
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier: hx5X9kvveeQx1vyi5XQJ9l8FSBNUBrlj7qE9OzdBZyw=
Subject key identifier: 46:5B:CA:48:20:3B:33:DE:84:FC:47:08:0E:D2:FC:A6:B7:D0:CC:FC
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial: 087B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number: 086A
Signing time: Sat 04 Apr 2026 20:32:11 +0000
Manifest this update: Sat 04 Apr 2026 20:32:10 +0000
Manifest next update: Sat 11 Apr 2026 20:32:10 +0000
Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: 6KDHhKiZZ3z2T+/r+M8QmIbAP8dujmEy3b553fWM/uQ=)
2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 99jEiPZckviVtuXJZrsVhVTNS0+5/ramRtJfm1GkHO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Validity
Not Before: Apr 4 20:32:10 2026 GMT
Not After : Apr 11 20:32:10 2026 GMT
Subject: CN=69d1754b-9c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:f1:77:8d:c2:f3:1b:73:95:37:fc:21:ca:
2c:7f:b2:28:3d:7e:4a:bf:c3:98:cb:b7:f9:84:e7:
06:fb:85:61:2a:82:8a:21:d4:17:fb:fd:69:8d:6c:
7f:1b:7d:2f:ac:60:ea:a3:e9:62:56:79:5c:db:05:
db:8b:92:91:0f:ee:9a:28:f2:fc:6d:7c:f1:ee:2c:
cd:80:c3:68:d8:fc:d0:18:55:23:bf:3e:e7:1c:53:
8b:d0:e5:14:9c:87:6b:5d:05:08:ae:a0:e3:6c:83:
bf:85:bc:d5:04:e9:58:91:da:e0:d9:70:1b:c0:c1:
97:d8:47:77:d2:fd:84:72:8e:c3:0c:31:3b:9f:d5:
f9:40:fc:79:ec:65:ea:1c:48:91:a4:7c:ad:2a:ad:
7d:78:f8:f7:54:ae:56:58:84:aa:2e:36:d7:43:ad:
32:09:bd:ac:c8:53:b2:d0:05:4a:85:89:38:c2:fc:
ef:27:f3:c4:b7:84:5b:3c:48:e1:b7:47:e3:f0:02:
a5:fc:1a:27:68:ba:f3:80:39:45:eb:2b:e6:39:a6:
15:50:93:6b:74:2c:0d:be:da:84:6d:10:90:53:e9:
93:b6:b0:13:78:a8:f7:51:55:53:46:02:8e:2d:b7:
1d:98:6f:7a:3c:0b:e9:af:9c:ce:a1:55:c9:31:54:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:CA:48:20:3B:33:DE:84:FC:47:08:0E:D2:FC:A6:B7:D0:CC:FC
X509v3 Authority Key Identifier:
keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:81:15:c0:4c:2a:97:9f:f4:e2:12:3d:00:d3:82:d6:d7:80:
73:40:10:db:65:a1:58:18:6e:86:c0:6b:f5:9a:74:5d:73:88:
7b:70:2c:61:07:0d:9e:fc:61:36:a9:7f:b1:fa:55:91:3a:a7:
e6:f6:e9:6f:a0:30:8d:58:f8:bf:02:de:32:eb:6a:75:9d:75:
fb:9a:eb:84:12:cc:6e:af:4d:f1:1e:59:11:36:fa:2c:da:da:
c2:c9:79:b6:75:86:aa:c8:e2:18:fe:42:bb:b4:ab:3c:e6:e0:
ba:04:23:ab:72:53:b7:34:6a:79:ed:72:86:17:dd:55:33:8a:
d7:49:86:cd:9c:b6:bb:fa:0c:f8:76:77:2c:08:cd:65:0b:ff:
ba:fa:23:30:f4:5c:d3:d0:6c:d4:e0:7f:e4:b3:34:a3:ce:80:
cd:88:ed:0d:4a:d8:49:47:d7:a8:b3:de:cb:ed:9a:b0:17:f1:
be:04:43:69:50:d8:db:f5:a7:b8:3c:d1:b5:ca:e1:9e:00:70:
52:c8:bf:fa:34:e8:e9:9a:2c:be:5e:06:44:53:a9:7a:cf:8b:
6d:da:5c:37:fc:6d:e9:7e:da:d2:7f:9b:f6:ac:55:a6:e2:20:
df:0a:f8:ce:8b:8d:de:5c:44:46:c0:b9:39:4a:42:df:05:6b:
af:9c:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:06 2026 by rpki-client