
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json)
Hash identifier: wFyC94o/Fx1zglz0M2XMIkzqUFyq4TJLujq1ebedJbc=
Subject key identifier: 2B:63:1C:91:EA:AE:18:50:FB:C3:C9:37:1C:43:91:EB:5B:43:92:C2
Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1
Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
Manifest number: 0174
Signing time: Sun 05 Apr 2026 04:08:54 +0000
Manifest this update: Sun 05 Apr 2026 04:08:53 +0000
Manifest next update: Sun 12 Apr 2026 04:08:53 +0000
Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: 0Nqk6rNM0qGYyfNaAo9rXFxHuDRzuk4nZvJVv5+jeXk=)
2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: pZOaDUH0nfBeAf7y7YbUpvrNXJh3luHM6SLLYuxsD14=)
3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: 1Lk248Kt03Gu0ojNjhSbpSSO373t7dM1LsyR+Uq6bxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl
rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1
Validity
Not Before: Apr 5 04:08:53 2026 GMT
Not After : Apr 12 04:08:53 2026 GMT
Subject: CN=69d1e056-9eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:5f:50:eb:05:15:b7:66:22:24:90:75:29:
a9:29:4d:19:8e:e3:33:89:4f:c1:41:4a:44:3e:02:
7f:95:80:a3:23:1f:30:3a:d3:a1:46:96:ed:a0:eb:
85:e6:13:6e:a5:71:be:7f:75:53:78:92:da:8b:07:
56:a8:86:b6:a7:c5:79:3e:eb:c6:e5:cf:c0:e5:b2:
ff:06:df:98:82:84:19:be:b6:2f:48:55:45:a2:0a:
49:c3:95:fd:7f:f5:16:39:0d:04:84:1b:c0:42:c5:
f1:ad:93:57:c1:79:d3:a5:f7:aa:74:da:7a:31:41:
85:af:a6:c5:9f:49:28:37:23:d1:92:23:ec:14:45:
ce:ac:62:6e:93:3e:a0:0c:34:1a:93:f2:04:ae:d0:
20:cb:68:bf:d1:9d:c9:d2:d7:fb:d1:83:5c:06:93:
d1:b8:02:bf:68:85:3c:40:ac:8f:44:f1:76:3b:07:
70:b1:01:b9:61:ca:57:b1:b6:31:c4:1d:f6:46:c6:
34:f4:b8:8a:1f:87:57:fa:19:1c:99:41:a0:92:f4:
25:b8:e4:94:7b:f3:d6:7a:f3:49:56:1a:c8:be:0b:
f5:a4:e0:53:49:43:ad:0d:d0:c8:6a:84:dc:1e:ea:
f8:08:28:94:b8:98:76:f4:6a:00:48:5e:30:18:b0:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:1C:91:EA:AE:18:50:FB:C3:C9:37:1C:43:91:EB:5B:43:92:C2
X509v3 Authority Key Identifier:
keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:18:20:ca:d0:90:ff:42:ab:c5:50:d2:ea:97:f6:4e:a2:f7:
55:92:59:a4:71:46:d9:20:c9:56:80:a9:64:09:4f:4e:38:86:
34:aa:cb:43:5a:f3:86:ad:46:e3:f3:29:ac:5c:03:15:a5:ab:
71:a1:b2:c1:3f:d1:b0:71:52:1d:65:24:5e:6e:b2:02:b0:c5:
c9:f9:d9:c1:2f:b6:6d:a6:b4:1e:cc:62:6b:2f:d9:78:2a:6a:
7d:a8:12:2f:82:0d:44:83:01:cd:f0:d9:56:2f:8d:d4:7e:f6:
82:3d:da:f0:1a:37:67:f5:ce:70:6b:8f:66:18:36:93:a6:e5:
ac:41:34:0a:f0:6c:0a:ef:50:66:29:ff:1f:54:bb:36:aa:6a:
67:cf:95:b9:cb:ee:3b:d3:6d:6d:31:fc:1b:cc:1d:fd:e7:c2:
72:de:e8:4d:4f:dd:45:17:83:1a:ba:d8:52:d1:05:f5:11:83:
21:b8:34:1e:d5:28:03:87:36:d4:9d:22:c1:fb:37:fa:8d:3b:
72:50:11:fa:9a:55:48:65:66:38:11:ec:08:53:30:37:5f:36:
3b:df:73:65:a8:bd:49:3d:5d:40:33:7a:80:32:f6:50:68:a1:
4d:31:de:5f:05:31:35:7d:fe:fc:6b:4c:a3:28:b8:51:6c:39:
25:61:1d:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC
N0M3MDA5QzEwHhcNMjYwNDA1MDQwODUzWhcNMjYwNDEyMDQwODUzWjAYMRYwFAYD
VQQDEw02OWQxZTA1Ni05ZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0B5fUOsFFbdmIiSQdSmpKU0ZjuMziU/BQUpEPgJ/lYCjIx8wOtOhRpbtoOuF
5hNupXG+f3VTeJLaiwdWqIa2p8V5PuvG5c/A5bL/Bt+YgoQZvrYvSFVFogpJw5X9
f/UWOQ0EhBvAQsXxrZNXwXnTpfeqdNp6MUGFr6bFn0koNyPRkiPsFEXOrGJukz6g
DDQak/IErtAgy2i/0Z3J0tf70YNcBpPRuAK/aIU8QKyPRPF2OwdwsQG5YcpXsbYx
xB32RsY09LiKH4dX+hkcmUGgkvQluOSUe/PWevNJVhrIvgv1pOBTSUOtDdDIaoTc
Hur4CCiUuJh29GoASF4wGLDEJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtjHJHq
rhhQ+8PJNxxDketbQ5LCMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3
OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt
YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQBggytCQ/0KrxVDS6pf2TqL3VZJZpHFG2SDJVoCpZAlPTjiGNKrLQ1rzhq1G
4/MprFwDFaWrcaGywT/RsHFSHWUkXm6yArDFyfnZwS+2baa0Hsxiay/ZeCpqfagS
L4INRIMBzfDZVi+N1H72gj3a8Bo3Z/XOcGuPZhg2k6blrEE0CvBsCu9QZin/H1S7
NqpqZ8+VucvuO9NtbTH8G8wd/efCct7oTU/dRReDGrrYUtEF9RGDIbg0HtUoA4c2
1J0iwfs3+o07clAR+ppVSGVmOBHsCFMwN182O99zZai9ST1dQDN6gDL2UGihTTHe
XwUxNX3+/GtMoyi4UWw5JWEdbA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:58 2026 by rpki-client