
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
File: U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft (raw, json)
Hash identifier: dCNGevNYEh3QrEql1ZOVhSoPJ0P3Uf+J137+DXPxcKo=
Subject key identifier: 90:A2:82:63:1D:32:76:57:37:5D:C4:E1:56:09:8C:6D:3D:90:05:13
Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
Certificate issuer: /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
Manifest number: 01DD
Signing time: Wed 29 Jul 2026 04:48:12 +0000
Manifest this update: Wed 29 Jul 2026 04:48:12 +0000
Manifest next update: Wed 05 Aug 2026 04:48:12 +0000
Files and hashes: 1: U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl (hash: PGM4NDwyNIZz53g4EuSzVsU2qLJXoJnVYpJM9DmNMrY=)
2: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (hash: w99PgfgQdaKiDqqq1ZXJsjJYVLkyPFxl1fD6GlPrkc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Validity
Not Before: Jul 29 04:48:12 2026 GMT
Not After : Aug 5 04:48:12 2026 GMT
Subject: CN=6a69860c-0f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:97:5b:0a:61:3f:3f:93:99:81:1a:d6:d7:
ad:37:7e:0b:19:08:97:fd:17:4b:13:7d:6b:cb:c7:
cb:d9:57:c1:34:47:4a:e4:7a:73:f9:db:f5:16:bf:
52:c3:6f:7d:7a:9c:30:a4:af:0b:0f:69:d1:43:e3:
e1:cd:87:80:86:17:c9:97:9f:2c:65:04:96:24:e0:
82:7c:00:90:52:0d:51:d2:77:33:43:56:31:d2:2b:
4e:4b:da:e7:bc:8c:fc:9c:58:be:ea:d7:47:05:75:
55:c3:d4:55:6b:79:0c:38:9e:5d:98:28:34:8c:46:
5d:65:7a:bb:af:06:3c:52:df:6c:7c:a2:53:84:d0:
b5:f6:e6:42:2c:40:4e:66:65:82:34:20:ff:e8:ac:
40:fc:d7:25:77:b1:9f:f7:f3:cf:b5:e6:4a:6e:5d:
77:ad:e9:b6:3e:5c:ac:f4:30:c1:96:3f:56:68:c5:
87:5e:4a:a1:8b:34:eb:63:1e:e4:fb:24:66:3f:92:
06:05:c1:2e:64:4b:cb:c6:9e:d0:8f:02:05:dc:b6:
4e:b4:a8:70:1d:80:73:eb:24:f5:bb:34:85:39:f8:
b2:d8:12:0e:fd:3e:7e:86:c8:29:0c:3a:7f:5c:26:
39:10:d7:28:11:79:51:7c:46:db:98:8e:0a:9c:91:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:82:63:1D:32:76:57:37:5D:C4:E1:56:09:8C:6D:3D:90:05:13
X509v3 Authority Key Identifier:
keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6b:5b:fd:68:05:d9:33:3c:fb:87:bd:8f:fa:09:58:04:14:
35:a9:a6:93:35:87:52:e9:76:34:2f:5a:30:fd:dd:da:e3:4e:
b2:ea:1a:e0:f6:04:b0:45:dc:a4:d0:63:92:16:71:dc:a0:67:
c3:d0:9f:56:38:cf:25:ea:4b:72:94:78:ac:9c:92:62:28:98:
a6:3a:78:4c:3c:1f:b6:75:22:40:19:2a:f9:f9:0d:84:69:33:
40:aa:79:ae:78:6e:50:d1:3f:18:d5:15:96:af:a7:6c:f0:04:
d9:a8:69:1c:67:94:4a:83:ee:1b:ef:bc:64:db:46:f0:c4:79:
35:92:14:7a:c8:b3:5b:79:fe:ef:8e:0c:f8:fa:c7:fe:d1:db:
b4:f4:a8:8f:24:6b:37:dd:da:eb:84:82:eb:de:60:66:7c:9d:
14:f6:c3:dd:f7:21:c4:94:ba:49:3a:0f:d0:cd:25:38:f1:af:
14:42:20:bc:e4:22:06:65:ac:b5:85:9b:39:70:1b:30:a4:5c:
58:9c:dc:3c:03:e4:2c:33:79:74:a9:40:0a:bd:33:de:35:3b:
dc:3a:c7:3c:42:ca:b5:b0:9e:45:06:36:7a:4e:ef:59:b4:2e:
92:c5:fb:48:29:ab:4a:d5:44:73:81:b8:4b:7f:92:ce:34:f4:
2c:8f:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:42 2026 by rpki-client