
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier: rjlf7RdE8kDzDoSNCp2w0kc44oL1l2AUPgWeIhwOusk=
Subject key identifier: 55:EF:2F:81:53:90:3F:FE:8C:5B:CE:A3:F3:AC:54:AB:F9:72:6C:B2
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial: 1E77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number: 1E49
Signing time: Sun 26 Apr 2026 16:00:40 +0000
Manifest this update: Sun 26 Apr 2026 16:00:39 +0000
Manifest next update: Sun 03 May 2026 16:00:39 +0000
Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: rr7NDUalOyNSigsoAIwdZ7RX4fVXuZu0KUtL7WEopBY=)
2: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=)
3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=)
4: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7799 (0x1e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Validity
Not Before: Apr 26 16:00:39 2026 GMT
Not After : May 3 16:00:39 2026 GMT
Subject: CN=69ee36a8-fae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:bb:48:4d:c1:62:70:a5:20:31:98:ba:73:
4b:80:26:79:e3:1e:0c:0f:21:90:48:42:48:80:1e:
2e:40:83:07:da:59:e2:9e:43:8a:e6:27:fe:84:70:
f7:bf:c1:e2:aa:a1:eb:5f:89:22:ad:21:73:3b:23:
91:a3:e6:b6:47:82:48:ba:0d:de:eb:10:f9:4a:b7:
88:cb:c0:ab:4c:c0:ea:38:41:a7:04:ca:fe:c5:38:
bf:6d:a7:b2:13:13:82:62:70:5e:73:21:c8:ab:59:
c0:fc:a7:ee:e7:52:a6:23:10:17:c7:a8:64:3b:cc:
73:0d:ba:f5:23:88:b2:a1:cb:3e:6f:08:f5:4d:52:
fa:f3:8a:e8:5f:86:d8:74:51:42:53:72:a2:6f:16:
70:c6:d7:ca:c5:04:fb:42:c9:05:f4:4b:c0:02:92:
20:5d:16:fa:30:62:ee:46:ab:73:48:bb:00:16:c5:
b0:81:d7:7f:a3:83:9e:48:38:bf:fe:d0:8d:15:95:
ed:b4:eb:fb:2e:a6:f0:6d:c8:b7:0e:4c:44:ca:60:
d1:0f:87:22:b3:84:97:49:35:e2:11:63:e3:d3:e0:
06:7d:fa:4d:9d:8b:4d:e2:db:c9:cc:07:0a:5b:06:
27:7c:d5:23:63:c9:6a:18:5f:ce:06:e8:31:ab:b7:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EF:2F:81:53:90:3F:FE:8C:5B:CE:A3:F3:AC:54:AB:F9:72:6C:B2
X509v3 Authority Key Identifier:
keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:48:ce:9b:40:a1:d3:ab:a4:37:36:31:04:4b:5e:31:3e:e7:
aa:85:ea:79:bb:6c:6b:8a:b6:8b:dc:eb:7a:4c:43:e6:0d:40:
46:63:02:f9:96:9d:12:11:b3:98:31:0c:6a:cc:74:56:7a:b3:
8b:81:33:0f:7b:5f:3f:59:2b:3e:31:8f:4f:0e:e6:9b:89:b7:
4c:4e:b2:98:15:bf:c5:6a:23:7d:c9:15:a0:1c:b0:b4:bd:93:
60:4d:fd:7f:e4:29:18:ba:71:30:be:c8:55:6f:31:9a:fe:e9:
df:9a:73:72:4a:8b:42:26:57:f8:ad:ce:3b:40:3d:67:c2:5c:
76:86:d2:7a:5c:2c:33:df:4d:79:d3:66:c4:27:2c:b4:8b:23:
8e:90:4d:d9:52:e6:8c:ce:c4:3d:32:2e:5d:b0:5d:c3:67:2e:
91:5a:0d:08:54:65:e0:ec:fb:19:df:0c:ec:c3:0e:5c:e1:fd:
35:62:0c:b9:a9:2e:d0:4a:1a:ab:b0:63:b8:56:04:8a:c2:4b:
62:95:68:a9:46:a2:bb:ce:b0:90:7b:76:6c:66:f7:f5:13:61:
53:b7:76:cc:7a:03:92:74:35:ef:5f:af:c6:50:c1:d3:95:a7:
3c:3b:02:0b:b9:fc:50:9b:c4:80:47:96:67:82:cb:75:49:0c:
6b:19:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:27:25 2026 by rpki-client