
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier: 3qWKLBGEqEs2CSK+UO7TV0tbxJ5NzS5T/bVg8eEfXm4=
Subject key identifier: 7A:7B:08:81:9C:72:AF:5C:BB:BD:A3:A2:BD:E1:B3:72:C1:21:3F:8B
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial: 0E3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number: 0DD0
Signing time: Sun 02 Aug 2026 18:02:22 +0000
Manifest this update: Sun 02 Aug 2026 18:02:22 +0000
Manifest next update: Sun 09 Aug 2026 18:02:22 +0000
Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: ecE3KQN9Mzj2YoZERvI/y+ChSurV42S9kkr2QMN3VBc=)
2: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
3: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
4: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: Ck9MZoOe7ob2C2a2or+Dyfv/jAKPzOkcpTF0nOQQiL4=)
5: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Aug 2026 18:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3645 (0xe3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Validity
Not Before: Aug 2 18:02:22 2026 GMT
Not After : Aug 9 18:02:22 2026 GMT
Subject: CN=6a6f862e-5240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:b9:a1:4d:f8:a1:27:37:17:d8:f6:ca:aa:
62:85:45:5c:04:d8:e6:9f:de:a2:0b:e0:ea:48:56:
24:8e:ef:75:41:a3:16:49:1d:5d:46:11:0f:aa:b3:
f1:4d:5f:5c:f6:32:a5:38:15:07:f2:05:17:0d:4c:
0f:38:81:96:85:b6:71:d8:7d:b5:52:e5:35:50:47:
e3:65:54:d8:32:80:39:44:09:50:b7:50:cd:09:81:
54:28:ce:3f:d7:6a:03:7a:4c:a7:ef:8f:a1:89:06:
7e:b6:9a:64:25:6e:af:51:23:50:68:cd:e1:12:b3:
f8:8b:00:73:34:6e:71:d1:54:fe:e8:16:b5:a4:d8:
83:93:c0:42:0c:c7:54:4c:f2:21:55:4d:36:99:8f:
f0:7a:8a:c1:d5:27:a5:cb:f2:4a:7c:1d:5f:4a:53:
ca:11:a5:f0:17:90:a8:d8:c3:c8:c0:04:9b:7d:5a:
d5:e4:32:26:9d:be:91:d9:18:78:ff:64:2a:6f:9f:
99:a6:81:71:d6:e5:5c:b0:eb:07:05:ad:1b:79:e7:
3d:c8:d2:2a:f6:a8:5f:af:63:bb:6c:e6:94:8c:38:
71:a4:2f:49:3a:f0:c9:e5:b3:5f:2c:81:36:f1:a6:
2b:fd:a6:46:10:6a:5e:e8:68:3d:36:b8:9e:32:43:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:08:81:9C:72:AF:5C:BB:BD:A3:A2:BD:E1:B3:72:C1:21:3F:8B
X509v3 Authority Key Identifier:
keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:15:b7:0f:bc:9e:1f:a2:72:7c:70:24:01:c6:07:7a:7e:53:
08:23:bc:eb:99:9e:b0:de:49:76:62:1b:15:77:ff:bf:39:43:
b7:01:fa:12:c3:bc:c6:a8:d1:3f:8c:e0:8c:73:76:27:06:11:
4e:dc:f5:92:1a:fa:51:c9:2d:65:cd:4b:be:09:d6:6d:e1:ef:
20:0d:49:e0:f1:03:59:75:c5:24:6c:1d:2c:9e:7a:64:b0:9c:
0c:64:7b:e7:fd:d3:f2:23:37:42:d4:3c:cb:e4:38:d0:fb:a8:
55:d0:27:38:29:99:eb:4c:59:bd:ef:cc:12:33:0a:03:1e:cd:
8e:5d:25:0a:7f:b8:a8:5e:b6:87:ae:68:37:2a:24:aa:0f:33:
a5:0f:2c:27:1c:b7:bd:84:cb:37:7c:36:ab:a6:91:7d:b5:cd:
4a:1d:ac:11:7c:e7:92:8e:94:e7:85:a7:d4:1b:35:ba:9f:1c:
3e:f0:fc:dc:41:ab:ee:0b:5a:bc:bc:b6:4a:01:27:7c:bc:2d:
83:d6:89:89:9b:0c:f7:da:d1:02:5b:01:b0:87:67:b2:4d:44:
ba:53:6c:97:8c:0c:24:b9:16:49:ee:d4:60:74:b7:57:fb:d1:
5c:72:fb:7d:76:4c:fc:ba:d3:04:c3:da:05:e6:09:3e:fa:aa:
58:84:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:26:07 2026 by rpki-client