
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json)
Hash identifier: 0Akdo8ZbJH5AYsx6SHMH8E1cv9fSPA1wMTvk1mazZsU=
Subject key identifier: 43:B0:12:C2:DD:42:18:DC:E2:44:AF:A5:64:0B:EA:12:85:63:99:08
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 187D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
Manifest number: 186B
Signing time: Sat 04 Apr 2026 16:24:40 +0000
Manifest this update: Sat 04 Apr 2026 16:24:40 +0000
Manifest next update: Sat 11 Apr 2026 16:24:40 +0000
Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: PvegasU1FU0NxGFk4GhRuPhtkHLvrTtqGp/2bBggW2s=)
2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: Ab1is/evOLhc3g4DpSbGl1Q9LWF8CNxrAAAtmCT5wDg=)
3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zSG0LGFJE7WuZbbBJfnMq6hMoXOF+N0WFOj4d7BqNDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6269 (0x187d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Apr 4 16:24:40 2026 GMT
Not After : Apr 11 16:24:40 2026 GMT
Subject: CN=69d13b48-e57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:63:82:49:4b:90:42:1f:2a:32:2a:ec:10:
c9:90:d8:3f:9e:58:4e:d5:93:e9:f3:6e:01:ab:15:
ff:68:2d:bb:f4:9b:2e:1d:c6:dd:d2:f4:11:1f:72:
7a:23:b4:4d:73:77:b9:69:d3:0f:34:27:66:76:7b:
64:40:87:c4:b1:45:c1:ce:5c:3a:d6:1b:fe:72:96:
82:25:64:b9:c6:b7:6a:4e:7d:b1:8d:f7:d9:23:8c:
6e:8c:15:4c:65:44:f6:4d:18:d0:05:15:44:63:9e:
75:f9:06:8b:a3:bc:64:2a:ee:3d:dd:47:72:64:a8:
17:c9:12:d8:ae:c0:7b:0f:62:33:f1:6e:4b:1b:c8:
00:7d:86:0e:35:80:08:df:99:70:f6:6f:11:51:75:
32:00:ca:49:e7:31:04:79:f3:8f:48:ec:d6:ea:78:
2f:b9:b8:d2:8d:de:dd:db:b1:1f:84:80:61:6d:b4:
d0:39:46:3f:16:c5:09:f9:3c:72:73:3a:c7:e4:f7:
1a:40:97:70:4a:81:13:27:96:45:5b:dd:5e:21:63:
97:ce:b7:11:ee:0d:52:1f:f0:db:75:08:e2:0f:2b:
d5:d9:3f:90:d2:5c:df:df:74:bf:48:d7:53:f6:15:
5c:5b:bc:e1:6a:59:64:bd:48:75:8b:a1:1b:ab:7c:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:12:C2:DD:42:18:DC:E2:44:AF:A5:64:0B:EA:12:85:63:99:08
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:01:c5:12:11:d6:aa:a3:c2:64:87:2d:11:d7:fb:0e:80:ae:
1f:6a:01:01:20:c8:81:68:d1:86:63:25:d8:83:e2:ef:8f:15:
47:01:10:bd:14:90:20:09:b5:94:95:52:d5:e3:51:7e:70:cc:
d3:1a:54:7a:f9:02:c1:e3:56:16:38:41:4c:b9:c9:04:4e:5c:
8d:21:88:83:d4:2b:67:78:fa:e6:b1:cb:66:42:6a:41:53:ad:
31:26:cc:84:90:6d:20:42:7d:b8:ea:93:ad:6c:f0:02:db:80:
f9:79:54:ee:93:74:12:03:fd:9a:9c:65:86:8f:b0:ac:7b:e6:
04:a1:a9:e0:59:81:ba:d7:25:e1:3b:5a:03:6d:73:32:5d:42:
54:20:1e:14:d9:69:4b:4c:a4:a0:23:f6:ba:6b:14:c8:31:32:
68:17:14:97:ed:7d:39:f8:b6:77:03:56:2b:fe:3a:53:5e:b7:
9f:da:91:c8:8d:d7:3b:04:24:d1:15:23:b5:69:84:f4:5a:ca:
50:62:2e:be:37:61:d0:7e:2d:b3:5d:14:a3:94:0e:ed:d6:71:
21:28:e7:71:82:5e:2c:1e:0d:d4:63:ea:82:69:db:0b:12:64:
2e:db:3b:f8:25:a8:88:66:74:f2:aa:0f:4b:90:a6:2f:c2:a3:
6b:cf:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:01 2026 by rpki-client