
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier: gBc8+bWhHsMuGldMlYw8vc6odjzeK9YlWbGH15u8dp8=
Subject key identifier: C1:38:07:CA:12:CB:E0:2A:39:C7:F9:8A:90:EE:0F:DA:A8:D3:14:33
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial: 0E23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number: 0DB7
Signing time: Thu 18 Jun 2026 17:57:12 +0000
Manifest this update: Thu 18 Jun 2026 17:57:11 +0000
Manifest next update: Thu 25 Jun 2026 17:57:11 +0000
Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: dI5bArzwhBsKSGA9T3EK7LCy9wv8w4uTAdOgaS7ZbZA=)
2: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
3: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 42dKv4sjx0XRqkeI33DpCxr1YPHwmnsJzTMy3OeU/bA=)
4: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
5: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 17:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3619 (0xe23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Validity
Not Before: Jun 18 17:57:11 2026 GMT
Not After : Jun 25 17:57:11 2026 GMT
Subject: CN=6a343178-994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:db:04:31:3d:fa:b9:50:38:9f:13:87:e9:
15:d5:de:9e:9c:40:98:27:dd:c9:de:1c:85:2c:2a:
55:4d:3f:57:bd:fb:0a:44:c7:52:d2:c7:a6:e6:9f:
fc:43:7b:d0:2f:7e:07:b9:40:b5:36:5d:f0:f0:3e:
52:d7:08:1f:bd:25:20:5e:1b:67:27:fc:d8:c5:e4:
bf:cd:40:d2:44:ac:ad:32:61:40:b7:dc:81:81:90:
32:06:a3:29:33:10:7e:dc:1d:53:f2:86:0b:7e:f4:
f8:9a:25:a7:59:da:a2:63:1a:ca:8a:e6:76:37:56:
b8:b8:13:03:4f:26:5c:23:70:31:b5:a9:15:c3:ea:
50:ed:0d:41:cb:88:c8:b3:57:be:d0:f8:21:52:3c:
59:67:5b:bb:ef:7e:a6:8e:e3:b2:c5:48:b8:39:68:
87:56:2c:58:81:9a:54:67:26:94:a6:89:1d:3e:b0:
c5:e8:db:c3:02:57:d4:9b:ff:a2:2a:4d:8b:bc:78:
b8:97:31:0f:ac:6d:49:08:11:de:d0:d6:83:94:23:
93:03:76:90:83:45:68:06:25:ac:05:cd:7d:9a:bc:
78:92:a2:93:b6:ce:b3:fa:17:0d:dd:4e:17:53:b4:
95:7b:26:26:3a:9f:27:59:67:67:e1:06:6c:0f:54:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:07:CA:12:CB:E0:2A:39:C7:F9:8A:90:EE:0F:DA:A8:D3:14:33
X509v3 Authority Key Identifier:
keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:6d:4f:6f:6a:fc:01:d0:44:38:b6:86:81:59:02:10:b3:bf:
16:b8:bb:a5:e1:6e:52:ec:67:62:29:75:9d:d0:c6:11:b1:be:
98:18:a1:46:06:04:1e:65:13:cc:56:ef:6e:79:5f:41:95:73:
08:6c:66:9c:f1:30:f1:a9:31:8c:68:44:62:00:20:5f:d8:25:
26:55:2c:b3:95:1c:d8:0b:5a:67:25:03:76:a0:bc:16:a4:13:
d1:f7:19:25:7e:2b:9e:e8:38:11:e6:1b:d8:84:ec:e2:84:c9:
71:cf:a7:39:d2:fb:0c:86:37:49:ef:31:5a:7d:16:f2:65:02:
0e:b1:b2:07:93:de:05:c3:b6:76:4e:4e:11:28:02:cf:ec:12:
71:4d:89:52:57:ec:29:0e:9a:e8:e1:af:d8:1e:f4:f7:57:6a:
86:73:7b:b3:01:73:19:3b:1f:82:96:e6:94:71:04:e6:2f:5f:
3f:7c:72:a8:82:11:62:9c:d3:c5:e2:11:4e:37:c6:c5:c3:8d:
f8:59:1f:c1:7d:47:34:71:01:30:65:e7:05:72:ec:c4:f1:0c:
0d:2d:c3:1f:64:cd:7b:0e:2d:a7:0b:3f:c4:fe:54:82:7f:8a:
be:ff:87:d6:5c:c7:36:7e:27:90:5e:6d:8a:07:2c:cf:4a:cc:
00:e7:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:20:09 2026 by rpki-client