
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier: pWwiM8AuUCahv9pDD/Vr+bCQgXvjPlBZY60wVpWfb+k=
Subject key identifier: 70:D0:2B:F2:AB:24:99:DF:AE:9C:18:AF:81:F1:84:F9:A8:2E:1C:11
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number: 02C9
Signing time: Wed 07 Oct 2026 01:41:35 +0000
Manifest this update: Wed 07 Oct 2026 01:41:35 +0000
Manifest next update: Wed 14 Oct 2026 01:41:35 +0000
Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: 9WDW9mykZPvrtL00D4Sos9A9DP6ldMVy+VAHlHMUm5k=)
2: F69540BA810811ED9EA03683C4F9AE02.roa (hash: kjANU+m8NGi3/h3kcs2+JMjQaSUpPN4ROitBH9ohYXU=)
3: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: jXby300bLqk6OmsYVLmwjByJkTyNtDhvbMpxkEk+1XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Validity
Not Before: Oct 7 01:41:35 2026 GMT
Not After : Oct 14 01:41:35 2026 GMT
Subject: CN=6ac5a34f-6754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:b4:d0:46:be:b0:f4:88:68:ac:ef:13:d2:
72:b6:c5:c7:85:a5:fe:ea:57:f0:6b:bb:6b:e9:5c:
ca:d4:32:0a:07:e2:47:8c:e1:00:c5:ed:0e:64:56:
83:e6:72:7a:c6:3c:1e:9f:15:dd:f5:64:3c:97:16:
44:37:43:e3:c2:3c:2f:0b:dc:5a:72:0f:f5:0a:a4:
f1:b3:4d:8c:90:2f:a2:55:f5:07:f5:40:05:dd:1c:
b1:de:fb:17:c0:6b:2a:81:0a:a5:72:70:92:5d:70:
66:da:f2:c3:9b:e4:ba:51:1d:e8:26:e2:cd:2f:f6:
42:e1:15:e9:e6:7f:d4:fc:34:66:3a:96:a6:62:1a:
04:0b:92:6f:07:ed:e8:5e:c0:a6:49:83:10:8e:f1:
e4:36:4a:10:00:d2:cc:59:84:a9:62:38:d0:1b:dc:
a0:ea:56:59:a7:9d:90:04:57:3e:e2:64:e6:0e:9d:
40:d0:26:c3:30:83:95:18:ec:18:8f:69:9f:0a:92:
1a:5e:16:93:d2:e4:60:60:f2:17:be:86:f4:52:9f:
3d:1a:1a:a6:e8:ef:c4:13:9e:a4:48:7d:a9:f4:ef:
1f:0e:84:bb:28:50:0b:cd:39:57:55:7b:73:5d:b8:
93:36:98:af:ac:0b:e9:31:ee:60:64:e6:f7:c0:73:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:2B:F2:AB:24:99:DF:AE:9C:18:AF:81:F1:84:F9:A8:2E:1C:11
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ac:74:e8:ef:df:14:d9:1d:2d:c1:dc:8b:a5:2c:91:85:d3:
85:e3:05:19:9c:54:ae:e0:b0:22:74:27:44:fc:47:55:d9:ad:
70:5a:7b:ec:ba:c1:2d:c1:96:36:95:a0:13:12:d1:51:09:5a:
d7:b9:98:93:75:f2:26:34:09:bd:ec:ab:62:32:a6:8e:f7:a0:
31:e4:25:55:4c:3f:20:1a:92:14:02:92:43:7e:7c:4b:ef:ef:
ba:85:22:18:81:6d:a1:37:8b:62:57:c4:7e:03:67:b0:f1:45:
74:6a:10:10:4c:82:78:76:ef:b7:a7:e5:23:f9:7a:88:d8:bb:
95:df:9e:81:3f:72:09:20:a4:8c:c5:51:ed:c8:b9:0d:6d:31:
c6:9e:8e:bc:df:70:7f:57:59:a4:78:ec:c6:80:a6:75:59:0a:
c0:52:02:4b:c5:2a:e4:3d:16:1f:fb:ba:e1:9b:ca:51:1e:9c:
06:7c:45:77:1a:78:f8:99:18:44:f3:b0:ba:39:30:b9:d3:f1:
e9:b7:0d:2d:d7:38:b4:59:fa:bc:5b:14:5a:83:09:8c:3b:aa:
b6:c4:da:0b:d7:f7:ce:00:77:5f:1e:e1:7c:ef:79:50:a5:f5:
51:f7:f5:91:47:3e:ee:9f:3d:be:74:c6:24:af:0c:6d:be:f1:
ae:c3:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:56:44 2026 by rpki-client