
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier: Y0DVRNGBi+UPm5vsZkvM4GKMMbs1IJ4q4Bqts+XVypU=
Subject key identifier: 6E:55:88:7B:AC:68:B2:B9:B1:88:C4:CE:2B:01:71:80:95:40:1A:ED
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial: 1EBD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number: 1E8F
Signing time: Thu 10 Sep 2026 16:02:09 +0000
Manifest this update: Thu 10 Sep 2026 16:02:08 +0000
Manifest next update: Thu 17 Sep 2026 16:02:08 +0000
Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: aQSrIKDlVfE2LWB/H9OHnlXhpwHJmmP9whWHFbzzMsg=)
2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=)
3: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=)
4: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7869 (0x1ebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Validity
Not Before: Sep 10 16:02:08 2026 GMT
Not After : Sep 17 16:02:08 2026 GMT
Subject: CN=6aa2d481-1a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:11:be:ae:4f:b0:5c:ca:c1:b8:0f:20:de:
da:45:b4:f2:ca:3b:cc:9e:98:07:15:18:51:fe:59:
dd:3a:46:52:92:5e:67:62:a5:06:1f:dd:c9:4f:3c:
59:2b:14:6c:ce:c4:69:99:aa:86:28:ad:2f:e0:e9:
20:9d:67:9c:52:7a:44:54:3e:b5:87:60:63:61:c2:
b9:e3:52:a5:04:7f:9f:b0:86:c0:74:79:a9:29:66:
11:06:1b:77:43:35:99:bf:ec:46:2e:e6:45:5e:34:
69:bc:d8:26:62:78:f7:68:d3:49:cd:22:41:80:9a:
6f:56:8c:62:05:10:de:4c:23:70:74:1b:3a:97:d5:
4a:06:a9:ce:5f:5b:67:35:14:15:6a:c2:67:87:41:
7d:a0:b0:ac:c5:7a:e8:56:1a:c9:78:d8:7d:f8:2a:
d3:8b:48:91:99:89:0d:ab:36:fe:72:36:c7:bb:58:
69:5a:8f:5b:e1:51:54:9c:07:b0:b2:7e:89:33:4f:
fb:35:21:54:1f:aa:4f:33:fb:af:82:cd:19:59:6a:
3d:6b:a5:0f:87:ae:d3:68:d0:fd:78:db:d2:26:c8:
b3:c1:3e:66:fa:59:f8:f7:60:b8:b7:82:c3:8a:31:
f9:9c:a2:aa:66:6f:88:22:0a:9e:de:c2:f5:3d:01:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:55:88:7B:AC:68:B2:B9:B1:88:C4:CE:2B:01:71:80:95:40:1A:ED
X509v3 Authority Key Identifier:
keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:24:ac:9e:16:69:78:75:f5:37:bc:15:3f:11:a1:83:8b:f0:
d5:5c:73:16:a9:75:1a:e6:3c:59:d8:65:7a:15:11:e4:1b:6f:
f2:67:72:16:53:08:cf:3d:ef:c7:3d:e8:55:c8:d4:c2:5b:e6:
47:bf:98:c1:06:24:1b:2c:46:87:42:f3:01:ee:e4:76:ff:71:
36:e6:de:56:e0:a9:e2:96:71:0b:57:67:47:ae:24:85:f1:f0:
41:75:ef:09:92:64:fa:a9:12:7a:cf:d3:21:57:c9:0c:6d:79:
27:10:f1:c4:4e:2d:1e:06:fb:54:ef:2d:10:0c:5b:96:40:f6:
a8:ba:4a:96:3c:06:05:24:a2:6f:11:36:b8:4e:b3:c8:ae:74:
75:9d:89:b4:95:f7:5d:34:6e:da:c8:e7:df:19:cb:41:b7:7b:
c5:7e:d3:ce:c7:fd:f7:b4:b8:53:c8:37:08:a0:2e:01:3c:21:
5a:04:47:fe:0a:5c:94:d5:9a:c9:96:84:ae:93:f5:2d:65:ca:
13:9f:f1:b8:fb:a6:07:c4:52:23:f5:93:f3:2a:3e:bd:e6:dd:
c0:37:c4:7e:5b:50:41:e8:e5:e1:81:21:3c:fd:86:e8:23:db:
bc:60:02:5e:2c:df:db:09:50:ca:9d:12:42:3c:b0:79:db:59:
2d:2c:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:28:00 2026 by rpki-client