:63:5f:cd:
81:01:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 16:22:49 2026 by rpki-client