
$ rpki-client -vvf rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
File: U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft (raw, json)
Hash identifier: sxLcdFlwJp9y7k5jiwtb1gUs0YXXV+eIIYt4eXi1WPM=
Subject key identifier: EB:98:61:84:AC:1B:FB:C7:F6:BE:61:B3:4C:50:C1:0A:4D:B5:D8:15
Authority key identifier: 53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2
Certificate issuer: /CN=A91736BD/serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
Manifest number: 0263
Signing time: Sun 01 Mar 2026 02:44:12 +0000
Manifest this update: Sun 01 Mar 2026 02:44:11 +0000
Manifest next update: Sun 08 Mar 2026 02:44:11 +0000
Files and hashes: 1: U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl (hash: jzS+9/OcArw2H9Yhmtq3eqbyJf7avJlYLYmbNfIZ0R0=)
2: EB8C9B546EE911ED8F07B022C4F9AE02.roa (hash: SPhefyMCy54NrJBBaZQ3gOJXpce+jtxSLdt2uoVKWJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl
rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736BD, serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2
Validity
Not Before: Mar 1 02:44:11 2026 GMT
Not After : Mar 8 02:44:11 2026 GMT
Subject: CN=69a3a7fc-626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:d4:1d:39:0f:28:25:a7:d0:f6:52:63:1b:
46:05:5d:3b:af:f2:c0:c9:fb:f8:c1:5e:32:bf:45:
68:be:4d:49:5b:ef:8c:9b:32:df:9c:ff:c6:ef:af:
45:25:2b:03:97:12:8a:56:3d:8a:11:e0:92:83:eb:
bb:01:ff:5f:40:74:40:a3:06:f3:f1:e8:2d:51:bb:
13:70:48:6a:12:01:27:9c:8c:19:8e:fa:45:b5:ac:
91:5c:82:e6:7a:90:da:9f:fc:7c:29:0a:d2:ad:94:
96:ca:0f:e8:be:46:ca:04:5f:46:e6:7a:ea:72:92:
da:1d:0c:f6:06:05:82:b0:c9:84:3b:26:4c:93:c1:
e1:c3:15:e6:f8:0d:61:1d:fe:bc:78:47:79:e5:e6:
a3:8e:c0:f5:31:4d:51:01:21:ba:af:b7:8f:05:94:
4c:91:19:43:d7:35:63:10:3c:16:4c:b8:ef:39:d7:
2e:85:c5:18:2e:8f:e1:0f:97:e0:ae:5d:f7:29:22:
5a:54:ab:73:0a:cc:0f:fa:67:50:64:1e:75:2d:a4:
09:f6:ad:a4:03:d4:08:b8:d2:e8:98:bf:da:1f:41:
de:34:f8:1f:48:65:c4:96:56:6a:1f:48:1b:88:66:
78:fd:77:da:90:d9:37:ad:81:f7:47:e2:7f:1b:a9:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:98:61:84:AC:1B:FB:C7:F6:BE:61:B3:4C:50:C1:0A:4D:B5:D8:15
X509v3 Authority Key Identifier:
keyid:53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a8:b0:f2:6c:dd:eb:72:e9:6e:74:3e:50:17:2c:de:ea:0c:
ee:a6:f7:41:7f:5e:6b:9d:31:5e:07:2f:c7:88:c5:41:f0:4a:
cd:5c:37:f7:04:d4:57:36:47:d5:6b:62:bc:2b:58:f4:2a:a6:
e2:92:04:10:14:6b:a1:c1:79:45:05:5c:e7:9c:fb:9d:5a:f3:
ab:ca:f8:af:16:00:d7:44:2e:74:e2:f7:84:21:22:8c:af:a1:
18:c8:77:43:ab:17:1f:2d:86:13:50:40:76:de:d0:19:06:ce:
29:da:de:8f:70:7f:0e:3a:fb:b1:8b:35:12:fd:7c:a3:c6:1e:
45:2f:35:bb:60:29:b3:6d:0b:4a:f1:66:a2:94:63:5d:97:96:
ce:37:77:c4:79:c3:d3:1f:84:31:a8:7e:31:b2:8a:87:35:7f:
81:a8:86:34:65:d9:70:f5:31:b8:ad:83:92:2e:b3:68:9a:c1:
75:33:62:8e:ba:a2:50:72:cb:0f:c0:82:94:4e:b2:65:15:62:
56:d1:85:e7:d7:11:aa:dd:f2:3e:ff:49:71:07:19:8e:42:c9:
12:81:e2:3c:14:4f:a3:da:fe:78:b7:c7:08:e1:8b:71:bb:60:
8c:3f:7c:6b:cf:a7:0d:da:31:87:bc:1e:28:de:fb:50:1d:2c:
8d:5b:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:06 2026 by rpki-client