
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File: U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier: nHIaAGDPlZtpst0WZLcDCAMtju/SuoTqmdo2SORkHaM=
Subject key identifier: B7:5D:75:6D:75:6E:3A:0F:CD:55:38:CA:41:0E:FD:5D:26:BB:AC:5E
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number: 01C6
Signing time: Fri 17 Apr 2026 03:33:57 +0000
Manifest this update: Fri 17 Apr 2026 03:33:57 +0000
Manifest next update: Fri 24 Apr 2026 03:33:57 +0000
Files and hashes: 1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: +iplfyfvRuH0Wri6/Q++XwEIuWmNSZb5Uy65HI0LkyU=)
2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Validity
Not Before: Apr 17 03:33:57 2026 GMT
Not After : Apr 24 03:33:57 2026 GMT
Subject: CN=69e1aa25-5748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:ab:ee:31:68:f1:ae:3b:23:e1:e0:4b:f7:
92:7d:9c:7a:21:d9:85:e6:50:ab:08:bd:81:ef:e8:
f1:02:d2:43:57:64:9c:3c:6d:32:d1:9e:a8:86:41:
c7:33:a0:4d:29:34:db:c0:c8:73:51:b9:ca:a4:07:
83:cf:9a:8d:f1:1b:41:e5:fb:2d:90:3d:79:e5:41:
3b:49:47:c5:41:b1:ef:88:38:47:b1:cb:34:f2:72:
6a:9b:f6:57:9c:7a:c3:0b:85:d2:11:15:17:0f:e6:
4c:88:06:7c:39:64:85:d1:f0:87:37:6d:d9:11:97:
18:5c:b4:71:f7:22:45:fa:ba:5b:7f:2e:0c:e1:44:
92:fe:c3:73:3d:8f:20:0d:4d:24:e0:77:24:cd:b2:
fe:07:89:ef:e8:d8:f7:28:9d:b9:6c:e2:9b:30:2b:
8f:ac:e7:f2:d2:e3:d5:7b:25:82:9b:84:39:10:2c:
03:51:39:e8:36:d7:bb:b3:b8:95:47:0e:82:04:44:
b2:a5:c3:32:29:58:d7:14:6c:63:b1:67:b8:fe:e8:
f7:ee:36:fb:54:c1:66:6c:61:b5:12:e4:a7:f3:e1:
52:ff:c8:63:75:0a:da:e7:d1:c8:64:b2:c9:35:8b:
fe:46:c0:4e:94:0a:52:f9:16:f9:45:c6:dc:42:99:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:75:6D:75:6E:3A:0F:CD:55:38:CA:41:0E:FD:5D:26:BB:AC:5E
X509v3 Authority Key Identifier:
keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:e9:0b:05:07:0d:f4:91:c3:11:b9:56:1f:5a:2e:7c:ba:dc:
96:19:b7:61:f3:ef:02:41:be:87:9d:7b:f0:20:71:12:00:56:
12:d9:52:a9:df:a7:3f:11:f1:a0:4c:76:f6:4c:07:49:07:62:
48:6d:7c:74:62:ad:b8:4d:1d:8d:b1:7c:7b:2a:93:49:b7:d8:
de:95:fa:70:3c:89:7c:a4:aa:d7:cd:2b:b9:07:28:89:e1:49:
a8:52:65:ba:83:16:52:be:63:2b:f7:41:a9:1a:a8:5e:3d:79:
17:39:fc:80:d1:58:47:d1:79:1e:ab:35:7c:29:73:bf:12:3c:
b0:f9:70:02:6a:16:ab:0e:68:cf:93:34:36:10:18:86:02:37:
26:7c:34:81:08:52:b5:d1:0d:6d:bb:c7:da:47:37:22:7b:00:
02:a0:26:ba:44:9a:46:3f:b1:14:ea:d1:5e:4f:3a:12:d2:33:
80:33:ae:c2:6e:51:15:5d:da:57:18:11:d2:a0:df:09:97:b3:
c9:0b:e7:f2:5d:97:85:1b:b1:27:0b:c5:81:1f:93:da:e2:95:
41:ba:fe:98:90:10:e2:ee:af:34:89:1f:6c:48:da:55:cb:95:
e6:62:c3:99:cb:2f:85:1a:ed:a3:ff:d0:78:f3:06:40:4a:74:
c6:a5:99:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:58 2026 by rpki-client