
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json)
Hash identifier: ff9q8Zz5PscrAefVhUweR6TEcG78gLHJPSsN8GTy2+Q=
Subject key identifier: 5F:08:B6:10:A6:32:2D:34:80:9E:94:1C:88:BA:D4:EF:8E:6E:40:89
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial: 0579
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
Manifest number: 0545
Signing time: Wed 20 May 2026 23:41:35 +0000
Manifest this update: Wed 20 May 2026 23:41:35 +0000
Manifest next update: Wed 27 May 2026 23:41:35 +0000
Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: ufYEuv6gnXoM1wiA/V+BXxK3wzaXr2CQVDu2BmVuKao=)
2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: MEZBYUD5FqO/c2lwUKhY6AyLEguQGUqvgydiauMWIwc=)
3: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: KD8sbQxVGc6+o0NWvmiwxFni81JXRae+CNqEs/9OB/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Validity
Not Before: May 20 23:41:35 2026 GMT
Not After : May 27 23:41:35 2026 GMT
Subject: CN=6a0e46af-2f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:e5:09:fd:67:fa:c2:40:02:3c:57:77:c5:
24:a2:55:c3:c5:52:7a:21:a6:26:32:ab:1f:b0:16:
10:6f:33:a2:d8:b2:18:42:5c:f2:22:6e:40:67:58:
6f:1b:b8:21:23:45:83:a7:1d:c4:12:a8:45:29:1e:
0a:2e:ee:60:ad:46:54:e9:aa:7d:3f:05:bb:f8:57:
8b:a7:47:95:50:9b:64:d5:73:38:95:ec:1d:03:fe:
a1:2e:3f:7e:6d:f0:83:96:9b:73:a6:ff:76:86:9b:
02:7d:56:d5:22:9f:a1:52:30:47:12:96:5b:01:60:
c4:16:c9:96:6f:35:1a:c2:8b:28:4f:d8:67:2a:c1:
10:f1:3d:04:98:f8:9a:92:a2:d7:18:94:ac:9a:62:
0f:c0:8b:3d:77:7c:36:b8:10:d9:d7:a2:8e:56:05:
85:8b:83:9a:e5:50:fd:0d:08:c5:02:ca:9b:73:97:
4b:bc:73:5e:32:81:eb:2f:60:3b:2e:bb:20:24:69:
33:0d:01:f8:bd:a1:28:fa:2d:00:9d:73:e4:7d:41:
79:ae:0f:39:a9:30:3e:74:57:bb:f9:ff:dd:4b:c8:
e2:e5:ac:c3:07:da:5d:40:7a:8d:91:da:e8:23:65:
1d:05:2f:b2:7e:71:03:86:77:ad:8f:ca:06:10:d1:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:08:B6:10:A6:32:2D:34:80:9E:94:1C:88:BA:D4:EF:8E:6E:40:89
X509v3 Authority Key Identifier:
keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bb:7d:8e:da:66:5f:c5:3d:82:fe:8e:bc:ee:f2:ea:3a:c6:
dc:65:b4:61:e8:13:74:3d:31:b4:49:3e:88:e0:1a:47:3e:9d:
be:38:64:22:e8:f5:7a:29:f5:3e:bc:6b:47:c5:a3:95:fb:3e:
74:16:5a:92:94:7a:db:43:fa:04:f4:2d:25:1a:e0:a4:9b:4a:
ac:90:1c:c1:98:14:a6:ba:d8:dd:3c:f7:d0:6f:ef:2a:2a:6f:
51:e7:ac:d6:d2:6d:bd:db:f5:9c:b1:a6:2e:b3:b5:db:7d:04:
f5:3a:98:2a:e9:05:07:35:4d:d3:38:49:67:3f:5a:6f:a3:e4:
78:c2:70:cf:c5:82:4c:eb:5a:2e:b0:ea:9c:cb:27:ba:04:0b:
a6:be:40:d3:26:ec:98:6e:4a:af:60:a2:79:55:dc:bd:7b:12:
e5:99:3d:e8:bd:16:47:c4:45:7b:ae:6b:c7:8c:ed:09:4b:c9:
93:ef:a0:11:55:18:bb:dc:1e:21:c4:a9:88:9c:1e:88:b3:a0:
65:f7:7e:6b:7d:1a:e3:82:4b:47:14:24:65:d3:34:39:a9:4b:
b8:ce:05:de:00:34:96:39:6f:fe:a4:e9:93:71:f5:51:85:09:
d9:e2:a5:3b:9f:67:f7:33:25:e5:5b:ee:64:5c:fe:66:69:b9:
1c:52:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:44 2026 by rpki-client