
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json)
Hash identifier: QwpMkku7vDk0KGe+IbZuR47yXunQMsMO725+RYP79Gk=
Subject key identifier: B2:65:37:96:0B:7C:E5:8F:43:CD:A3:B3:F7:5D:F5:4E:F3:40:13:73
Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1
Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
Manifest number: 01D5
Signing time: Sun 11 Oct 2026 04:12:07 +0000
Manifest this update: Sun 11 Oct 2026 04:12:07 +0000
Manifest next update: Sun 18 Oct 2026 04:12:07 +0000
Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: sK60udG1GO7goOjZvxUXj98ywPTXdfoCZ6HPgmmdH9Q=)
2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: qQKLwedn/C2ikUUx4cT43tzL687XdUpFednnBntiEcQ=)
3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: ynRpXZGmVceBMQx25RkW+LRXIrRmRVCK0pAGR+60GBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl
rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 04:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1
Validity
Not Before: Oct 11 04:12:07 2026 GMT
Not After : Oct 18 04:12:07 2026 GMT
Subject: CN=6acb0c97-af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:c5:d7:99:1b:cb:c9:be:50:f4:3c:c8:c9:
ed:ee:dd:cf:49:e9:c8:e9:44:79:7d:c1:bb:02:e9:
70:18:c2:76:22:50:53:ea:f4:04:1e:bd:63:14:d1:
9b:e5:25:a9:0c:a4:cb:d5:60:b0:e2:cc:7b:76:05:
0d:0f:75:79:42:d3:9b:99:51:85:1d:15:a8:e8:48:
b7:09:4b:69:c4:40:db:35:5d:9f:b4:d9:5b:d4:5e:
8f:25:9d:65:4b:40:8c:8d:ba:5d:59:c9:4e:d8:1c:
f6:3f:10:fc:59:84:5f:4b:7f:65:9e:d8:02:61:3c:
ef:c5:08:15:b2:34:55:7a:10:ca:43:12:d9:08:09:
b9:34:50:0d:0f:57:9d:f1:c1:68:3d:2c:f1:3f:be:
d8:23:94:2b:39:2c:77:43:91:ea:de:ff:ff:80:30:
d0:d2:f3:3d:a0:31:73:84:de:37:d8:f5:51:08:fc:
51:d6:bb:54:ec:89:1e:61:d2:53:05:ed:d1:34:12:
e0:28:da:de:01:c7:c5:44:d7:70:2f:77:6f:bf:01:
0b:74:e4:7c:17:2c:00:c9:46:86:f5:ba:0f:b0:a5:
91:76:7c:6b:0e:fc:fc:6f:e7:00:90:51:1f:0b:da:
19:cf:96:21:57:a0:35:fa:7b:36:73:4d:89:f7:36:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:65:37:96:0B:7C:E5:8F:43:CD:A3:B3:F7:5D:F5:4E:F3:40:13:73
X509v3 Authority Key Identifier:
keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e9:b2:c0:eb:04:76:db:00:45:61:21:8b:bf:af:8d:6a:27:
53:9c:6d:34:b4:cc:a7:cd:67:2c:4a:aa:3e:07:8d:33:bf:a2:
02:79:9e:ee:d3:b4:f7:1c:08:ce:1c:b6:27:bf:69:de:4c:fd:
99:33:0f:16:4f:f8:26:d3:2c:e0:c4:97:96:9c:0c:96:68:40:
79:6c:20:f9:91:bd:6b:2a:0a:a8:e6:26:e2:39:4d:40:98:7c:
23:61:5c:a4:75:34:8c:ca:f2:3a:d0:9d:04:21:4f:f2:d0:e4:
72:bf:6d:b2:cc:8d:4b:17:00:91:b7:21:59:a7:d1:d9:d4:34:
b6:f0:4c:56:b1:ef:ff:e8:04:27:e7:98:36:3b:40:43:02:65:
54:03:b2:76:1a:6f:76:f6:1e:d6:5c:e8:24:19:05:e4:4d:bf:
9e:d1:9e:30:d8:80:3c:1e:5b:4a:fa:04:bf:05:e6:8f:49:5e:
f1:cc:3e:56:bf:ea:99:dc:5b:fd:1d:9a:70:72:22:47:23:eb:
55:03:7f:6e:ee:94:71:ba:68:9d:59:50:11:da:6c:57:11:01:
df:c2:2f:d3:10:41:3c:2b:3c:75:79:b8:7c:bc:4b:74:e4:f1:
06:41:f6:53:5a:75:9b:25:8f:6f:9d:03:ea:c4:f8:e4:2c:0f:
4b:ed:d0:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC
N0M3MDA5QzEwHhcNMjYxMDExMDQxMjA3WhcNMjYxMDE4MDQxMjA3WjAYMRYwFAYD
VQQDEw02YWNiMGM5Ny1hZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAksLF15kby8m+UPQ8yMnt7t3PSenI6UR5fcG7AulwGMJ2IlBT6vQEHr1jFNGb
5SWpDKTL1WCw4sx7dgUND3V5QtObmVGFHRWo6Ei3CUtpxEDbNV2ftNlb1F6PJZ1l
S0CMjbpdWclO2Bz2PxD8WYRfS39lntgCYTzvxQgVsjRVehDKQxLZCAm5NFAND1ed
8cFoPSzxP77YI5QrOSx3Q5Hq3v//gDDQ0vM9oDFzhN432PVRCPxR1rtU7IkeYdJT
Be3RNBLgKNreAcfFRNdwL3dvvwELdOR8FywAyUaG9boPsKWRdnxrDvz8b+cAkFEf
C9oZz5YhV6A1+ns2c02J9zZ8AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJlN5YL
fOWPQ82js/dd9U7zQBNzMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3
OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt
YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADOmywOsEdtsARWEhi7+vjWonU5xtNLTMp81nLEqqPgeNM7+iAnme7tO09xwI
zhy2J79p3kz9mTMPFk/4JtMs4MSXlpwMlmhAeWwg+ZG9ayoKqOYm4jlNQJh8I2Fc
pHU0jMryOtCdBCFP8tDkcr9tssyNSxcAkbchWafR2dQ0tvBMVrHv/+gEJ+eYNjtA
QwJlVAOydhpvdvYe1lzoJBkF5E2/ntGeMNiAPB5bSvoEvwXmj0le8cw+Vr/qmdxb
/R2acHIiRyPrVQN/bu6UcbponVlQEdpsVxEB38Iv0xBBPCs8dXm4fLxLdOTxBkH2
U1p1myWPb50D6sT45CwPS+3QFQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:25:32 2026 by rpki-client