
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json)
Hash identifier: ZTrI9p28IBjEa0uBIylugf6QwgKirqN/s3LEg4RAqZw=
Subject key identifier: C4:1A:2D:36:B0:F8:16:20:8B:98:D9:C5:7A:93:D2:BC:69:44:50:C0
Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Certificate serial: 0563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
Manifest number: 055A
Signing time: Thu 22 Oct 2026 23:30:06 +0000
Manifest this update: Thu 22 Oct 2026 23:30:05 +0000
Manifest next update: Thu 29 Oct 2026 23:30:05 +0000
Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: xMJYKq4Hl/fkWIsq0XKLRQwkuO++IckhOr2aRNSclJs=)
2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: eFNp4aobXGIYGnDarPOL+A4RcUOAoScq1t8b/UbPq6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl
rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 23:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Validity
Not Before: Oct 22 23:30:05 2026 GMT
Not After : Oct 29 23:30:05 2026 GMT
Subject: CN=6ada9c7e-8ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:10:84:d5:f8:5f:66:8b:4f:2c:9a:03:25:
be:7f:41:d4:f3:17:74:22:f4:33:19:6e:6d:86:5a:
61:e3:2e:87:20:e7:d1:d8:99:c0:bc:23:72:23:6e:
d2:60:df:ca:1b:58:28:ae:81:bc:17:5b:7b:39:0f:
20:55:db:c5:1d:13:f2:16:eb:52:90:45:8c:e9:0b:
fe:57:6d:5d:93:8a:3d:ec:d7:6f:76:2b:04:08:63:
6b:6c:69:ca:b1:51:7a:26:5b:f6:32:53:73:b7:57:
f4:81:1c:92:1a:9d:d8:52:cc:04:5d:c8:7b:8a:cf:
40:66:3f:f0:9d:a7:08:86:41:9a:87:26:e8:30:27:
f6:87:b2:4c:e2:de:13:f0:12:60:95:2a:5a:c9:6b:
a1:4c:08:fc:87:2a:1e:89:e3:9d:0f:a8:97:25:d7:
9a:93:e7:3f:65:1c:c6:af:55:09:03:02:d4:17:c6:
c4:87:34:0b:7d:b3:b2:54:16:2e:96:1f:29:bd:8c:
0b:1e:2b:eb:c8:24:5d:83:f6:1d:d5:fc:8a:13:60:
9e:ff:ed:ac:69:9a:17:09:e3:0e:e3:15:c7:a5:a4:
2f:82:5f:ce:9b:19:52:3d:46:97:c0:dd:12:8c:d6:
37:d9:97:0d:2f:90:58:18:6c:79:fa:c4:f5:6b:86:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1A:2D:36:B0:F8:16:20:8B:98:D9:C5:7A:93:D2:BC:69:44:50:C0
X509v3 Authority Key Identifier:
keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8d:95:f7:ec:aa:96:db:12:43:bd:01:3b:fc:e3:d9:b7:54:
ad:f8:ff:f6:f9:a3:b6:00:1d:aa:c4:1d:c2:ea:04:d2:c9:cf:
00:e1:51:1e:c3:60:df:c9:d2:a0:2f:e4:da:f3:72:47:fb:a8:
6a:26:c7:4c:cd:83:80:d2:99:37:b9:d1:65:f6:d4:8e:96:c9:
04:d9:26:b8:88:4d:1e:9a:42:d0:a7:71:ff:ec:9e:32:a1:9c:
00:91:7e:63:2f:24:29:3a:11:53:e6:39:64:42:10:75:29:1e:
6e:03:d3:7f:c7:75:f2:4b:0c:52:bb:79:ba:93:31:2e:99:1d:
e4:39:7d:e5:6e:c1:24:53:0e:04:cc:d1:b1:4e:d8:fa:b7:aa:
51:04:a5:1c:9c:bf:d3:57:24:4d:74:56:0c:ab:b5:34:92:6f:
5a:46:98:f5:f1:25:5c:30:d5:0a:b5:76:d2:18:f4:c6:43:ca:
3a:3e:fd:f3:95:70:83:dd:9f:11:17:a9:be:39:42:c5:45:d8:
6f:44:5e:2d:56:da:9e:60:cc:bf:dd:a7:14:d1:9c:dc:99:ca:
56:99:aa:81:20:ee:82:7a:d1:07:db:12:d0:e4:57:f8:d5:af:
f2:a4:aa:81:17:87:ea:7d:31:e7:20:03:b3:5e:ec:b6:17:37:
59:06:eb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:12:22 2026 by rpki-client