
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
File: U05nXomsmsMC9TCid1KM-Bo8UwY.mft (raw, json)
Hash identifier: iqMsmLZrr1LmfALvBcy81cZQEFehpmdj8owVf6NUpf4=
Subject key identifier: 02:0F:3B:3E:C3:64:48:69:E5:F6:1F:9C:9B:2A:A4:5C:59:59:EF:D0
Authority key identifier: 53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
Certificate issuer: /CN=A91CC1EB/serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Certificate serial: 06AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
Manifest number: 0697
Signing time: Thu 08 Oct 2026 22:43:39 +0000
Manifest this update: Thu 08 Oct 2026 22:43:39 +0000
Manifest next update: Thu 15 Oct 2026 22:43:39 +0000
Files and hashes: 1: U05nXomsmsMC9TCid1KM-Bo8UwY.crl (hash: p41iznC66tQE+Zgg2L+5rH+Ow1tFGkYuebzafhXy18M=)
2: 5C0006B4E1B711EEA6D7F740C4F9AE02.roa (hash: JS+BkuUeBbAKOEIjpvSfqdX1PU3qVq3t7HBFZXPnHlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1EB, serialNumber=534E675E89AC9AC302F530A277528CF81A3C5306
Validity
Not Before: Oct 8 22:43:39 2026 GMT
Not After : Oct 15 22:43:39 2026 GMT
Subject: CN=6ac81c9b-0dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:80:f6:68:16:96:ca:f3:8d:df:c5:f9:76:
c7:c7:18:a6:1a:ba:87:f2:d2:ec:12:e6:56:03:1d:
4d:8d:af:21:93:17:9f:94:9a:20:5c:64:1a:2e:3f:
cc:be:4f:79:b2:5f:8b:c7:fc:29:28:e9:28:37:a8:
1e:7b:f9:a6:4b:6e:52:a7:4e:fa:64:98:4a:a1:29:
88:3e:0b:f9:77:5d:f8:02:72:19:2c:7f:6b:7c:36:
de:83:68:61:65:09:27:2e:a9:aa:47:a1:f7:c0:bb:
bc:8d:1d:ac:51:46:43:8d:34:63:bb:7a:29:22:72:
12:c4:c1:ac:2e:61:b7:6b:a9:ef:44:1a:2c:1e:30:
8e:bc:ae:0b:b1:91:07:18:f5:96:5e:eb:77:ff:d7:
9f:4d:90:9b:42:ce:0d:bd:4e:33:90:50:9f:67:79:
f4:2e:0b:25:eb:26:64:a5:fb:78:26:82:2c:30:3c:
bb:ec:9d:eb:59:d4:81:0d:0c:41:ea:89:d2:88:f5:
75:94:c6:dc:eb:6d:33:0b:d4:eb:0f:55:92:52:af:
5d:eb:5d:3b:ed:7e:dd:c2:a8:d4:be:28:af:66:04:
ba:79:ae:62:18:69:b8:04:66:33:89:38:16:cf:71:
7d:5c:42:1d:f4:4b:de:8a:8f:87:8f:66:98:20:ee:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:3B:3E:C3:64:48:69:E5:F6:1F:9C:9B:2A:A4:5C:59:59:EF:D0
X509v3 Authority Key Identifier:
keyid:53:4E:67:5E:89:AC:9A:C3:02:F5:30:A2:77:52:8C:F8:1A:3C:53:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U05nXomsmsMC9TCid1KM-Bo8UwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1EB/AC384AA6DD8211EB958D1C30C4F9AE02/U05nXomsmsMC9TCid1KM-Bo8UwY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f4:34:98:d3:22:0f:99:b7:1f:f3:e9:8b:cf:2c:18:0a:2b:
b2:97:2e:f4:a7:01:2b:90:8c:16:fe:71:87:5d:5a:d4:c5:c3:
ef:8c:75:d5:37:cf:03:a0:5d:37:7d:3b:c2:fa:57:e8:92:01:
b9:cf:23:b6:05:de:c3:2a:ab:14:ec:ff:ae:c2:5f:8e:e4:9f:
0c:3f:cb:61:0e:d7:10:b0:43:2c:05:a8:a8:b1:19:91:1f:b9:
7c:e8:f4:d1:9f:07:d0:59:a1:b7:0d:1e:fa:51:71:b5:97:18:
df:78:85:ee:18:d7:3d:24:99:21:62:b9:52:6e:32:f8:bb:87:
d9:f5:dc:b2:0e:6f:8a:61:f4:ab:56:01:bf:34:b9:eb:d1:56:
3a:90:c8:e8:78:4a:8d:54:04:3a:25:da:b3:b9:ed:a7:f7:ca:
75:b9:ec:20:49:78:c2:72:dc:a5:27:55:14:d5:3e:07:d3:0f:
95:f6:43:78:a9:6e:5e:f0:78:17:ca:3f:4e:0d:f8:51:04:8f:
8e:c5:98:9d:b8:18:f5:22:52:c5:9f:55:3c:aa:82:c1:d7:53:
f1:4e:f4:32:57:79:49:36:a1:e4:ab:90:db:49:9e:d8:0c:4f:
87:cf:50:82:87:e8:00:af:f9:f9:c4:e7:49:c5:bd:42:8e:2c:
e8:a5:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:56:39 2026 by rpki-client