
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File: U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier: nN5BL7/B6KiUIpEQbP21GWfBP+5x7mPPnc1NOBYmILQ=
Subject key identifier: 58:E6:7A:D2:17:5A:72:09:BD:E8:35:62:7B:12:75:BD:A7:2A:75:FA
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number: 01F8
Signing time: Mon 27 Jul 2026 04:54:16 +0000
Manifest this update: Mon 27 Jul 2026 04:54:15 +0000
Manifest next update: Mon 03 Aug 2026 04:54:15 +0000
Files and hashes: 1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: IU08ikB19i56YkjUH6CPGFLYgch4331gGmobQnsrt9s=)
2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Validity
Not Before: Jul 27 04:54:15 2026 GMT
Not After : Aug 3 04:54:15 2026 GMT
Subject: CN=6a66e478-02cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:79:95:ae:b1:c6:70:c2:d1:7d:d0:4a:39:
67:b3:a0:cd:ee:7a:83:15:80:6e:8c:ff:e3:a1:a8:
1e:54:46:a9:35:9b:f8:a0:28:9b:66:87:22:7a:7f:
03:48:ab:9c:04:25:42:e7:24:b4:50:ca:d1:48:e7:
18:bf:5f:4c:33:71:44:c5:99:0e:87:1e:7a:e7:94:
1a:ee:b4:2c:00:d5:ae:a8:6a:6f:3a:85:06:39:7d:
fb:44:62:89:c7:e6:90:fa:91:9e:62:67:04:17:41:
f8:e5:64:8f:f8:f4:9a:5b:ef:a7:3a:da:09:0d:af:
a6:82:f9:a5:e4:2c:03:77:2b:f9:50:e2:32:4a:ac:
63:32:12:76:e0:8f:7b:85:f6:4a:ef:2a:95:5b:d5:
cf:f4:ae:1e:d7:d9:4d:78:f5:e7:47:b4:29:fd:89:
2a:90:17:3d:a5:22:b8:c1:cd:91:21:8f:e7:18:6d:
71:cc:1e:1c:24:07:aa:80:a4:71:d1:00:56:f9:d5:
fc:5c:0b:33:7f:af:d9:f6:af:04:07:fb:dc:26:81:
37:16:ae:b8:9a:4b:f1:53:e9:90:79:c1:ce:2a:72:
be:7b:0c:4d:28:d5:4b:e8:0d:d0:d4:7d:8b:5b:a9:
f4:c3:15:7a:26:c5:43:b1:f8:d2:0a:6d:5d:01:5a:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E6:7A:D2:17:5A:72:09:BD:E8:35:62:7B:12:75:BD:A7:2A:75:FA
X509v3 Authority Key Identifier:
keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:32:68:8b:e6:e4:12:06:86:cd:17:93:fa:7e:2f:ab:1d:e6:
8d:21:2e:fe:f3:f0:77:5e:a2:2d:70:ef:b6:81:4f:74:3d:3d:
37:aa:35:ff:68:55:1f:d8:c4:4d:35:4a:82:2a:94:fc:7f:c9:
cd:5a:0e:da:0f:c1:5e:71:fd:17:01:15:6a:d0:82:bb:d9:e5:
44:00:48:1a:43:3e:f4:dc:93:14:d1:10:6d:7a:ba:8d:a3:bc:
5f:d4:68:1d:67:c5:31:d0:07:78:8e:a5:95:42:99:ca:ee:d8:
18:c7:9c:13:c3:61:4f:7e:c0:15:b9:3c:87:f4:24:24:f2:8c:
b5:25:07:3a:56:d5:28:c9:53:ca:77:1e:7c:16:d2:6c:aa:6b:
46:87:af:31:0c:1c:94:45:e6:6b:77:3f:73:a7:28:9f:0c:b2:
63:f6:bb:83:c4:4a:8a:4c:42:25:42:39:93:78:8d:4a:54:73:
34:26:be:1b:05:a9:43:48:cc:26:2c:9c:00:46:77:d8:35:85:
cf:d1:3b:0a:ad:8b:06:fb:55:c0:98:ec:3e:98:3e:2f:84:18:
53:f5:2e:35:9e:5b:5d:1e:6f:e8:95:fb:0f:12:01:b1:a8:b3:
07:4e:cc:43:bd:ed:46:93:74:30:ff:fa:bd:20:bd:37:8a:b2:
c9:2d:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:09 2026 by rpki-client