
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514D3/6031760C8CE411F18C19F6E54511F970/U3lejKdzAaJSg1T0p3yXJMwOWZQ.mft
File: U3lejKdzAaJSg1T0p3yXJMwOWZQ.mft (raw, json)
Hash identifier: CMYf+QYmJE8AGxwVXtDvdPn6bKmH0ZzMcEQoVGej+mo=
Subject key identifier: 1D:EA:98:6A:B4:14:E2:DA:D9:9F:EE:25:DC:8D:A1:F9:6C:CF:E6:BC
Authority key identifier: 53:79:5E:8C:A7:73:01:A2:52:83:54:F4:A7:7C:97:24:CC:0E:59:94
Certificate issuer: /CN=A91514D3/serialNumber=53795E8CA77301A2528354F4A77C9724CC0E5994
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3lejKdzAaJSg1T0p3yXJMwOWZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514D3/6031760C8CE411F18C19F6E54511F970/U3lejKdzAaJSg1T0p3yXJMwOWZQ.mft
Manifest number: 23
Signing time: Sat 03 Oct 2026 09:36:04 +0000
Manifest this update: Sat 03 Oct 2026 09:36:04 +0000
Manifest next update: Sat 10 Oct 2026 09:36:04 +0000
Files and hashes: 1: U3lejKdzAaJSg1T0p3yXJMwOWZQ.crl (hash: OFc6MxtX+OXmBSrHGSVTrR6b9aZqXVkyCM1+wiBiWpA=)
2: EEB3244C8CE511F198C9D3244611F970.roa (hash: AqqbFFb90rUR16poI9nAR8PgPiCtmtkTZsKdm2JUa6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514D3/6031760C8CE411F18C19F6E54511F970/U3lejKdzAaJSg1T0p3yXJMwOWZQ.crl
rsync://rpki.apnic.net/member_repository/A91514D3/6031760C8CE411F18C19F6E54511F970/U3lejKdzAaJSg1T0p3yXJMwOWZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3lejKdzAaJSg1T0p3yXJMwOWZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514D3, serialNumber=53795E8CA77301A2528354F4A77C9724CC0E5994
Validity
Not Before: Oct 3 09:36:04 2026 GMT
Not After : Oct 10 09:36:04 2026 GMT
Subject: CN=6ac0cc84-60a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:12:df:7c:e8:dd:c3:2e:9f:dc:75:3b:55:34:
9f:d4:b6:cc:2c:da:b6:11:4e:af:7e:0e:b9:e4:4f:
00:6d:94:b4:f3:8d:95:b6:29:0f:26:b8:a8:3f:bc:
fe:5d:d1:d2:c2:a9:15:b2:3c:31:3b:d9:c3:f0:ac:
57:b9:ca:a0:47:d8:cb:55:35:f3:77:61:40:a5:7e:
bb:81:ae:07:aa:22:e7:3f:d6:50:62:bb:ab:d8:b0:
71:f2:0e:02:b8:1b:0d:31:db:1d:73:d2:ec:c1:b7:
bf:ed:ff:21:ba:e2:ad:99:7f:38:c1:fb:14:0f:0d:
78:af:81:e8:5d:68:1b:6d:7e:09:cc:b4:07:da:9b:
e8:01:73:71:2b:88:fc:f8:e3:c5:98:29:8f:4d:0e:
41:96:3b:f1:e7:a0:77:d8:d8:d4:ac:ee:50:90:61:
c6:2d:6e:16:70:b7:5d:73:48:04:73:2c:47:9e:cb:
88:28:df:91:39:7d:d4:2d:71:6a:0c:87:d2:e6:30:
fb:14:20:87:be:c1:9f:ad:92:32:73:20:b2:fd:cc:
20:f7:db:49:26:4f:a2:31:d2:58:37:c5:e8:d3:b4:
1b:6b:6f:fb:d7:00:af:51:32:40:f7:39:88:d9:8f:
64:17:7f:da:2c:bc:09:7e:18:3b:3a:79:24:0b:6a:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:98:6A:B4:14:E2:DA:D9:9F:EE:25:DC:8D:A1:F9:6C:CF:E6:BC
X509v3 Authority Key Identifier:
keyid:53:79:5E:8C:A7:73:01:A2:52:83:54:F4:A7:7C:97:24:CC:0E:59:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514D3/6031760C8CE411F18C19F6E54511F970/U3lejKdzAaJSg1T0p3yXJMwOWZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3lejKdzAaJSg1T0p3yXJMwOWZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514D3/6031760C8CE411F18C19F6E54511F970/U3lejKdzAaJSg1T0p3yXJMwOWZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5e:39:b2:aa:f4:d4:34:ae:ab:db:95:50:39:9f:6c:eb:53:
1d:4e:d8:be:b1:e7:83:d7:d0:1f:88:28:81:c6:57:1a:56:f9:
0b:6b:6f:55:93:57:70:e5:0f:b1:3c:28:1c:30:68:5d:12:e1:
ab:a8:48:12:e3:d1:da:5d:a2:ee:49:c0:fc:b1:51:96:58:6e:
0c:30:7b:25:bc:e3:5d:94:03:00:fa:78:01:51:5f:75:4c:8b:
4e:5e:68:aa:c0:26:47:75:5c:ff:38:25:b3:8a:69:58:87:4a:
41:58:19:ad:bf:b0:7f:d0:fa:56:b0:13:56:cf:80:06:58:25:
2c:79:ca:63:f5:53:aa:a9:e3:36:e8:c4:de:ae:69:32:2c:d3:
f5:54:f1:de:03:58:ce:0a:56:33:a7:86:e6:bf:61:70:9f:52:
4d:6c:ff:11:f6:bc:7f:43:30:79:7d:30:fb:e9:e0:54:16:15:
9d:9e:76:1c:63:04:12:83:3b:06:49:02:4f:41:e3:02:2d:bd:
01:53:18:91:47:fa:c2:5f:59:6e:11:70:57:8e:19:ac:5f:35:
f6:2f:21:d7:ee:44:e9:32:20:c1:bb:40:88:86:90:47:22:cf:
8b:9c:07:03:19:75:4d:7b:07:84:25:74:4d:1e:4c:63:01:ca:
f6:b5:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:57:42 2026 by rpki-client