
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
File: U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft (raw, json)
Hash identifier: vfaFvFqeZYOzMAtcnR87wZQ0GKWow7Q6gHYo/raoaLk=
Subject key identifier: 10:D2:06:A7:D8:9A:0A:D8:E2:D3:5C:58:87:96:AE:22:BC:67:9D:0C
Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
Certificate issuer: /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
Manifest number: 01F0
Signing time: Thu 03 Sep 2026 03:34:51 +0000
Manifest this update: Thu 03 Sep 2026 03:34:51 +0000
Manifest next update: Thu 10 Sep 2026 03:34:51 +0000
Files and hashes: 1: U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl (hash: O8PsDrPeesQK/jVtRZEkR57PhPOiM/5t1+2SVlkE3Qs=)
2: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (hash: w99PgfgQdaKiDqqq1ZXJsjJYVLkyPFxl1fD6GlPrkc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Validity
Not Before: Sep 3 03:34:51 2026 GMT
Not After : Sep 10 03:34:51 2026 GMT
Subject: CN=6a98eadb-9bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:fc:e6:e8:09:d7:19:f9:62:84:c6:5b:60:
94:66:7d:76:a3:ef:96:1c:d5:71:91:c9:0e:a4:19:
cb:11:21:90:ae:77:40:6e:90:2d:4c:24:09:9f:34:
00:75:89:5f:3f:d4:27:6f:8e:e9:95:c9:70:80:0d:
90:2a:27:75:fa:6a:00:04:7b:e3:32:f6:5d:1b:0a:
64:ed:3d:ec:d3:ee:18:8a:44:7e:51:1b:26:be:98:
4c:ab:4b:41:c0:fa:7c:ec:84:27:01:66:f4:30:b6:
33:c7:67:dc:9f:34:98:e4:15:15:56:08:43:d2:31:
92:b7:e6:19:2f:5a:04:2a:b3:3a:9a:50:05:63:28:
d1:df:5f:e1:ee:13:3d:7d:07:00:1f:bb:64:18:b1:
9f:98:4b:10:2c:8c:ac:00:6e:7b:ee:bd:d2:a7:ba:
a9:fd:26:c6:05:a7:93:1b:0c:7f:8e:e2:cb:dc:98:
7c:cd:51:63:41:81:d5:41:38:0f:00:f9:32:45:c0:
e9:aa:8f:4e:8f:5a:90:79:8c:91:6d:c5:11:74:ac:
b9:10:1b:f7:e1:1d:87:e7:fd:de:20:5d:78:5c:d0:
f8:b5:e1:e0:a0:5f:32:0c:10:30:dd:c3:a0:0a:e4:
4b:d0:84:c6:25:03:62:d6:b4:01:4a:68:0f:cb:ff:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:06:A7:D8:9A:0A:D8:E2:D3:5C:58:87:96:AE:22:BC:67:9D:0C
X509v3 Authority Key Identifier:
keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:25:67:a5:05:46:16:5e:c0:21:bf:52:5b:6e:f7:ac:94:c8:
1f:6b:15:39:40:ef:3f:ca:46:f5:91:c1:e7:48:b8:c6:98:67:
3a:8c:d6:86:da:11:8a:cd:77:b9:7e:e9:17:f0:a3:22:9e:12:
83:ee:9d:74:02:7e:f5:c9:ac:ca:6a:29:bc:ba:ed:0d:88:13:
33:c3:e7:fd:d8:c9:90:7f:c4:80:c2:9a:d1:03:fe:87:f3:80:
64:c1:a0:a5:53:ef:d9:76:3c:9f:60:5f:9f:cf:bd:76:b5:d8:
61:66:27:46:05:6e:6b:e1:90:54:5e:2b:d6:9c:0b:63:0b:d3:
d7:07:a5:68:46:ee:c4:d7:83:cd:b2:3c:50:43:c5:26:8f:46:
92:d8:96:74:c6:92:40:8e:01:fe:1b:bc:30:4b:70:a0:e6:16:
6c:dc:55:0a:6d:ee:4b:cb:3f:12:bc:48:9c:18:a3:14:da:dd:
e0:e1:b9:0c:19:18:b4:e9:5e:87:53:85:42:ef:c1:1f:3c:18:
a5:f2:83:15:70:a7:7f:9f:7a:dd:6d:2e:c1:7b:9c:6b:1b:9c:
b7:ff:ac:c2:32:f9:84:88:7d:07:26:9a:37:5b:e1:62:f7:2b:
23:a8:5e:a8:45:0e:74:81:8f:78:e8:59:1b:32:c7:a6:9a:0e:
61:29:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:21:07 2026 by rpki-client