
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: qoLM4cNDUHs701VodR0MDF2lvrUELJsWR2fUwckmZqw=
Subject key identifier: 8D:B7:A5:DF:7B:3C:3D:43:00:40:B9:66:F0:CE:C0:44:84:DD:A3:DC
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 06AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 067B
Signing time: Tue 10 Mar 2026 22:10:50 +0000
Manifest this update: Tue 10 Mar 2026 22:10:50 +0000
Manifest next update: Tue 17 Mar 2026 22:10:50 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: +P7n6a4wX2gnRx3rhoQnOAh2Snu2yfkoTrmpCbVI8ck=)
2: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: iH8N2/EZ0A3FgzosMJpb5IUjNTYPsThENasr1YI4C1Q=)
3: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: 612cmpEWafPstBGm8x2iYDbkh7FUHX/7eUkj+iqPm8c=)
4: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: mMQnIMnHxyxrtTIwTqaDefb9F/Y/eYhRGnrXlUtgbk0=)
5: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: dvfJXQq1EbLSwTmXVBbNhnU/w2dtpCOPHLknOXmP8c4=)
6: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: LNAhRYJg3M12wy9+EdbC2gimkX7SG11fYwLAn51ZszY=)
7: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: aRUQXx0V0GLFzvhmgfrBz3H8fjolbBpOYARYMTl5fCw=)
8: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: wQe9yLAF43ljAO4crGexO1z5JEF2PnlYeQKpz08kYNE=)
9: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: U8arnA83oKFnG2GhSz7RqEAXRJbC7v17OG6QnWS2Zk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Mar 10 22:10:50 2026 GMT
Not After : Mar 17 22:10:50 2026 GMT
Subject: CN=69b096ea-af7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:1c:65:09:12:27:21:18:10:14:f8:8c:da:
36:be:b0:44:22:a2:ae:6a:35:0b:bc:59:b9:c7:9a:
02:6c:23:62:4f:72:a6:b7:f7:66:58:5d:63:26:3c:
d7:93:64:84:f7:07:c1:29:30:5c:0a:52:e8:0a:ad:
f4:73:59:12:45:6b:d3:c3:49:b1:70:61:62:53:bd:
6d:f3:97:9b:71:b4:3c:f4:7b:55:a3:a6:3b:ef:de:
b7:b9:08:98:a2:fa:7b:03:b5:c4:26:e3:99:98:e3:
c2:a9:ac:d4:46:ec:ad:23:56:24:73:78:75:7a:47:
85:86:d3:38:9d:15:90:03:2a:75:9f:12:3d:d6:85:
8e:fd:6c:be:43:f5:8f:51:8a:4e:cd:14:4e:10:ef:
9e:68:7f:3e:a0:00:2c:1a:a1:82:3e:3e:91:51:d5:
0e:e4:40:ae:ca:e4:9b:93:a6:3f:ce:67:85:d6:21:
78:df:8d:63:0f:c5:c3:9c:c6:dc:03:fd:bb:11:64:
6f:29:f7:2d:2c:7b:cb:ac:92:1d:1a:a5:90:68:85:
5d:0a:0b:d7:bd:f7:94:65:ef:15:5f:78:40:5a:12:
40:d5:ab:ca:80:16:1f:87:f4:ea:5c:82:39:d3:ea:
7e:21:03:2a:81:11:e2:4c:7c:d9:cc:03:98:c7:ee:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B7:A5:DF:7B:3C:3D:43:00:40:B9:66:F0:CE:C0:44:84:DD:A3:DC
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:ec:4d:c4:8e:b6:1b:80:e5:09:d2:03:0f:b5:8f:6d:b6:b8:
eb:27:fa:68:fe:46:23:50:7e:2b:53:d5:89:10:6d:75:37:74:
b9:62:68:1e:a7:b0:95:3c:e4:02:0e:2f:56:f1:0d:f6:ec:f0:
2f:d4:9d:10:31:1b:27:b1:1f:49:d2:2b:68:07:3d:71:29:e2:
49:8e:ea:e9:76:ec:4a:f3:59:c3:69:ea:49:83:45:13:26:5f:
38:27:d0:f2:96:78:05:81:f3:14:be:65:25:b4:29:3a:52:76:
05:f8:93:03:55:ec:17:8b:71:d8:a3:cc:d0:a1:07:44:17:72:
b2:9e:de:13:28:b1:f6:60:e7:1a:56:7c:70:8a:f6:cd:7c:12:
1d:3e:0a:e1:10:15:a1:c5:ad:69:b5:c6:88:0e:7d:23:74:aa:
96:a7:b8:0a:5d:25:39:ab:1c:c0:2f:c2:1f:ef:5c:b6:e3:e4:
8f:9a:50:60:ca:1a:30:0b:b5:9a:0b:78:d1:89:1c:c4:fe:c7:
22:2f:ac:de:6b:52:5a:e9:ba:42:92:de:18:cc:63:e4:d6:7c:
48:b0:20:34:69:ef:46:ca:5b:36:f3:d1:29:8d:92:38:5b:a7:
e4:6b:e3:ad:79:c6:7a:f8:1c:94:23:23:61:86:7e:14:17:ab:
f0:ab:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:42:09 2026 by rpki-client