
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier: ormkisFk72m/TxaTrN/YBfNw7O8/Q9Xr36QlRRUyR8s=
Subject key identifier: 60:D1:86:B7:B2:52:96:EF:AA:79:45:11:DF:DD:8F:59:39:D8:52:43
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number: 0639
Signing time: Sun 04 Oct 2026 22:45:15 +0000
Manifest this update: Sun 04 Oct 2026 22:45:14 +0000
Manifest next update: Sun 11 Oct 2026 22:45:14 +0000
Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: PryFhmVQeVYMQPHJnHAybjBpln9aEpijBUFkX91bFXE=)
2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: D1zfHUB1LWQ341UcdC/TPCPRcXgSjIBADJbdxAB0gsQ=)
3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: zYCoiToL+tyHYrArPulDS1EFhOBSHqWiPD13BOonOMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 22:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Validity
Not Before: Oct 4 22:45:14 2026 GMT
Not After : Oct 11 22:45:14 2026 GMT
Subject: CN=6ac2d6fb-940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:39:8f:b6:e2:09:bb:d2:20:c7:36:21:49:
07:84:5e:d8:6d:c2:6f:77:bd:76:61:c1:58:d9:28:
89:2c:ab:4b:33:64:6a:03:28:63:e0:60:6b:5c:17:
f9:65:86:0c:e5:26:58:e9:72:11:33:1d:d7:30:99:
6f:46:df:13:c9:32:ba:a2:4b:6f:87:27:b2:f1:10:
16:68:96:13:63:aa:9d:7b:16:f7:14:98:64:21:0e:
be:ab:08:1e:70:8b:87:a5:50:b0:43:4a:63:95:db:
1d:f9:64:94:ea:79:1b:2a:d5:76:ca:6c:e8:66:93:
b9:d3:53:f3:14:05:8e:8c:c4:3f:6c:f7:9d:f8:6d:
20:16:ce:0e:a3:88:44:0b:ab:5f:7d:db:4f:18:58:
2c:e8:7c:f8:a0:6b:5c:44:4a:69:c5:8d:76:c8:24:
36:b9:75:3a:62:16:d4:a3:76:fa:ec:86:0f:f4:0a:
13:56:2c:d6:37:dc:79:c5:45:9d:68:4a:e9:f2:60:
c9:d1:4c:a8:59:77:c1:06:2a:84:43:a0:a9:d0:54:
c0:5b:7f:d9:08:d1:94:fb:85:a9:21:19:22:40:ee:
70:16:87:f3:a4:1c:08:d8:1e:dd:6c:c1:25:34:d4:
8d:52:96:b3:1d:02:e7:b9:f3:ea:18:ef:7d:ad:19:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D1:86:B7:B2:52:96:EF:AA:79:45:11:DF:DD:8F:59:39:D8:52:43
X509v3 Authority Key Identifier:
keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:2e:50:af:ef:92:8b:1b:04:88:96:76:12:ac:03:cf:b4:ca:
09:16:ed:19:30:98:84:14:c8:05:3e:94:30:60:d8:af:44:d5:
89:22:e1:0a:d7:31:51:b6:2c:fd:89:40:82:af:cc:7d:25:fa:
63:ff:a3:5c:c5:d9:55:4d:90:11:e8:a3:65:55:9a:9f:88:a3:
84:2b:62:3a:7d:f3:4c:29:e6:19:9f:cb:82:df:cd:2b:b0:cc:
53:d5:f5:5c:bf:bb:cf:87:40:5a:96:0b:48:51:8b:dd:e2:16:
3e:d0:22:0a:79:2d:49:6e:9c:00:f8:41:76:ba:52:39:0f:c0:
a1:e5:c1:ba:1b:59:c3:87:35:72:d2:9f:92:f9:b2:15:5c:2d:
53:bd:38:f7:31:02:d9:ab:f8:5c:eb:14:f7:43:0a:32:57:e3:
70:13:f5:79:dc:54:bf:fb:a8:ae:8a:37:49:41:e2:24:87:ad:
fd:ac:c8:b7:33:62:84:a2:73:fa:c2:02:f8:27:91:a0:6e:dd:
c7:c2:f6:04:17:ad:ab:1c:4e:a3:b3:40:07:0f:a5:b1:81:8d:
54:37:43:e8:3f:30:dd:4f:6c:6e:cf:57:9e:3e:9c:4d:e8:b7:
a8:c5:a7:45:bb:77:6f:b7:99:36:91:21:b8:46:02:86:88:27:
f1:22:43:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:30:30 2026 by rpki-client