
$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier: WYWvOLPG0clyAZ+h2nAf8ZsM/x3jPHWaGoDJoRxtEoA=
Subject key identifier: 52:2D:70:0C:DE:A1:18:B2:6F:D7:C0:AE:EF:74:43:64:E1:AD:6B:F9
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number: 0281
Signing time: Thu 21 May 2026 01:56:32 +0000
Manifest this update: Thu 21 May 2026 01:56:31 +0000
Manifest next update: Thu 28 May 2026 01:56:31 +0000
Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: aU9b8ybIiohmu5hIKNj0puvtqCX4qcp/6vXmc/fcPVg=)
2: F69540BA810811ED9EA03683C4F9AE02.roa (hash: 1ls87L8wFBI3susqrdOibbBBgEFKgSyseB64cHDFqj4=)
3: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: YhFFk2hbxX7ipWmiEtRtt5VM5YND4GHLWqHWN4WPPew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Validity
Not Before: May 21 01:56:31 2026 GMT
Not After : May 28 01:56:31 2026 GMT
Subject: CN=6a0e664f-7f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:66:d6:7a:a2:ea:91:9e:c2:ec:ff:36:94:
ba:d3:70:72:1d:ce:f5:ab:27:60:49:e1:35:ba:bd:
69:4a:60:49:8a:ef:2b:87:eb:78:c0:49:d1:6a:2f:
04:be:af:04:93:7d:ce:7d:77:8d:d1:88:db:b7:d3:
e2:83:08:43:4c:3d:2a:cb:1f:4b:38:26:53:3f:d0:
47:ce:52:29:a7:0c:df:4b:26:a3:df:5a:26:6c:f1:
7c:0e:6a:22:ba:fc:ca:0c:e8:2d:88:d5:d9:84:31:
be:60:96:a8:55:c9:b2:d4:f0:73:be:9b:12:67:2f:
01:01:11:11:9c:5a:05:4f:5a:f5:26:c8:6f:de:8f:
76:5e:a8:c6:6d:59:5c:07:2f:53:3b:86:96:e8:96:
cf:8e:0d:e3:9a:43:7d:9a:dd:fe:03:04:84:19:f9:
6c:33:ee:6d:3a:87:ec:aa:d6:61:20:6f:94:7b:ce:
6d:93:d9:85:9f:50:76:4b:09:22:eb:be:b6:6f:f7:
1b:4b:10:ea:31:c8:27:1a:28:45:f1:ca:94:9f:ee:
1f:9d:aa:59:db:26:31:eb:a3:bb:4f:a0:57:33:00:
f2:23:88:cf:1c:df:44:00:83:7d:33:cd:b9:9f:f0:
19:ca:d0:34:dd:b4:bd:42:17:ad:65:8b:c6:39:87:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2D:70:0C:DE:A1:18:B2:6F:D7:C0:AE:EF:74:43:64:E1:AD:6B:F9
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7a:b2:be:08:20:36:99:a0:a8:4c:2a:4d:0a:9b:b9:c7:86:
93:57:35:0d:96:42:c8:22:1d:7a:a2:94:40:90:58:0d:98:dd:
3d:2d:2b:51:f7:00:fa:b9:25:42:d1:67:a4:e7:7f:0e:29:5f:
27:8f:a8:32:b8:a1:98:cd:d7:5e:10:21:98:fe:bf:ad:60:4e:
03:42:78:be:99:7d:65:d4:63:cc:fa:48:92:3a:0e:ea:73:c5:
f6:59:91:dd:0f:e6:28:a0:0e:3d:80:47:e0:40:87:ce:ba:43:
37:ff:85:04:28:89:04:41:38:88:dd:be:81:64:32:79:05:4d:
b4:1f:e8:9b:ac:e4:90:d3:ae:4e:4e:f1:3e:3a:6e:a9:98:9b:
d5:a6:3a:d9:8d:8b:52:09:e1:e9:06:e7:e0:b0:7a:ea:74:42:
cd:9b:1b:0a:0d:a2:f1:f9:ae:6d:8a:2d:55:eb:8c:84:19:e5:
0d:08:32:1b:e4:e0:b7:c4:d2:77:70:89:9c:95:6b:bf:85:cd:
c3:22:04:1e:ec:af:65:6e:a9:f9:cc:5b:5a:49:25:20:b3:65:
35:d5:05:d9:ae:e5:73:bd:cd:98:2c:b4:7d:77:81:2f:07:e3:
c8:b5:15:93:23:cf:f9:f1:1c:08:9b:3a:97:d0:b8:5b:0d:b6:
30:3c:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:22 2026 by rpki-client