
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier: qF4Ioc5FwzWj1RUDW33iEu9zwDUSG3F04Mz/8bpXMSM=
Subject key identifier: BB:43:C3:12:6A:38:BA:83:ED:7F:63:70:4F:D3:52:C1:AE:CA:7C:46
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 02CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number: 02C1
Signing time: Mon 21 Sep 2026 01:22:07 +0000
Manifest this update: Mon 21 Sep 2026 01:22:07 +0000
Manifest next update: Mon 28 Sep 2026 01:22:07 +0000
Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: u/eY2mINQcfKNIVE73mnFs89wjf3xjXGUz1jlzWWXWo=)
2: F69540BA810811ED9EA03683C4F9AE02.roa (hash: kjANU+m8NGi3/h3kcs2+JMjQaSUpPN4ROitBH9ohYXU=)
3: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: jXby300bLqk6OmsYVLmwjByJkTyNtDhvbMpxkEk+1XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Validity
Not Before: Sep 21 01:22:07 2026 GMT
Not After : Sep 28 01:22:07 2026 GMT
Subject: CN=6ab086bf-07fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:4b:ac:f5:8f:51:b9:38:ef:69:11:fc:3a:
ea:22:82:ca:50:72:0c:a1:10:4d:b0:9f:f5:f4:bb:
c4:a2:dc:c4:fe:b7:99:0c:f4:c7:98:03:73:f1:f8:
9d:78:10:c9:72:43:c1:0a:aa:df:bb:13:92:95:d0:
5a:23:5e:8e:04:eb:9c:65:53:93:31:a6:94:c2:b0:
68:f8:9f:83:83:80:9b:2e:8f:b7:e0:c6:8d:c4:32:
48:a1:ac:60:af:76:12:90:c1:da:8f:19:20:34:31:
b3:f4:4f:84:38:5a:c4:1a:1f:d5:37:53:41:69:6a:
37:e6:60:9e:8a:37:24:4f:c5:50:80:44:45:32:21:
7f:cc:04:34:d5:72:e3:25:24:51:43:71:e3:bc:9e:
f7:61:4a:dc:bd:1e:39:2e:6d:85:5d:78:ad:8a:10:
7c:26:c4:f3:20:cc:29:58:a3:a7:9c:56:ad:87:69:
18:ca:4c:27:75:64:ad:a7:2f:e5:35:f2:00:7c:44:
90:1e:7d:ec:a7:04:38:de:2a:e1:89:98:6b:f2:45:
20:bb:7b:7d:b8:15:c2:c2:c0:fe:d8:1b:d5:50:cb:
5c:d5:56:16:8c:bb:e0:69:9b:e6:31:b9:6d:e1:43:
cf:98:7d:11:ed:c8:84:58:89:82:01:f8:55:1c:ff:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:C3:12:6A:38:BA:83:ED:7F:63:70:4F:D3:52:C1:AE:CA:7C:46
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:6c:ef:94:f1:70:88:e2:af:ab:6f:6d:93:5e:86:f6:01:ac:
36:ac:9c:cf:44:25:23:2f:b5:40:1c:7d:3e:fd:20:ba:3b:4c:
93:9c:f8:ef:9b:1d:2e:bc:b8:e1:70:e8:c3:30:21:cc:d9:56:
e1:96:f7:11:25:1f:90:f0:b5:ab:51:43:02:8a:b2:7b:d9:b5:
06:2a:b7:b1:a2:81:68:80:f5:9f:78:d0:04:59:ec:b4:e0:6e:
ca:6f:ff:fb:85:a3:33:2e:39:29:1b:bb:38:32:68:c1:9e:d9:
ab:62:e6:7a:42:d4:74:b4:cf:73:04:36:28:6d:4e:6d:b5:23:
9f:46:0d:fe:16:4a:68:94:f5:2b:38:b6:81:10:52:a7:d0:14:
2c:f4:f7:72:da:06:4e:6b:18:02:b9:75:04:c9:78:16:ea:03:
06:8a:af:c1:6a:6c:c4:62:8f:08:85:3d:2a:b7:ae:37:03:3b:
70:b5:4e:6e:be:d1:88:b2:b0:6b:0d:f4:9c:84:74:5e:df:d3:
6e:59:e8:6e:98:9e:a1:15:3e:8e:7c:c8:ce:34:2c:ab:f0:8a:
64:2a:b4:cc:91:76:c6:95:53:11:43:51:d5:0b:10:6a:0e:98:
a9:8a:63:29:3c:7f:67:f8:07:14:b8:47:2a:d0:cd:4a:ee:6b:
15:05:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:05 2026 by rpki-client