
$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier: CoTFx8yWqeLNeHy9JniCQyodd0deGt92RPT23d6xAtI=
Subject key identifier: 86:2D:84:24:F9:95:2B:A2:33:B9:A2:AE:20:33:1B:73:7C:BB:CD:40
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number: 028C
Signing time: Sat 13 Jun 2026 01:49:16 +0000
Manifest this update: Sat 13 Jun 2026 01:49:15 +0000
Manifest next update: Sat 20 Jun 2026 01:49:15 +0000
Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: tl9jLfDrP47Ase4sLO3WG/NKbjivnHjwVANoQpeu6b4=)
2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: YhFFk2hbxX7ipWmiEtRtt5VM5YND4GHLWqHWN4WPPew=)
3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: 1ls87L8wFBI3susqrdOibbBBgEFKgSyseB64cHDFqj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Validity
Not Before: Jun 13 01:49:15 2026 GMT
Not After : Jun 20 01:49:15 2026 GMT
Subject: CN=6a2cb71c-238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:51:08:5b:bd:e7:7c:58:60:e4:66:5b:f7:
98:a2:a3:02:a6:8b:9e:f4:1a:11:b5:38:e1:10:80:
6d:93:22:ad:68:ab:67:db:fc:07:a3:2f:49:d1:38:
3d:a9:bc:98:13:4d:70:7a:cc:d3:a3:92:76:1d:a9:
62:0c:57:5f:a0:1e:f6:11:96:64:0a:44:9d:84:76:
4c:27:bc:53:64:34:8c:90:69:7f:70:ef:89:72:bf:
52:7e:cd:49:30:ca:c3:c9:27:db:f1:8d:bf:e4:fa:
e8:33:88:2a:b5:ee:65:2c:47:f5:fb:39:67:c8:42:
0e:2d:fa:05:b1:ec:55:f8:26:d1:a3:be:e7:26:78:
79:d3:a1:eb:3b:69:f1:c6:90:ed:d5:59:0c:58:e6:
e7:13:ce:0c:8f:e1:a9:f4:9c:aa:9c:7f:31:13:c8:
93:00:2f:2e:3f:9d:e8:83:db:a7:da:3f:79:bc:10:
db:8c:7f:b9:cc:af:fa:31:dd:f3:2a:e7:55:d2:b0:
db:f7:8b:53:9f:14:9a:25:20:a8:d8:1c:5d:73:ec:
bf:96:71:f9:e5:ae:03:d2:4a:55:a7:5c:67:85:6f:
37:82:33:7d:c3:89:f5:c2:57:d6:4a:10:a5:5b:17:
cf:5f:05:c1:f7:de:6c:6c:35:64:d2:b4:db:a6:6c:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2D:84:24:F9:95:2B:A2:33:B9:A2:AE:20:33:1B:73:7C:BB:CD:40
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:8d:f9:a9:d4:73:65:c0:04:46:68:f5:02:fc:b8:dd:e8:f1:
6f:67:83:82:b3:f4:ec:4d:e5:5c:6f:a6:5b:a7:9d:76:c1:15:
14:5c:ea:02:d3:f0:f2:2c:6e:f9:c0:ee:09:f8:80:49:be:d8:
ab:65:6b:5f:55:8d:6c:6b:27:64:b2:7e:59:97:55:0b:fd:b9:
26:1b:cc:48:ba:66:de:68:5d:7a:be:95:e7:70:57:53:ca:50:
8e:76:c6:0a:95:d2:c9:04:37:ea:26:c1:3a:97:84:75:c4:a6:
27:03:d4:8f:ce:22:8a:3a:b4:1a:e9:c8:e6:59:40:5b:2d:9c:
58:b0:a8:4f:f4:90:67:4b:76:ca:bc:4e:cf:91:c4:7a:cb:f0:
29:57:5f:ed:4e:aa:8e:4e:f3:26:c4:1a:df:d1:34:7c:10:ed:
27:e4:8e:62:40:11:9e:5f:7b:a1:f2:05:fe:c3:d4:64:9d:61:
93:d7:4a:0d:1f:66:81:df:d9:3f:d5:67:d3:f7:cf:fd:9c:bc:
5d:f9:2d:21:39:38:6e:09:04:6a:9b:a5:ea:95:67:6a:4d:35:
ad:07:3b:d8:6e:bc:29:e5:1a:1b:77:d4:e8:59:a1:59:3a:94:
f8:68:eb:85:d9:e6:c7:d6:2d:07:83:b6:cd:57:1d:55:71:0d:
ba:ff:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:33 2026 by rpki-client