
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File: U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier: sY9n84QEa21fa4frO4fYPoSUa8WDICDfu8CvUDuvnjI=
Subject key identifier: D2:37:08:64:E8:7B:BA:34:41:6A:12:5E:D1:40:E6:9D:FE:D8:0C:E7
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number: 01D7
Signing time: Thu 21 May 2026 03:41:18 +0000
Manifest this update: Thu 21 May 2026 03:41:17 +0000
Manifest next update: Thu 28 May 2026 03:41:17 +0000
Files and hashes: 1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: xyAHO2Y+TTFcjG4kYP2pnofITntkPJe5UW3BbHmtJwo=)
2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Validity
Not Before: May 21 03:41:17 2026 GMT
Not After : May 28 03:41:17 2026 GMT
Subject: CN=6a0e7ede-4b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:cb:8c:2e:bb:57:9b:a6:b9:5f:f3:25:c1:
4f:e4:42:9c:bc:f7:b1:7b:41:b3:8b:e9:75:4b:99:
e3:6f:89:55:49:46:24:ab:8f:a2:08:01:3f:91:bf:
44:76:04:d9:d0:7f:8c:f3:6c:b4:ef:4c:c4:09:f8:
f4:6f:4e:47:6c:5a:2a:7a:d1:ee:1d:ff:8a:3f:f7:
8e:13:50:59:e7:c5:70:88:5f:e9:8e:3b:35:aa:8d:
44:5d:7c:b0:f7:ab:02:e9:4c:19:8c:3d:82:30:b8:
29:6f:f2:53:72:05:ef:0d:b6:3c:b4:f7:28:ac:4e:
33:2b:fd:30:a4:d5:b8:7b:f8:1b:13:0d:32:f5:ff:
59:a1:a7:37:9b:d0:a6:13:5b:95:84:60:4a:0e:83:
ba:8e:a1:29:de:94:32:de:a7:89:bf:b7:de:1a:0d:
b5:b5:49:80:88:8f:e4:06:15:17:c2:66:e2:17:78:
04:ab:14:4c:3d:dd:a6:a3:e3:c5:c9:09:bc:e7:af:
5b:60:47:b7:88:4c:a4:73:03:31:9d:77:21:7c:cd:
48:9f:ca:2b:a2:5f:c4:80:16:3d:43:67:8a:9c:b1:
a6:60:56:53:ee:fe:db:4a:96:fb:52:25:9e:00:03:
d7:24:6a:52:bc:a1:35:c9:2c:ba:93:2e:52:42:64:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:08:64:E8:7B:BA:34:41:6A:12:5E:D1:40:E6:9D:FE:D8:0C:E7
X509v3 Authority Key Identifier:
keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:79:b4:f9:a4:9d:9d:70:fc:db:9b:e7:bb:6e:e3:47:66:b9:
42:38:e0:43:39:bf:cb:be:4c:ff:b8:dc:c4:6e:8f:01:17:85:
05:aa:e1:1e:5b:5f:3a:18:97:af:43:74:85:70:96:af:bd:07:
80:1f:65:9d:4c:d8:5f:8a:f2:ce:a7:f4:fb:2b:a3:4e:85:d6:
c2:9f:92:c7:ef:7e:1f:ed:f6:21:7d:5b:77:ba:00:0d:b7:5b:
5a:b5:48:31:7c:c1:7f:16:8a:0e:5b:80:f3:b0:89:e0:db:d8:
3e:b5:ee:54:0b:d9:f1:e4:32:41:d5:dc:78:f7:9d:f0:a0:fb:
2f:17:e7:50:7a:81:3c:76:cb:6f:8a:d5:e7:a4:c8:75:57:a2:
10:db:0b:0c:ee:63:e8:60:9b:9b:14:ac:34:64:3a:82:b8:b2:
1a:1f:05:5e:57:eb:ee:a9:02:98:52:8c:13:85:9f:27:49:30:
66:b9:18:b2:7f:81:cf:43:e1:dd:28:41:dc:f0:0e:17:9d:2e:
5b:3e:85:78:dd:4b:29:20:60:e5:28:45:44:84:51:23:ef:2c:
07:2d:b3:78:cb:e0:3d:13:9c:95:ee:0f:1f:53:26:db:12:e4:
8d:ae:4e:9a:8d:f4:33:bd:f5:96:c4:7c:06:15:16:d1:bd:c1:
4f:5b:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:04 2026 by rpki-client