
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
File: U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json)
Hash identifier: ycKDtzKiDnnBReu25qJsnDizvVyF8rzhGgaOD4Jt+hc=
Subject key identifier: AC:02:07:47:20:7A:17:AE:6B:44:56:6E:CB:FE:52:D4:49:04:72:30
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
Manifest number: 0612
Signing time: Sun 26 Jul 2026 23:43:31 +0000
Manifest this update: Sun 26 Jul 2026 23:43:31 +0000
Manifest next update: Sun 02 Aug 2026 23:43:31 +0000
Files and hashes: 1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: gs6+FQ4/M3NNG33AO7iaKGq9gmvzX6UaUpftctkJPqk=)
2: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: 6SMT1AnOauj5YAPAP3C0QKupLOTw71ii/bAztVft8xw=)
3: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: 6SWLv2jStmw9Boi79xmGA+0FveHASTq1p9xtUOijHD0=)
4: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: EtIVrjW3D9LKTRC7oaoRmQY6Qz3nhGLe2dzCq7rzB8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Jul 26 23:43:31 2026 GMT
Not After : Aug 2 23:43:31 2026 GMT
Subject: CN=6a669ba3-d1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:68:0d:86:7e:d4:1d:5f:2e:9a:84:ac:0f:
6b:d7:16:7b:d3:bd:2d:29:f3:78:d1:c6:59:c1:94:
bb:da:82:fc:68:5e:58:c8:f3:54:e7:63:49:d6:99:
a0:23:38:c0:50:b2:9b:0e:03:c0:a0:e9:09:ec:3e:
b5:8c:23:fd:12:49:6c:13:fc:59:08:02:82:aa:e0:
67:0d:2b:c7:40:97:d3:0b:ec:b7:fd:46:a3:75:c1:
72:86:99:62:49:81:d7:14:16:17:c7:fe:65:f3:63:
4a:09:99:e9:4d:af:27:c2:8b:01:0e:f6:b8:e1:be:
a9:8c:fb:cd:00:9a:a2:79:09:2c:97:98:bb:82:ed:
8d:0b:ba:14:bb:d1:44:f7:db:be:b7:49:35:7b:96:
06:8d:a7:b7:49:b0:a1:88:22:d0:79:ac:1d:94:44:
ae:83:86:c9:8d:56:6a:5e:61:32:d0:21:ae:51:11:
ed:7b:8d:7b:2c:58:be:2c:dd:a3:9c:f1:15:3d:2f:
f0:a7:c4:fd:3a:e5:0b:98:c5:c0:0f:79:d5:ed:36:
a7:e5:da:67:27:3a:9e:77:70:67:92:58:4b:e9:ef:
f5:57:b2:ee:51:af:07:04:96:08:61:e0:80:cb:81:
1f:7e:de:32:f6:e4:5e:9a:ec:39:ac:85:e1:0a:07:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:02:07:47:20:7A:17:AE:6B:44:56:6E:CB:FE:52:D4:49:04:72:30
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:b2:eb:77:c1:aa:72:cb:da:50:0b:17:c8:75:0d:8d:59:d7:
3c:70:d4:0d:82:11:cc:57:3e:ac:f8:6f:df:74:2d:26:fd:e1:
44:4d:59:38:ad:33:81:32:4a:1f:84:16:cf:8c:88:06:6e:ec:
d0:e6:72:ab:c1:93:ac:34:d1:8f:84:b6:a9:68:ad:cc:13:59:
39:ac:3f:2f:ee:c1:8c:a2:87:da:05:d5:a5:8e:63:86:cb:59:
e7:66:d0:0e:d9:d1:52:6a:13:50:f9:90:d0:9c:fd:0a:d0:e1:
4d:60:5e:c2:f8:35:a4:a6:2d:67:bf:45:e7:d6:f8:37:3a:4c:
d0:6b:97:85:68:1a:97:f6:eb:15:e7:16:56:6e:93:aa:dd:d9:
6b:9f:c1:11:df:9c:60:97:da:39:2f:e0:af:bb:88:29:55:64:
96:ca:90:18:4b:a4:e9:c6:a6:e3:54:10:d7:dd:83:38:5b:36:
04:dc:ef:a3:07:98:14:04:61:e5:7a:2c:5e:40:0e:94:46:51:
93:0c:a2:bf:83:63:22:0c:66:f1:15:a5:07:4b:e6:83:46:d6:
0d:c2:56:ed:45:e2:fa:99:b1:a3:fb:54:40:fe:05:1b:03:be:
9f:3f:7e:e5:d5:fe:ae:8d:47:d2:97:c2:b3:18:e4:84:46:19:
e1:5f:3b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:29:52 2026 by rpki-client