
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json)
Hash identifier: MJgSukr1T7/VzAi1lyL8tBRTKZK9is1VGo2ajYZ4Zh0=
Subject key identifier: 7D:D5:5B:FD:41:40:6F:67:95:1B:D0:AF:E0:84:B4:41:F5:CB:07:E0
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 18A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
Manifest number: 1893
Signing time: Mon 22 Jun 2026 16:27:53 +0000
Manifest this update: Mon 22 Jun 2026 16:27:53 +0000
Manifest next update: Mon 29 Jun 2026 16:27:53 +0000
Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: Fsqac+yi7sf2EE9V2xWeHiHKipUb4hVOz7BngDGyauo=)
2: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zSG0LGFJE7WuZbbBJfnMq6hMoXOF+N0WFOj4d7BqNDI=)
3: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: Ab1is/evOLhc3g4DpSbGl1Q9LWF8CNxrAAAtmCT5wDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6309 (0x18a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Jun 22 16:27:53 2026 GMT
Not After : Jun 29 16:27:53 2026 GMT
Subject: CN=6a396289-d8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:6f:16:55:d1:35:fc:af:5e:c7:bd:9b:bb:
fd:0f:6c:09:ea:18:7d:bc:a7:4c:32:9f:a0:d7:39:
13:da:d6:6f:91:45:67:81:b8:0f:91:a7:39:06:34:
be:92:c3:72:c9:e3:78:7b:d7:5d:03:7e:ea:1e:48:
9f:32:f9:38:fe:8d:d3:43:c1:1a:b9:b9:85:85:13:
ac:c5:51:0f:d6:c7:c1:4c:13:5a:69:1d:7b:0c:59:
74:ec:b2:24:ca:6b:41:2d:ad:f8:dd:e6:df:54:1f:
38:a2:b8:62:41:56:46:7f:35:46:40:41:47:8f:4f:
48:51:34:53:38:2b:bf:76:1c:9f:ae:28:f9:6c:ff:
ee:1a:c6:27:7b:1b:02:1b:7e:90:04:1d:84:de:3c:
34:f7:c4:80:12:d5:36:1b:29:97:ff:73:b2:54:f5:
1e:8c:f5:24:52:7a:d2:85:d2:87:0c:48:c9:2f:60:
a6:64:74:06:2b:e5:a7:f8:ff:9f:11:d8:77:ad:3a:
5b:50:90:b0:28:19:26:2d:33:d9:b7:fb:04:d9:cd:
87:8e:4c:fe:24:73:3a:61:91:9d:75:9e:b4:fd:09:
18:4b:a2:e9:86:64:d1:04:6c:04:41:0e:92:00:bd:
f6:f3:1b:b4:66:7f:45:0a:fc:af:27:70:35:b6:d9:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D5:5B:FD:41:40:6F:67:95:1B:D0:AF:E0:84:B4:41:F5:CB:07:E0
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:b6:73:84:46:ac:bb:2e:be:b7:cb:48:1a:db:b0:25:e9:
ab:cb:24:29:bd:21:1d:a5:99:f8:e6:91:17:e7:19:2d:45:8e:
cf:bc:b5:5a:fd:1e:97:ff:26:b5:87:b1:fa:3d:34:ce:89:ee:
0e:02:90:f6:5b:b3:99:11:84:f4:13:ab:0e:ab:45:88:18:0b:
fb:e5:d6:28:e3:df:53:73:01:f8:b1:bc:8a:06:1e:42:fe:09:
cf:dc:54:5b:35:05:5f:ff:a6:38:4c:34:5f:cf:ad:5d:aa:3a:
a6:b0:11:1a:25:7f:c5:f6:ee:5f:b9:8d:d3:dd:a6:5f:3f:38:
b9:75:31:7a:19:ac:cc:b3:0a:40:ea:65:df:88:82:8b:db:74:
49:c7:a4:ec:ce:2b:ff:56:66:73:07:0c:dd:95:b0:17:cb:07:
6f:65:61:d6:a0:e8:b3:33:61:76:f1:23:33:73:eb:78:c8:c1:
75:f2:0c:6e:60:2f:ef:cd:0f:5a:e5:31:4c:d3:7b:b7:b0:42:
94:85:2c:35:3d:b0:93:74:0b:6a:24:06:5c:d7:d3:4d:bd:8a:
67:40:af:a1:19:a3:8c:eb:a9:dc:87:2f:1b:00:37:47:56:fd:
77:f7:56:a2:ab:95:2d:75:c9:fb:8e:f4:41:43:13:a6:7a:ea:
5f:db:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:23 2026 by rpki-client