
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: I/k8lTTVsOpLh9Q/JT0eX9++N9vbUeHWO6gwx2GXl+o=
Subject key identifier: 03:25:1C:97:11:43:E9:19:A5:44:71:28:BF:C7:EF:17:FF:DF:08:F7
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 0730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 06F6
Signing time: Sat 24 Oct 2026 22:16:52 +0000
Manifest this update: Sat 24 Oct 2026 22:16:52 +0000
Manifest next update: Sat 31 Oct 2026 22:16:52 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: OaOmTxlNueMAmUd6K+pKxbfmnf27sItwJk0PyBZ7RIY=)
2: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: WCFojuggE3ZNtWIBN6Mw5rcPm1Wz+bqqQpugJ6sdoRE=)
3: 311221F84DDF11F1B04EC87CBC833773.roa (hash: I0GEToVYJ8K9D+Rdoyrx1y5R9bJA2VGV0O6cO0v2MXM=)
4: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: JRKiJJ9AWmFRvC8bzLvB5N74Umbi+4AAyRuytcebbpc=)
5: CA2056AEA5F911F1863AFD4E4011F970.roa (hash: itjkc0sV7heJhjpLLMb7teKe82pbw3263Tb2aZzAyS8=)
6: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: vY5QoFj5EHYuHnY1WoGJpIuRo8oxFf3pMcROdKUYi68=)
7: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: vxAnQu8I+FETfsi2yVbOeGtWdoSBCdNqoU43CnDVcmU=)
8: 03A116B2A53111F1AEF72B144211F970.roa (hash: KNz8Cr2ZY2lOPgvrxVkMGeRTemwZCfXtM04vURqUd9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Oct 24 22:16:52 2026 GMT
Not After : Oct 31 22:16:52 2026 GMT
Subject: CN=6add2e54-4c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:64:93:57:e3:61:72:ad:67:3c:84:32:a8:
04:93:46:9f:25:01:d1:69:9b:51:d9:37:0b:08:ec:
7b:9b:ae:11:af:77:3f:99:0d:d9:d8:ca:2e:00:4f:
90:4c:57:7f:fb:0e:b0:30:1d:21:d7:fb:29:19:50:
5f:4c:c6:5a:cb:02:63:6f:63:82:a6:5d:af:7c:ea:
6b:da:9d:31:e0:0b:ed:fc:75:58:b6:4e:9f:77:3c:
2a:7c:ca:83:d3:bc:db:b9:a7:e8:da:4f:72:8d:d5:
35:25:a4:7f:30:59:a8:0e:53:b2:bd:28:90:c3:5c:
9e:b9:bf:6a:d2:a9:b8:65:30:1c:d3:ee:2f:74:5d:
7f:fb:8b:57:5e:8b:6b:b8:a4:bb:2f:fc:66:2e:41:
87:21:a9:a0:5d:d2:b2:cb:97:3b:e4:0a:6e:72:0f:
82:24:bf:8c:64:8c:8f:73:6c:b2:c7:f1:89:42:33:
1e:0f:11:67:66:4f:50:95:9d:36:d7:8f:4d:71:d6:
dc:66:ae:4b:b3:d0:62:74:f1:56:b8:ec:63:3f:61:
85:89:e8:7f:10:08:c8:af:aa:cd:99:00:89:b4:5f:
23:ce:6b:1e:f1:2e:87:92:35:33:e2:b7:23:50:82:
0b:2c:2d:2b:92:aa:38:95:cd:c0:0b:d6:ff:7c:2e:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:25:1C:97:11:43:E9:19:A5:44:71:28:BF:C7:EF:17:FF:DF:08:F7
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:0b:dc:1b:f6:3a:0c:7e:af:30:cc:77:f2:34:66:65:98:73:
df:c0:f7:db:23:7f:ff:a8:8f:3b:7a:45:40:77:27:e8:a9:55:
37:cf:35:ff:43:42:be:43:4c:5a:2a:a5:9c:10:8b:7f:31:3b:
37:cf:24:24:a0:02:59:d3:f0:87:8b:c4:51:8b:a8:4c:80:27:
66:34:d3:2b:2d:39:e4:3b:07:24:83:be:54:50:93:0b:cd:07:
96:6f:b8:af:fb:f2:e1:28:79:25:69:aa:21:3b:dc:e6:c7:d2:
7f:87:68:38:cc:e5:2c:e4:de:0d:13:9b:1f:af:7b:a7:be:e0:
c8:aa:1e:78:f4:f6:c5:b5:43:50:cb:c5:4d:63:13:1a:1c:47:
d6:c9:e0:88:74:a7:2f:e3:a5:11:3b:8d:df:e2:e2:78:83:de:
e1:ac:3a:96:16:75:20:fb:c6:77:9c:9a:ad:01:ac:03:1b:d8:
e8:b5:59:0a:9a:63:7c:c5:84:5b:3d:eb:e3:87:50:7b:05:f1:
2c:c0:9b:b8:a6:bd:1d:98:f4:bc:9f:87:a9:c6:86:d6:da:8b:
05:bb:8d:42:8a:c7:e4:a3:12:85:c9:b8:3d:10:0b:0d:18:3b:
67:53:f1:48:e9:18:1d:c7:f6:9c:28:b8:3f:d7:0a:74:42:e4:
51:50:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:41:01 2026 by rpki-client