
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: 3wW3urHRCx3fz3kAJZA64hlIkp4l6JjtOyRh+O0d2YY=
Subject key identifier: DB:31:D9:CA:6A:52:59:DB:D3:46:98:8A:23:1D:01:25:CB:8E:76:D4
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 0731
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 06F7
Signing time: Mon 26 Oct 2026 22:10:29 +0000
Manifest this update: Mon 26 Oct 2026 22:10:29 +0000
Manifest next update: Mon 02 Nov 2026 22:10:29 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: eNO4x5Ywomc4ZPESGrSCRqQsVoXFmz2ogj7Fw17WLXc=)
2: CA2056AEA5F911F1863AFD4E4011F970.roa (hash: itjkc0sV7heJhjpLLMb7teKe82pbw3263Tb2aZzAyS8=)
3: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: JRKiJJ9AWmFRvC8bzLvB5N74Umbi+4AAyRuytcebbpc=)
4: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: vxAnQu8I+FETfsi2yVbOeGtWdoSBCdNqoU43CnDVcmU=)
5: 311221F84DDF11F1B04EC87CBC833773.roa (hash: I0GEToVYJ8K9D+Rdoyrx1y5R9bJA2VGV0O6cO0v2MXM=)
6: 03A116B2A53111F1AEF72B144211F970.roa (hash: KNz8Cr2ZY2lOPgvrxVkMGeRTemwZCfXtM04vURqUd9M=)
7: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: vY5QoFj5EHYuHnY1WoGJpIuRo8oxFf3pMcROdKUYi68=)
8: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: WCFojuggE3ZNtWIBN6Mw5rcPm1Wz+bqqQpugJ6sdoRE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841 (0x731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Oct 26 22:10:29 2026 GMT
Not After : Nov 2 22:10:29 2026 GMT
Subject: CN=6adfcfd5-50fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:d1:aa:4e:f9:38:ab:0b:4f:b4:0a:ef:ad:
e7:1e:c6:5d:f8:41:5a:82:61:c1:e6:ff:dd:14:9d:
06:bc:71:7c:b1:21:4b:48:9d:c6:74:d5:7a:85:e4:
2d:6d:e8:2a:1b:0f:aa:e1:de:1f:c6:3e:00:02:d6:
8e:96:a5:58:1e:88:54:cc:b1:6f:30:8e:27:32:04:
ea:1c:fa:76:17:58:ba:16:16:c2:f1:dd:23:c7:2b:
a4:cc:cb:c5:48:29:bc:0c:60:6f:8d:67:7f:66:5a:
e1:ad:35:28:5b:97:0b:f3:ba:68:39:ec:ab:e2:f7:
75:7c:96:72:cd:bf:57:e2:8b:ab:be:b4:27:02:21:
72:87:6c:3a:ca:85:9c:12:d2:85:d1:86:42:43:ea:
3a:ce:d0:4f:e4:f2:e8:63:83:f3:2f:0d:e5:7f:4f:
59:0e:92:f0:b1:eb:8d:56:a3:ae:5d:0a:fb:4b:6f:
14:04:64:8e:14:ba:80:df:f8:7d:17:61:05:a0:ad:
0e:fa:0f:0d:f3:5e:2c:6c:a4:7d:7a:95:b3:1c:b6:
0b:e2:c2:5f:ff:bd:ec:8e:4c:d7:00:a8:dc:bb:fe:
73:e3:6c:fa:f8:31:43:18:0e:c7:6e:da:39:80:98:
47:06:dd:31:c3:67:71:f8:39:c4:cd:b6:d0:85:ce:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:D9:CA:6A:52:59:DB:D3:46:98:8A:23:1D:01:25:CB:8E:76:D4
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:9d:63:ac:3c:f5:da:a8:83:99:d5:33:4c:22:35:ed:3f:4b:
3b:24:42:e4:2c:4e:1b:c1:bd:2b:95:2a:c1:8b:9b:91:df:00:
89:5f:20:9f:c9:ff:be:76:7c:51:47:26:1a:f7:c9:6d:0d:c0:
0f:d7:0d:eb:75:89:69:29:ed:5d:5c:b9:44:78:0d:f6:aa:45:
17:2d:fa:64:8a:06:21:69:5f:08:36:d0:f7:83:59:d7:28:b4:
51:e0:c0:9a:7a:e4:65:f3:1a:31:a3:f1:7b:8f:60:e1:07:4f:
0f:df:55:a9:e6:cf:ea:16:c9:79:60:8f:6d:1c:ea:44:8a:6b:
3d:99:96:35:4f:35:d5:b9:ab:93:57:b6:5a:e8:dc:c2:2a:f5:
f0:02:ad:aa:3b:dd:18:49:62:40:08:aa:10:26:1f:1e:4f:8d:
e8:ac:ac:5f:7c:0f:ac:35:ea:3f:43:79:df:2c:74:67:08:ac:
9f:02:b1:12:5a:d8:66:a8:c4:dd:df:36:b8:b1:c4:a3:4d:38:
89:5f:25:16:f1:18:ac:68:16:9d:36:89:13:7d:be:4b:f5:af:
68:40:c5:06:e1:8c:ff:c4:4f:1f:12:26:3f:66:0c:3a:7d:c8:
c6:49:17:a7:ca:02:7a:d8:fe:7e:89:bb:3f:5f:ad:4a:39:54:
32:d3:07:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG
MDVCQUYyMTEwHhcNMjYxMDI2MjIxMDI5WhcNMjYxMTAyMjIxMDI5WjAYMRYwFAYD
VQQDEw02YWRmY2ZkNS01MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsQbRqk75OKsLT7QK763nHsZd+EFagmHB5v/dFJ0GvHF8sSFLSJ3GdNV6heQt
begqGw+q4d4fxj4AAtaOlqVYHohUzLFvMI4nMgTqHPp2F1i6FhbC8d0jxyukzMvF
SCm8DGBvjWd/ZlrhrTUoW5cL87poOeyr4vd1fJZyzb9X4ourvrQnAiFyh2w6yoWc
EtKF0YZCQ+o6ztBP5PLoY4PzLw3lf09ZDpLwseuNVqOuXQr7S28UBGSOFLqA3/h9
F2EFoK0O+g8N814sbKR9epWzHLYL4sJf/73sjkzXAKjcu/5z42z6+DFDGA7Hbto5
gJhHBt0xw2dx+DnEzbbQhc5TawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsx2cpq
Ulnb00aYiiMdASXLjnbUMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE
MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4
bFZGSjlYWWhHUVR3VzY4aEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxJ1jrDz12qiDmdUzTCI17T9LOyRC5CxOG8G9K5UqwYubkd8AiV8gn8n/vnZ8
UUcmGvfJbQ3AD9cN63WJaSntXVy5RHgN9qpFFy36ZIoGIWlfCDbQ94NZ1yi0UeDA
mnrkZfMaMaPxe49g4QdPD99VqebP6hbJeWCPbRzqRIprPZmWNU811bmrk1e2Wujc
wir18AKtqjvdGEliQAiqECYfHk+N6KysX3wPrDXqP0N53yx0ZwisnwKxElrYZqjE
3d82uLHEo004iV8lFvEYrGgWnTaJE32+S/WvaEDFBuGM/8RPHxImP2YMOn3IxkkX
p8oCetj+fom7P1+tSjlUMtMHUg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:45:18 2026 by rpki-client