
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
File: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft (raw, json)
Hash identifier: NA2ddF3UOdqL1qFGu2Fk/syZIYbb2AA+evWwkf4xKgU=
Subject key identifier: 4E:94:94:B6:9C:65:1F:D6:3B:12:A0:56:3A:C4:B8:BC:D6:A2:57:1E
Authority key identifier: 51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
Certificate issuer: /CN=A91C575E/serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
Manifest number: 89
Signing time: Thu 21 May 2026 07:41:11 +0000
Manifest this update: Thu 21 May 2026 07:41:10 +0000
Manifest next update: Thu 28 May 2026 07:41:10 +0000
Files and hashes: 1: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl (hash: 8xT4dkDZwHRNpz53yzRRth7vLlYJGO+itLYCk4JL4OI=)
2: 3FD60CEC896B11F0A99C2258C4F9AE02.roa (hash: Znxli92ke42bUcuO4y2MWt6186ap7JgRI1qPxtQiAUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C575E, serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Validity
Not Before: May 21 07:41:10 2026 GMT
Not After : May 28 07:41:10 2026 GMT
Subject: CN=6a0eb717-e25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:0c:88:47:d2:09:b9:b8:52:b6:7e:ad:3c:
ab:0e:6c:5b:50:58:1f:c8:c9:a6:20:27:a5:24:bd:
f8:6a:e4:51:58:8c:d8:9e:74:1a:be:35:0f:08:ab:
be:60:56:99:19:af:03:35:34:44:9c:ca:19:d0:ea:
73:73:26:c7:30:ea:d8:7c:25:f5:84:fb:21:c1:93:
d3:b2:fe:81:39:f0:f0:4b:9e:cc:a3:c1:6d:39:d3:
0c:6a:54:1b:6f:0e:30:57:69:a5:17:ca:91:52:45:
3d:ab:64:98:40:71:57:47:4d:2e:f1:fc:dc:a3:e8:
c5:ff:3f:a4:5b:46:a6:18:0f:95:ca:a8:bc:a0:6e:
e7:c5:2f:59:3d:22:5f:d9:2a:fa:5a:7a:82:7a:9f:
4a:1e:80:6b:b2:da:0a:36:33:50:92:26:87:de:44:
b6:76:ea:be:a8:d0:8b:cb:d4:53:1e:0c:de:db:18:
93:23:11:07:e1:b5:38:bd:d1:b1:37:0e:bf:12:7a:
d4:a1:6d:aa:18:5d:2a:a6:24:e0:ff:b0:2f:f8:9e:
88:f5:84:88:ce:10:97:2d:07:55:77:5b:8a:2e:d3:
30:13:f2:ee:1f:ef:da:59:ca:d1:d3:c1:5d:2c:ef:
3a:88:06:51:1d:e8:b0:7c:63:f6:95:a2:b3:e9:31:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:94:B6:9C:65:1F:D6:3B:12:A0:56:3A:C4:B8:BC:D6:A2:57:1E
X509v3 Authority Key Identifier:
keyid:51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:dc:5e:3b:76:0c:47:d8:15:ee:a8:2f:08:57:3a:ef:11:
0f:79:7a:59:5d:7b:0a:ac:fa:80:79:2f:2d:04:33:c5:7d:cc:
bd:54:6c:8f:1f:65:79:77:0f:22:8b:bd:34:cd:96:72:ea:78:
b0:60:0f:c5:91:13:bf:a6:75:3d:26:f3:28:21:d8:f2:09:ca:
3d:b7:de:88:8e:26:ad:cb:68:0b:70:7e:12:da:53:82:90:f9:
b2:27:9d:0c:1d:13:ad:8d:e8:bb:40:4a:2a:e5:b4:91:38:b5:
51:74:64:02:72:e7:d4:94:0b:52:4d:3e:00:ed:ca:3c:e0:27:
05:c2:f0:e8:0d:18:e5:60:5d:a6:30:a7:db:86:2c:26:eb:d3:
dc:00:81:f9:88:f2:18:07:5d:18:eb:3b:ba:65:b2:a6:fe:46:
e0:11:2b:28:d3:6f:32:e4:e8:1b:d2:2f:01:85:f7:52:d9:28:
e7:a9:97:e2:57:b2:be:db:32:cd:37:4e:21:9a:9c:75:c3:4b:
7f:bb:6d:db:42:31:90:f4:d6:3e:91:39:46:aa:01:4b:bb:85:
ff:72:c0:b2:06:08:6c:61:00:1c:00:e7:bb:1a:bf:78:cf:d2:
b7:98:15:44:36:4e:f8:70:c2:72:6d:7c:63:87:94:4b:4b:99:
d5:b4:95:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3NUUxMTAvBgNVBAUTKDUxM0VDRTczRUU5RUEzMjVFQTQ0MjkzMUIwMDYyQkQ4
QkYzMDRBNzYwHhcNMjYwNTIxMDc0MTEwWhcNMjYwNTI4MDc0MTEwWjAYMRYwFAYD
VQQDEw02YTBlYjcxNy1lMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YsMiEfSCbm4UrZ+rTyrDmxbUFgfyMmmICelJL34auRRWIzYnnQavjUPCKu+
YFaZGa8DNTREnMoZ0OpzcybHMOrYfCX1hPshwZPTsv6BOfDwS57Mo8FtOdMMalQb
bw4wV2mlF8qRUkU9q2SYQHFXR00u8fzco+jF/z+kW0amGA+Vyqi8oG7nxS9ZPSJf
2Sr6WnqCep9KHoBrstoKNjNQkiaH3kS2duq+qNCLy9RTHgze2xiTIxEH4bU4vdGx
Nw6/EnrUoW2qGF0qpiTg/7Av+J6I9YSIzhCXLQdVd1uKLtMwE/LuH+/aWcrR08Fd
LO86iAZRHeiwfGP2laKz6THv2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6UlLac
ZR/WOxKgVjrEuLzWolceMB8GA1UdIwQYMBaAFFE+znPunqMl6kQpMbAGK9i/MEp2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTc1RS9FMkFDQjQzQTg5
NkExMUYwODFFNDRENTdDNEY5QUUwMi9VVDdPYy02ZW95WHFSQ2t4c0FZcjJMOHdT
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VUN09jLTZlb3lYcVJDa3hzQVlyMkw4d1NuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTc1RS9FMkFDQjQzQTg5NkExMUYwODFFNDRENTdDNEY5QUUwMi9VVDdPYy02ZW95
WHFSQ2t4c0FZcjJMOHdTblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALrfcXjt2DEfYFe6oLwhXOu8RD3l6WV17Cqz6gHkvLQQzxX3MvVRsjx9leXcP
Iou9NM2Wcup4sGAPxZETv6Z1PSbzKCHY8gnKPbfeiI4mrctoC3B+EtpTgpD5sied
DB0TrY3ou0BKKuW0kTi1UXRkAnLn1JQLUk0+AO3KPOAnBcLw6A0Y5WBdpjCn24Ys
JuvT3ACB+YjyGAddGOs7umWypv5G4BErKNNvMuToG9IvAYX3Utko56mX4leyvtsy
zTdOIZqcdcNLf7tt20IxkPTWPpE5RqoBS7uF/3LAsgYIbGEAHADnuxq/eM/St5gV
RDZO+HDCcm18Y4eUS0uZ1bSVRA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:04 2026 by rpki-client