
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json)
Hash identifier: b+Kt3EEgCttzJg4NwPQUwxQNUDHtGy9NR1zvsrLyKxI=
Subject key identifier: 77:F9:01:9E:DD:0D:B4:F2:C8:DF:4B:79:73:AD:A5:25:E8:90:86:62
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial: 0383
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
Manifest number: 037E
Signing time: Thu 21 May 2026 00:54:10 +0000
Manifest this update: Thu 21 May 2026 00:54:10 +0000
Manifest next update: Thu 28 May 2026 00:54:10 +0000
Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: URhhqbZW92UoQFlkDiSjHpK1dPHxx32b/YrnmvuKh2Q=)
2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: xUdGjut85J8auqIyCk2ULhlxGhkzVM/KegV60so15Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899 (0x383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Validity
Not Before: May 21 00:54:10 2026 GMT
Not After : May 28 00:54:10 2026 GMT
Subject: CN=6a0e57b2-944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:08:d7:78:4d:07:38:5f:ef:fa:cc:8a:58:
23:fb:c4:15:4b:87:83:85:a4:cd:af:f2:1e:4b:20:
4b:7d:84:72:b7:f0:88:5c:19:83:69:17:05:9e:6f:
ec:2e:9b:8d:c9:e0:5c:f3:81:15:52:7a:e8:d7:4f:
70:64:7d:57:10:e3:86:45:96:14:6f:96:b2:93:fa:
b3:6e:d2:17:ae:92:04:4a:b5:df:2b:4b:19:ff:ad:
8b:7b:b9:20:90:8d:c5:0d:8f:95:f3:7c:23:f4:bb:
c5:73:c8:8b:d8:bb:c4:f8:89:40:49:5c:54:fa:1f:
af:58:9e:ca:cc:4d:e7:77:f4:97:cb:a2:5f:bf:bf:
fa:43:2d:57:09:7b:8f:db:c6:db:ec:cc:70:83:44:
86:02:7c:f0:cc:34:2e:e7:27:4e:80:e2:af:4e:3e:
80:45:7d:f4:f2:5d:32:8b:25:a5:71:ae:ae:e3:3b:
1b:4f:c5:9d:5a:24:b9:30:b5:bc:e8:78:72:f1:1f:
78:c8:0f:ff:1f:4f:21:a6:5d:82:75:27:f0:13:71:
9f:3f:6e:cc:2d:c5:5e:58:4d:0e:ef:10:e8:6f:1c:
0d:f3:bc:9e:1d:fd:2b:0d:42:5b:78:c4:bf:87:45:
2e:59:81:56:b9:c7:fa:d0:90:dc:81:b2:c3:57:69:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:01:9E:DD:0D:B4:F2:C8:DF:4B:79:73:AD:A5:25:E8:90:86:62
X509v3 Authority Key Identifier:
keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:a1:e2:bf:19:d5:d5:c5:90:f1:b3:6a:71:69:4d:c5:4b:
10:03:e0:19:e5:21:0d:e2:bd:ab:c7:fe:fd:30:4e:69:2b:17:
78:17:3d:82:6e:c5:3d:a5:b6:74:31:02:b0:02:3b:78:3d:c2:
35:f7:ce:d9:96:01:07:07:90:52:4d:92:72:90:d7:3d:19:5a:
c9:20:eb:59:31:58:d9:9a:9b:c3:0a:f5:af:cc:92:2c:0b:2e:
d0:aa:6c:42:2f:e0:ed:b9:1d:9f:9c:8f:e0:cb:ef:fd:ac:f6:
d5:7a:e2:c4:bf:91:a4:bc:53:c3:e2:e9:b1:39:28:fa:c6:26:
03:a8:d6:55:77:22:aa:7f:5b:c3:5b:ec:32:2c:d2:da:b2:ea:
09:49:9e:94:50:8c:97:c3:3a:ab:3b:00:0c:c2:20:75:3d:98:
b5:51:47:62:4d:d0:3e:d0:5a:d4:23:d4:97:71:2f:e2:8f:a3:
ad:2f:57:dc:1c:34:5a:61:ba:1c:e6:ec:21:ec:1a:89:20:3b:
67:f4:ff:44:97:b0:0a:31:10:32:ce:ad:ad:e9:55:17:56:f5:
8e:f4:48:5c:81:e9:62:c5:6e:5a:fe:2b:a1:ff:cc:b9:85:5d:
40:ba:24:08:ac:94:65:b9:4b:ac:2e:34:80:3c:63:b9:ac:6d:
61:c3:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:30 2026 by rpki-client