
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
File: U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft (raw, json)
Hash identifier: DkaeffkzCgqVX7zNNSLmoElZWNREKXdlMFRLguSInfA=
Subject key identifier: 3F:FF:A5:DE:76:04:83:4E:5F:A3:80:89:CB:A8:35:69:ED:F6:20:5F
Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
Certificate issuer: /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
Manifest number: 01C4
Signing time: Sat 13 Jun 2026 03:52:50 +0000
Manifest this update: Sat 13 Jun 2026 03:52:50 +0000
Manifest next update: Sat 20 Jun 2026 03:52:50 +0000
Files and hashes: 1: U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl (hash: o3J+JmFqM8Bq2UP1WSRqFVs9cXa5Po2bSIwT3r6vqeU=)
2: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (hash: 0+cim1nNJ/HzloRjHXoa1S1TFcu0JHUvJvdwHP5Hs9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Validity
Not Before: Jun 13 03:52:50 2026 GMT
Not After : Jun 20 03:52:50 2026 GMT
Subject: CN=6a2cd412-c43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:2a:ac:2d:90:df:b3:04:f5:c1:5d:6d:4d:
14:54:5e:ef:90:4b:3f:7f:6b:7e:14:f6:a7:90:e0:
5d:3d:5e:3b:a1:60:cf:f7:da:83:28:67:9a:09:b7:
dc:3e:2f:48:cd:f7:3d:f7:c3:c6:b1:16:50:c5:d5:
c7:7c:4a:81:b5:ec:64:60:d9:96:74:6d:d4:81:4d:
c5:ff:e7:37:7f:87:a0:17:5c:8f:f5:43:68:10:19:
c6:b8:0b:a3:b8:2c:41:86:19:d2:9b:17:a3:57:37:
89:4f:c9:30:92:74:18:73:9f:61:d0:8e:99:e8:75:
43:5c:3d:6c:80:44:fe:10:38:eb:02:66:a3:ce:ac:
d6:0e:5f:b4:f1:2a:b0:cf:bf:b0:e3:72:88:08:1d:
77:e7:fc:77:bf:b6:4e:76:5a:68:c4:03:e7:36:aa:
1e:59:37:59:85:81:03:7a:f6:c5:f0:39:c4:64:97:
6d:79:ee:00:4f:32:7b:87:66:b3:a6:94:32:36:8e:
1b:53:f8:39:0b:d8:d1:e2:0d:64:dc:91:a0:00:55:
3d:3a:a2:28:73:b0:8f:7e:91:ab:63:dc:6b:1e:d1:
2e:13:06:b1:44:6c:80:b6:37:f2:19:71:2e:a1:f8:
c9:a7:89:7f:ba:01:24:18:b7:7f:10:8e:06:80:7a:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FF:A5:DE:76:04:83:4E:5F:A3:80:89:CB:A8:35:69:ED:F6:20:5F
X509v3 Authority Key Identifier:
keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:04:ff:93:8d:de:e7:2d:7a:78:b1:7b:7a:41:42:c2:9c:
61:e3:c6:64:a0:1a:dc:9a:a9:23:d8:51:e3:9f:d7:10:f5:17:
82:34:4f:59:d9:ac:27:41:1e:d5:56:28:b7:96:9e:fb:01:fc:
a2:a3:7c:d8:f4:98:a7:3b:cc:40:97:d1:af:77:7d:22:13:44:
fe:9d:a7:1e:dd:22:7a:dd:58:05:a8:46:5e:88:8a:24:bd:84:
aa:ce:e1:ca:a8:f0:8d:84:89:f3:1c:5d:49:c9:e3:72:07:8f:
30:69:c2:ab:7f:a2:c3:83:8b:2f:93:2d:b6:94:2d:b2:5f:49:
9a:4c:52:af:c8:c5:4d:f8:7f:91:80:f8:de:d7:18:0b:f2:e9:
ac:22:20:8f:18:85:da:a9:6a:ec:9c:12:a8:5a:81:36:af:48:
9c:5a:5a:bd:06:7e:98:fc:c6:bc:ff:ad:85:37:fb:a5:63:40:
69:89:cf:4f:b9:f0:27:93:f9:80:aa:00:08:22:af:63:6e:23:
a3:e1:d4:62:38:5c:0e:34:0b:c9:88:e0:46:37:90:9a:d6:3e:
63:d3:7d:c0:60:13:de:7b:a7:8f:38:7c:e8:1d:0d:37:53:84:
d2:36:40:84:84:98:8b:57:8f:7e:d5:1b:3a:ea:0d:d9:13:2d:
12:66:ce:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwNzAxMTAvBgNVBAUTKDUzOUJCNzZDOEE0Mzc5QTRERTM5OUMwNTJEMzhDMUI0
NTNBNjZGMUIwHhcNMjYwNjEzMDM1MjUwWhcNMjYwNjIwMDM1MjUwWjAYMRYwFAYD
VQQDEw02YTJjZDQxMi1jNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaoqrC2Q37ME9cFdbU0UVF7vkEs/f2t+FPankOBdPV47oWDP99qDKGeaCbfc
Pi9Izfc998PGsRZQxdXHfEqBtexkYNmWdG3UgU3F/+c3f4egF1yP9UNoEBnGuAuj
uCxBhhnSmxejVzeJT8kwknQYc59h0I6Z6HVDXD1sgET+EDjrAmajzqzWDl+08Sqw
z7+w43KICB135/x3v7ZOdlpoxAPnNqoeWTdZhYEDevbF8DnEZJdtee4ATzJ7h2az
ppQyNo4bU/g5C9jR4g1k3JGgAFU9OqIoc7CPfpGrY9xrHtEuEwaxRGyAtjfyGXEu
ofjJp4l/ugEkGLd/EI4GgHpCyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD//pd52
BINOX6OAicuoNWnt9iBfMB8GA1UdIwQYMBaAFFObt2yKQ3mk3jmcBS04wbRTpm8b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84OUM1NTk3Q0JD
MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi9VNXUzYklwRGVhVGVPWndGTFRqQnRGT21i
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U1dTNiSXBEZWFUZU9ad0ZMVGpCdEZPbWJ4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTA3MC84OUM1NTk3Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi9VNXUzYklwRGVh
VGVPWndGTFRqQnRGT21ieHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe9oE/5ON3uctenixe3pBQsKcYePGZKAa3JqpI9hR45/XEPUXgjRPWdmsJ0Ee
1VYot5ae+wH8oqN82PSYpzvMQJfRr3d9IhNE/p2nHt0iet1YBahGXoiKJL2Eqs7h
yqjwjYSJ8xxdScnjcgePMGnCq3+iw4OLL5MttpQtsl9JmkxSr8jFTfh/kYD43tcY
C/LprCIgjxiF2qlq7JwSqFqBNq9InFpavQZ+mPzGvP+thTf7pWNAaYnPT7nwJ5P5
gKoACCKvY24jo+HUYjhcDjQLyYjgRjeQmtY+Y9N9wGAT3nunjzh86B0NN1OE0jZA
hISYi1ePftUbOuoN2RMtEmbOzQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:54 2026 by rpki-client