
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: 4v+RbqgfuJVXk5vjQyoekFi8eskxeFFNrsBScQlukdE=
Subject key identifier: E5:56:E5:A7:F3:8E:45:4C:E7:B5:DC:84:CA:7B:4B:31:03:F5:87:3A
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 0719
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 06DF
Signing time: Tue 08 Sep 2026 22:24:55 +0000
Manifest this update: Tue 08 Sep 2026 22:24:54 +0000
Manifest next update: Tue 15 Sep 2026 22:24:54 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: UFATttm93VZ3OnjoFB9PsbSArmZXQuqyKBX2fXJds8s=)
2: 03A116B2A53111F1AEF72B144211F970.roa (hash: KNz8Cr2ZY2lOPgvrxVkMGeRTemwZCfXtM04vURqUd9M=)
3: CA2056AEA5F911F1863AFD4E4011F970.roa (hash: itjkc0sV7heJhjpLLMb7teKe82pbw3263Tb2aZzAyS8=)
4: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: vxAnQu8I+FETfsi2yVbOeGtWdoSBCdNqoU43CnDVcmU=)
5: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: vY5QoFj5EHYuHnY1WoGJpIuRo8oxFf3pMcROdKUYi68=)
6: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: JRKiJJ9AWmFRvC8bzLvB5N74Umbi+4AAyRuytcebbpc=)
7: 311221F84DDF11F1B04EC87CBC833773.roa (hash: I0GEToVYJ8K9D+Rdoyrx1y5R9bJA2VGV0O6cO0v2MXM=)
8: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: WCFojuggE3ZNtWIBN6Mw5rcPm1Wz+bqqQpugJ6sdoRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 22:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Sep 8 22:24:54 2026 GMT
Not After : Sep 15 22:24:54 2026 GMT
Subject: CN=6aa08b36-41fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:1b:c0:d5:ec:7f:69:65:74:5b:5f:b3:13:
40:69:71:3d:67:89:16:23:83:f6:52:96:2f:79:6d:
9f:47:3c:46:ec:ae:f7:52:4f:49:5c:4b:78:5d:47:
65:ec:28:31:4f:8c:a9:59:a8:79:1d:94:90:f3:cf:
f8:42:bc:cb:a1:ba:23:ef:10:f8:f2:a9:9f:e6:b9:
3e:2d:a0:a7:0a:02:57:ab:25:ec:84:77:40:0a:1b:
c7:fb:48:85:ff:05:de:7e:0b:d8:dc:90:dd:65:8f:
98:53:b5:c5:6d:ef:ab:74:72:e1:26:50:b1:06:87:
5e:e2:62:14:7c:68:03:52:c8:7a:cc:3f:0a:17:52:
fc:c5:0e:a2:30:f1:a0:ba:b7:34:31:15:60:a9:8e:
8b:bd:94:d4:50:07:d8:fd:17:49:cf:80:c1:1a:09:
e3:25:d3:f6:d4:15:93:46:4b:1e:22:73:8e:1e:78:
28:ab:90:2f:ca:c6:ce:90:61:d7:e0:99:3a:dd:43:
2e:20:9a:8e:3b:ea:a4:3f:cc:60:45:3b:d0:e9:27:
ff:12:da:d6:b1:ca:1a:1d:1c:1b:49:17:ec:23:c4:
47:a3:d4:9e:78:31:35:d1:91:36:a1:a6:90:c9:84:
71:11:2e:e1:06:82:cf:4b:5a:15:d3:98:95:96:fb:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:E5:A7:F3:8E:45:4C:E7:B5:DC:84:CA:7B:4B:31:03:F5:87:3A
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:be:63:1e:2c:1f:17:73:ce:ed:ae:ed:12:eb:13:35:25:2e:
a4:ac:fd:31:ca:bb:2e:e8:6d:89:67:12:23:c7:43:93:8c:22:
e5:be:05:8d:42:86:5c:9d:a1:11:1a:42:48:3e:5e:d3:f1:9f:
88:f7:0e:0c:86:b8:32:61:08:9c:18:ca:f8:8f:f7:51:f3:f2:
63:9c:0c:3c:3d:34:95:7c:23:b9:dc:1f:63:59:1c:d8:77:75:
30:b9:58:3d:69:ed:33:39:35:6d:d9:2c:be:b8:ef:e7:c9:1d:
5f:fc:77:41:02:aa:5f:ef:96:ed:59:f7:75:14:74:64:a8:0b:
24:dc:56:4d:80:df:d6:2d:a5:12:1e:d8:0b:e9:33:57:54:65:
03:49:2a:1b:1f:d9:f4:24:b0:03:7c:98:bc:f3:62:d6:02:57:
36:4e:64:ec:fc:0e:83:bb:a4:57:54:6b:ce:2c:38:a8:a8:03:
08:95:23:32:70:ff:b6:4d:cb:38:80:8d:ef:77:c2:31:4c:20:
54:40:8d:f7:c4:da:f1:0d:60:e7:17:e0:c8:27:d2:d6:90:4d:
c2:f0:4b:0c:91:9e:19:10:41:cf:f7:b2:4d:5d:9d:63:81:c3:
ba:66:05:0a:2a:a4:5c:82:b0:4d:33:ef:d9:4b:35:0f:2d:f3:
54:12:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:07:30 2026 by rpki-client