
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
File: u4iGb_vrTN7pUxHmIJ92pQG8G48.mft (raw, json)
Hash identifier: 3rKszfHdPVPuFu/BMyozEWPYbGUP1owUJuelCQ8eSZI=
Subject key identifier: A4:D8:5C:88:A7:8B:2B:6C:FC:9E:43:D9:A3:5E:34:06:BA:3C:82:AC
Authority key identifier: BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
Certificate issuer: /CN=A91A9E90/serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Certificate serial: 3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
Manifest number: 3C
Signing time: Sun 25 Oct 2026 08:55:57 +0000
Manifest this update: Sun 25 Oct 2026 08:55:56 +0000
Manifest next update: Sun 01 Nov 2026 08:55:56 +0000
Files and hashes: 1: u4iGb_vrTN7pUxHmIJ92pQG8G48.crl (hash: 5I7tZ79cWq3J5fgtwGQHYHJ4O8uSumCTFYNFC8ixN+0=)
2: A668211C79AB11F1870FA39595A30FBC.roa (hash: bMn1My/eGVHQu+9YF4NOAoOsKQU7m5hZjyTX5JuRqWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E90, serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Validity
Not Before: Oct 25 08:55:56 2026 GMT
Not After : Nov 1 08:55:56 2026 GMT
Subject: CN=6addc41d-ba04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:28:70:fa:ef:cd:17:7c:6a:3c:b5:6b:ac:
3a:da:1c:fe:3b:8a:5b:27:78:7b:a7:04:83:a7:88:
a8:31:c7:75:7c:16:fa:9b:9b:11:5a:26:a4:3b:c2:
f4:af:14:20:aa:aa:d6:be:0b:20:b8:07:46:cc:10:
0f:3d:de:f7:e2:25:c8:bc:79:93:5f:31:11:79:cd:
34:22:f9:53:57:1c:d8:1a:28:08:4f:a0:3a:2d:b8:
e0:19:a4:b7:27:19:7b:6e:51:b9:b7:46:a5:35:9c:
d3:19:3a:51:37:b3:1b:95:c7:5d:84:96:d1:3d:48:
37:1a:7a:37:12:7f:39:4d:cf:be:33:43:85:8d:4d:
3c:69:a3:64:cb:60:73:a3:0a:59:d7:95:49:d6:20:
33:4b:ae:d8:e8:c6:4e:99:c9:c3:58:2a:ae:85:18:
ce:e6:3f:3e:d4:d6:9e:3c:76:70:c5:d6:a7:44:b0:
75:3f:ab:03:f0:07:f8:9c:9d:4f:30:e8:bc:b4:4f:
f4:a3:fe:3c:c2:6d:4a:3d:d6:ab:05:1c:4f:bd:9c:
46:44:d8:87:83:42:c6:ea:1f:d4:1d:b9:cd:a5:ff:
0d:7f:e5:c6:c4:f8:48:f9:c8:7b:42:ad:ea:a2:56:
2e:da:08:60:e2:d8:bc:e7:38:8f:1f:be:67:39:42:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:5C:88:A7:8B:2B:6C:FC:9E:43:D9:A3:5E:34:06:BA:3C:82:AC
X509v3 Authority Key Identifier:
keyid:BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:8a:24:2c:f0:16:7f:09:d5:82:9b:c3:12:50:c9:61:b8:4b:
94:c8:da:fe:a0:2f:f6:7a:79:27:34:89:24:6b:29:91:3a:d5:
51:61:cc:80:25:b1:ce:67:63:72:a8:5e:09:ac:09:f9:a0:89:
b5:bb:fb:d9:65:58:9e:48:a9:59:a9:fe:96:67:5f:6d:62:2b:
b1:82:f2:74:2e:c7:16:8c:f1:5b:dc:58:5d:83:a1:66:cd:96:
0b:c3:fa:17:11:6e:e7:f2:30:c2:35:84:cc:c2:ce:8e:f8:d7:
3a:fa:88:27:cc:33:6a:f3:1f:a8:01:3d:2e:a2:bb:1d:bf:bf:
12:96:7a:99:50:33:45:82:b9:2b:88:e8:99:7e:78:17:a8:0e:
d8:57:47:9a:96:bc:0f:03:80:b8:2a:7b:05:68:62:8a:18:9c:
8e:bd:26:02:d3:16:37:a2:31:88:dc:0a:20:1a:22:10:df:a8:
a1:8a:44:e0:8f:53:a7:29:19:0f:c4:55:65:dd:2e:23:d8:f4:
5a:0a:62:f7:50:68:73:de:b8:74:69:80:f2:39:2c:5b:b6:c9:
5c:f6:01:1c:1b:26:da:11:d3:b1:c2:68:d0:cb:e0:bf:c6:32:
b2:05:c0:3f:e0:17:ae:63:ae:a8:06:1a:46:b5:40:94:ec:24:
3d:1c:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:56:34 2026 by rpki-client