
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File: u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier: DovDd73tSwGqPPehj5nwjIVmbv3lbKOzqDcDq4jqPdo=
Subject key identifier: 9A:7C:7B:1A:B1:A8:20:90:22:3F:BB:FB:16:55:02:52:19:75:71:59
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number: 0288
Signing time: Sun 03 May 2026 01:59:40 +0000
Manifest this update: Sun 03 May 2026 01:59:39 +0000
Manifest next update: Sun 10 May 2026 01:59:39 +0000
Files and hashes: 1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: 56sfxrXfHCTfzN9T8ZhX1uJdqU+yJdBaD0cpjwJwlQ4=)
2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: AF+OSPPeJ/k4cpuI6pm2/IpiY0n6OFKaOYlrZAsamTo=)
3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: onPZDg24JU1SAnJ+1qdctr4Q+6RG244WKpPI60NUB8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Validity
Not Before: May 3 01:59:39 2026 GMT
Not After : May 10 01:59:39 2026 GMT
Subject: CN=69f6ac0b-5155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:b8:bf:2d:5a:11:13:06:54:d9:57:d1:3f:
59:ea:66:c9:d2:4c:c5:24:d0:f9:16:9b:46:f2:bc:
ca:f8:3b:5c:cd:2d:de:fe:61:f4:ec:7c:ab:03:22:
b2:60:43:72:8e:4f:4d:5e:d2:ac:c5:e3:92:be:ff:
66:d9:6e:0b:ba:aa:a5:96:14:fb:ef:8a:a5:84:28:
19:76:9c:22:a2:9c:87:15:b9:38:22:b6:56:9a:b0:
91:63:94:f8:be:a4:71:c8:d4:90:80:2d:08:ca:a0:
43:ed:fa:81:96:df:8d:70:3a:8f:de:ca:79:fc:8e:
1b:cb:a6:27:38:07:2b:85:e3:e7:c9:88:18:26:9a:
06:3e:e9:9b:80:32:e0:cc:8c:e3:31:de:b0:d6:47:
6e:1c:80:21:7c:7f:d9:54:ff:43:1a:2d:e4:c7:c8:
86:93:4d:db:36:a7:27:63:37:64:7c:a4:58:85:af:
6e:72:82:61:93:29:31:3a:61:dc:ad:f0:a2:e2:08:
30:43:74:52:16:a1:91:72:19:71:63:d7:ec:dd:6e:
47:a0:55:b7:51:cb:58:89:e3:e1:12:81:d6:92:8a:
d1:40:b5:17:69:5b:80:1c:e1:df:70:15:ec:d2:74:
9a:79:c3:43:58:4c:ca:94:8a:de:35:8a:46:9f:5e:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:7B:1A:B1:A8:20:90:22:3F:BB:FB:16:55:02:52:19:75:71:59
X509v3 Authority Key Identifier:
keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:36:ac:9c:ff:85:a9:09:ce:1b:66:c8:33:e2:20:d6:dd:69:
93:ec:4a:bd:cc:4f:10:8c:f4:ae:d1:01:e8:47:c1:a8:ed:68:
b0:64:7b:d6:27:3f:74:f1:c3:43:0c:f0:fe:23:b7:5d:85:12:
8d:ac:1d:4d:3c:bb:43:9f:a2:2f:57:ee:65:07:d9:49:57:89:
d2:ff:fd:5a:de:39:ca:4a:a1:da:a4:1d:68:d1:0b:02:6c:a4:
95:f6:21:6c:5f:f4:a4:1f:14:c8:8a:21:36:d9:36:37:ba:ee:
6c:43:6b:e8:26:a3:fe:d4:6b:5b:9d:29:77:8e:a4:06:42:1d:
4d:8c:26:ab:f1:5e:24:a6:94:3b:c5:e7:c5:48:b3:22:2e:46:
52:cc:87:a9:e1:3b:59:81:8b:0e:f1:10:c2:38:df:2e:d6:ef:
60:59:92:7e:bf:ff:fe:c2:a6:0c:1a:8d:ce:af:95:33:b9:fa:
a2:e0:bb:97:76:71:d4:8c:66:4c:60:a9:85:80:63:00:94:5c:
0e:45:58:6d:c9:16:b8:e8:7b:67:5a:1c:3f:9e:6b:a7:b1:1b:
6f:de:5e:4d:dd:68:93:82:95:81:57:23:74:b7:a1:53:11:85:
d1:40:c5:b7:86:ac:0a:04:25:b2:be:75:95:f2:ce:8e:e1:66:
58:a8:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 07:58:26 2026 by rpki-client