
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File: U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier: M71C1fUCyP3zVqaxLtxStZ8RF/WANbJH1gyezORgpLk=
Subject key identifier: E6:D6:FC:A8:A2:DB:8B:0A:BA:3A:3B:F8:7D:70:92:AF:9D:A1:BA:2F
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number: 01E2
Signing time: Sat 13 Jun 2026 03:32:22 +0000
Manifest this update: Sat 13 Jun 2026 03:32:22 +0000
Manifest next update: Sat 20 Jun 2026 03:32:22 +0000
Files and hashes: 1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: /abdCeKRBHxCPzHpikLpJJyrYN5/7Khfse4d6f7H1TU=)
2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Validity
Not Before: Jun 13 03:32:22 2026 GMT
Not After : Jun 20 03:32:22 2026 GMT
Subject: CN=6a2ccf46-6010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:a3:b8:63:6f:ac:78:f0:d1:e4:47:54:dd:
7d:71:94:a9:dc:f9:66:00:a3:1c:e7:de:97:49:db:
e3:ef:3f:29:e1:be:16:af:b0:b3:e1:2a:11:76:12:
c2:6c:a5:af:a7:7d:60:6f:8d:50:e1:c5:55:1b:bb:
34:cd:84:49:1d:2b:ed:02:cc:aa:89:b8:0e:3f:8d:
96:c0:a1:9c:08:91:34:44:fe:59:1f:8e:34:8c:e8:
57:34:e8:e1:ad:37:d3:d8:49:f6:e0:41:db:a5:a4:
ed:4e:98:76:5c:38:f2:10:66:85:59:e4:59:9f:85:
ac:df:c6:8f:51:ad:1e:e8:1c:56:3f:77:3f:1e:59:
3e:84:fb:46:5d:8a:0d:a6:92:d5:11:aa:ee:8f:5f:
11:12:98:43:cc:1d:13:25:8e:6d:91:11:70:d3:5b:
60:9b:96:c4:74:3c:27:1a:4c:48:fc:47:d2:62:76:
3d:cd:89:8c:f3:97:73:3e:b9:1e:83:1b:22:c1:9c:
4c:8a:45:ca:f9:73:7d:70:48:b4:ef:4f:51:c9:fe:
20:72:02:6c:15:ef:d9:86:ca:54:84:d5:cf:2d:f6:
06:b7:7b:b4:0b:cd:64:50:22:27:5c:40:e0:7f:57:
10:9c:cb:87:d6:86:64:8f:ab:71:ad:5e:22:f7:1a:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D6:FC:A8:A2:DB:8B:0A:BA:3A:3B:F8:7D:70:92:AF:9D:A1:BA:2F
X509v3 Authority Key Identifier:
keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:59:a4:d3:2b:a3:3a:d7:37:05:26:fe:34:10:7f:90:f8:de:
0a:15:78:60:aa:49:e9:a1:d9:b3:d7:ec:f0:06:84:d4:03:bf:
5e:45:3a:c4:80:ed:0e:0d:81:fd:8f:30:17:ae:8e:f2:7a:3b:
52:c1:5c:2b:c3:f7:00:6f:db:23:19:81:5f:75:88:5e:2f:5f:
3f:a8:46:63:49:e1:6e:39:5b:a9:f8:66:09:84:28:f9:ad:61:
ca:60:55:f0:90:37:6c:ed:c1:00:5d:9a:cd:4e:2b:6f:40:96:
26:29:b2:a1:d6:55:1d:c9:e3:e2:3e:cb:87:88:64:2f:c7:b8:
54:9c:c8:b3:20:05:48:fe:75:d8:50:59:67:0c:50:2b:38:b5:
76:19:71:9e:7e:5c:4a:aa:ca:36:e6:73:b3:10:65:25:e0:c6:
ef:16:ed:8c:f4:f9:d4:82:b9:ea:fa:20:9c:0e:07:1c:7d:33:
f3:91:4c:d8:7a:ef:19:96:8d:1f:9b:75:4c:fb:32:d1:21:e9:
64:d7:c6:28:aa:94:89:95:a7:56:71:ba:5a:d3:84:ff:fd:70:
e2:46:00:8c:1e:21:35:38:1a:63:f6:90:89:61:10:f1:6d:34:
cb:33:d4:50:3b:01:83:74:36:1f:26:ce:41:fa:03:3f:7d:12:
84:5f:e7:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA5QTMxMTAvBgNVBAUTKDUzQzBFN0YwNjhBQTFFRjAwM0EwQkVFMkE1RDUyREJD
ODlEQ0RGQjgwHhcNMjYwNjEzMDMzMjIyWhcNMjYwNjIwMDMzMjIyWjAYMRYwFAYD
VQQDEw02YTJjY2Y0Ni02MDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQCjuGNvrHjw0eRHVN19cZSp3PlmAKMc596XSdvj7z8p4b4Wr7Cz4SoRdhLC
bKWvp31gb41Q4cVVG7s0zYRJHSvtAsyqibgOP42WwKGcCJE0RP5ZH440jOhXNOjh
rTfT2En24EHbpaTtTph2XDjyEGaFWeRZn4Ws38aPUa0e6BxWP3c/Hlk+hPtGXYoN
ppLVEaruj18REphDzB0TJY5tkRFw01tgm5bEdDwnGkxI/EfSYnY9zYmM85dzPrke
gxsiwZxMikXK+XN9cEi0709Ryf4gcgJsFe/ZhspUhNXPLfYGt3u0C81kUCInXEDg
f1cQnMuH1oZkj6txrV4i9xpiTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFObW/Kii
24sKujo7+H1wkq+dobovMB8GA1UdIwQYMBaAFFPA5/Boqh7wA6C+4qXVLbyJ3N+4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDlBMy80M0ZCNjJGQThG
RTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9VOERuOEdpcUh2QURvTDdpcGRVdHZJbmMz
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U4RG44R2lxSHZBRG9MN2lwZFV0dkluYzM3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDlBMy80M0ZCNjJGQThGRTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9VOERuOEdpcUh2
QURvTDdpcGRVdHZJbmMzN2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiFmk0yujOtc3BSb+NBB/kPjeChV4YKpJ6aHZs9fs8AaE1AO/XkU6xIDtDg2B
/Y8wF66O8no7UsFcK8P3AG/bIxmBX3WIXi9fP6hGY0nhbjlbqfhmCYQo+a1hymBV
8JA3bO3BAF2azU4rb0CWJimyodZVHcnj4j7Lh4hkL8e4VJzIsyAFSP512FBZZwxQ
Kzi1dhlxnn5cSqrKNuZzsxBlJeDG7xbtjPT51IK56vognA4HHH0z85FM2HrvGZaN
H5t1TPsy0SHpZNfGKKqUiZWnVnG6WtOE//1w4kYAjB4hNTgaY/aQiWEQ8W00yzPU
UDsBg3Q2HybOQfoDP30ShF/nWw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:48 2026 by rpki-client