
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json)
Hash identifier: wiHyr74BtPbR50Rme98kZm85BAWmY54Ao7B/hJ/2jRg=
Subject key identifier: A1:7F:C0:3F:95:B9:1D:58:D2:90:96:BE:9F:21:57:9C:4A:6D:C8:88
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
Manifest number: 0206
Signing time: Mon 01 Jun 2026 01:20:23 +0000
Manifest this update: Mon 01 Jun 2026 01:20:23 +0000
Manifest next update: Mon 08 Jun 2026 01:20:23 +0000
Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: ynfc25/F7M9BTTMbvUoX7m/wKbcXkbrJ/ZLK7CB5Sw0=)
2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: k8e7fh/Sk4baSRucN3DJUvfanj8+Y0iTHkIRT27bbss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 01:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Validity
Not Before: Jun 1 01:20:23 2026 GMT
Not After : Jun 8 01:20:23 2026 GMT
Subject: CN=6a1cde57-787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:6f:f2:51:d8:db:65:24:51:87:a7:ed:66:
ab:8f:86:3c:a6:38:03:5c:ac:36:dc:de:11:24:b0:
ac:00:29:69:c2:9c:24:b8:9d:c8:6b:29:a0:a8:1f:
7b:13:ca:2c:58:82:eb:c3:b0:81:16:02:55:24:7f:
73:1d:65:db:90:1e:72:a8:1a:05:5e:d1:0c:2a:60:
63:10:87:26:e6:c0:2f:c8:23:52:df:f4:09:6a:27:
bd:d4:3a:7a:98:69:bc:85:56:36:e1:b9:40:28:5d:
04:82:ed:58:fc:6b:a5:2d:c0:25:15:6f:5b:80:f7:
fe:35:5a:d2:1b:72:7b:eb:a8:18:47:74:aa:67:4f:
72:ef:68:2d:3a:98:e0:8f:f1:dc:bf:a8:57:68:15:
ad:73:5b:dd:46:12:90:97:aa:43:32:17:c4:ac:f9:
d9:0e:3f:e6:83:bc:2f:61:3f:66:36:7d:1e:6a:a0:
b6:3f:2f:c0:ff:47:ad:b5:70:83:71:da:e5:05:fd:
28:2f:6d:f0:5e:0c:ad:de:f5:de:f1:d3:7b:fe:bb:
e8:f3:73:41:b3:87:e0:85:1c:d0:05:47:c4:42:50:
d6:ae:5f:7f:ef:40:f9:64:3a:9a:7c:a0:55:1e:2e:
8c:ca:bb:95:6b:1b:5f:65:69:e9:b9:c4:01:8c:f4:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7F:C0:3F:95:B9:1D:58:D2:90:96:BE:9F:21:57:9C:4A:6D:C8:88
X509v3 Authority Key Identifier:
keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:b4:e7:f8:cb:c9:17:ca:3b:e1:ab:0a:e0:22:cd:3f:c3:95:
f2:12:58:d2:ea:bc:73:aa:37:fb:f9:c7:5f:48:2e:01:3b:ea:
48:22:ce:c4:68:47:97:4e:30:3c:2c:5a:aa:aa:0d:6b:5b:57:
67:7b:97:a6:86:80:af:5d:ff:49:58:67:49:db:8c:1d:23:8f:
fd:00:77:bc:f8:be:7f:66:2f:06:f7:45:a1:b5:7e:ad:7c:0e:
9f:2e:ac:0a:34:30:7d:ab:e5:ad:5a:e0:76:4b:10:62:50:9a:
55:79:eb:57:c8:85:9b:a9:d8:ed:e7:11:ce:47:fb:f1:91:bb:
6e:4e:7f:25:22:72:dc:f0:eb:de:e4:37:63:54:5d:92:23:3e:
fe:39:26:11:12:7b:f3:83:31:a6:ed:69:2f:f5:60:20:c2:f4:
7c:0e:af:f0:14:44:a7:0c:69:ae:81:43:49:5c:74:96:8a:64:
2e:9b:91:47:ea:48:33:66:66:b0:db:31:49:52:d2:58:eb:ad:
56:88:36:b3:92:d0:37:6b:23:1f:84:d8:e9:05:b3:2c:57:ca:
b5:35:a0:bb:00:c6:58:bb:1f:62:48:24:76:b5:2d:f8:20:29:
d4:89:6e:35:3f:6c:e7:95:c1:5d:15:d2:bd:c9:74:de:58:ba:
c8:5a:b8:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw
RjdDQzRGMDIwHhcNMjYwNjAxMDEyMDIzWhcNMjYwNjA4MDEyMDIzWjAYMRYwFAYD
VQQDEw02YTFjZGU1Ny03ODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxxv8lHY22UkUYen7Warj4Y8pjgDXKw23N4RJLCsAClpwpwkuJ3IaymgqB97
E8osWILrw7CBFgJVJH9zHWXbkB5yqBoFXtEMKmBjEIcm5sAvyCNS3/QJaie91Dp6
mGm8hVY24blAKF0Egu1Y/GulLcAlFW9bgPf+NVrSG3J766gYR3SqZ09y72gtOpjg
j/Hcv6hXaBWtc1vdRhKQl6pDMhfErPnZDj/mg7wvYT9mNn0eaqC2Py/A/0ettXCD
cdrlBf0oL23wXgyt3vXe8dN7/rvo83NBs4fghRzQBUfEQlDWrl9/70D5ZDqafKBV
Hi6MyruVaxtfZWnpucQBjPT15QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKF/wD+V
uR1Y0pCWvp8hV5xKbciIMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC
OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5
N3k5a2xCOERiOTRQZk1Ud0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWLTn+MvJF8o74asK4CLNP8OV8hJY0uq8c6o3+/nHX0guATvqSCLOxGhHl04w
PCxaqqoNa1tXZ3uXpoaAr13/SVhnSduMHSOP/QB3vPi+f2YvBvdFobV+rXwOny6s
CjQwfavlrVrgdksQYlCaVXnrV8iFm6nY7ecRzkf78ZG7bk5/JSJy3PDr3uQ3Y1Rd
kiM+/jkmERJ784Mxpu1pL/VgIML0fA6v8BREpwxproFDSVx0lopkLpuRR+pIM2Zm
sNsxSVLSWOutVog2s5LQN2sjH4TY6QWzLFfKtTWguwDGWLsfYkgkdrUt+CAp1Ilu
NT9s55XBXRXSvcl03li6yFq4Bg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:34 2026 by rpki-client