
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File: U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier: dDsVD7GPJplLTHSnR2eCU+vBrl4cmPVy7NaIZ80C+lk=
Subject key identifier: 61:9F:8E:F3:BD:4C:92:4F:76:45:46:81:6B:0C:13:4A:1F:BC:5C:CB
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number: 021C
Signing time: Mon 05 Oct 2026 03:15:49 +0000
Manifest this update: Mon 05 Oct 2026 03:15:49 +0000
Manifest next update: Mon 12 Oct 2026 03:15:49 +0000
Files and hashes: 1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: 9GCJmM2HFT3jic0c01OpIlQElbYfbAQbJ5szSlhpUas=)
2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Validity
Not Before: Oct 5 03:15:49 2026 GMT
Not After : Oct 12 03:15:49 2026 GMT
Subject: CN=6ac31665-19ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:f3:87:95:08:31:b3:d6:ce:16:a0:04:f6:
97:ed:ec:bf:24:ba:4d:c7:00:63:c5:56:43:60:d5:
9f:6d:85:47:4d:a5:13:93:39:a8:dd:3e:cb:d4:09:
a3:d4:72:6f:46:53:11:1b:ac:31:12:53:61:84:67:
a5:f3:14:ed:ff:95:cd:cb:cd:67:02:57:51:3d:78:
cd:2c:a1:28:f3:01:54:e3:6a:fa:b8:75:31:22:6c:
52:10:f8:4a:0d:11:25:69:14:1d:9f:4c:00:9e:4d:
75:4a:ba:01:5f:5d:10:07:97:c8:8b:6a:0a:81:5f:
b3:60:b2:7e:80:42:4c:19:7a:e2:e9:20:11:98:ae:
4d:79:ee:ba:be:c8:13:87:97:2a:ca:22:95:95:6d:
df:91:8d:c2:10:1b:da:10:06:19:3b:d5:1f:fc:42:
56:a0:20:3a:f9:75:12:8e:84:4e:5d:35:66:41:2d:
4d:b2:20:9e:ee:61:09:d6:e0:91:cd:2d:90:e8:b4:
76:4f:12:a8:5f:2b:40:bf:e6:8c:2b:dc:e8:89:2c:
60:5e:99:c8:40:10:f1:15:10:7f:3a:99:6a:11:f0:
ba:a4:f7:c6:ae:90:1d:7b:b0:02:1e:21:69:cf:00:
3a:c3:30:a5:ee:15:c8:4d:32:83:8c:b7:90:71:f2:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9F:8E:F3:BD:4C:92:4F:76:45:46:81:6B:0C:13:4A:1F:BC:5C:CB
X509v3 Authority Key Identifier:
keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:16:2d:11:5e:0a:60:ed:04:b8:39:c1:75:6e:d3:58:34:
bd:b9:43:a6:a2:32:4f:7e:45:ff:96:1a:d5:4b:01:1e:08:8e:
22:4a:ff:77:4e:93:a9:69:37:bf:c6:9e:85:f6:b5:78:3f:95:
b7:24:4b:b3:ea:8d:06:53:c0:30:8c:25:ec:87:58:5e:62:fc:
9e:50:5e:ab:4b:c7:dd:50:c6:a8:7f:7f:10:d8:07:d1:73:d1:
0f:82:bc:d7:62:7c:bc:4e:6e:3b:f5:73:54:e4:fd:7c:34:4f:
9b:43:52:72:fb:04:0e:77:7a:76:be:a3:1d:a9:bb:11:32:ed:
02:01:8d:90:17:01:93:9c:4f:9e:91:b4:7f:48:2a:9c:0a:83:
6d:83:ad:c8:6c:df:6c:2e:dc:92:bf:46:d0:50:d3:e2:82:b2:
05:57:e4:75:4c:15:28:7b:c9:e5:29:a0:d2:9d:ad:07:15:af:
92:42:b0:dc:85:d5:f9:49:2b:3b:77:4b:be:3b:a0:93:4b:c1:
c0:2d:fc:02:d1:89:a4:68:92:ae:2d:b4:84:4e:84:3f:4d:dc:
5f:c9:88:c8:0d:b2:5b:05:b3:5e:84:c2:18:4a:f2:19:b5:0c:
a3:b1:96:d5:f2:fe:70:dc:7d:ef:93:6e:bf:31:51:08:c3:ee:
75:cd:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:48 2026 by rpki-client