
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File: 0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier: i3ZwfL5nF0+0ZTpKHa4XTjjedyt+yZu/S2KEV7ZzveI=
Subject key identifier: 26:31:23:A8:EB:9A:69:8C:A0:C4:85:07:D1:9B:C0:80:BE:75:23:5E
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial: 075F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number: 072F
Signing time: Sun 20 Sep 2026 22:00:54 +0000
Manifest this update: Sun 20 Sep 2026 22:00:54 +0000
Manifest next update: Sun 27 Sep 2026 22:00:54 +0000
Files and hashes: 1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: fowQq16XpgLnh4oPC7tIlsEU+5opYMMNiUCPQ+6TzTo=)
2: F28152A69B8611F1B4386D6F4511F970.roa (hash: ubTAyK2cMn31ieelGGRwezGPlj1FMuE8SjyOIKfT1/c=)
3: F32A5AEA9B8611F1B4386D6F4511F970.roa (hash: hC8DUUi3h7ApLUuU4cOKlMcdfzPUe8RieSnJ4Y0WyCc=)
4: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: 211xEjDsnDyQAXNRqQMMENUPbgNnfotqpOqOJlVt87Q=)
5: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 9gnnOt+KjUGWNs4otjuLVwe8oX6fVgNUzwNG3C1IhnQ=)
6: F4BAE41A9B8611F1B4386D6F4511F970.roa (hash: BWEvHpZlHk2lCPCqxiJZlaQoZxUmZjbC4KZmOcnu+w8=)
7: F5D2F46E9B8611F1B4386D6F4511F970.roa (hash: 0au6Si15nGK7eMBlSyZBhtsSwPZhCvIKY7Aeoqgl6Xc=)
8: F30D41529ABF11F1B22CABD14611F970.roa (hash: 85pNotyjZ8mxuBhPKNSC6QbezOpRGw5rRNH9Oy4noF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887 (0x75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Validity
Not Before: Sep 20 22:00:54 2026 GMT
Not After : Sep 27 22:00:54 2026 GMT
Subject: CN=6ab05796-0571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:84:de:5a:f3:96:1b:a2:0a:86:fe:e4:e7:
32:d6:31:ad:04:e4:88:03:e0:d7:3d:3d:3c:f4:67:
b9:73:d8:9a:ba:6e:95:c1:42:a0:a2:d8:ec:ba:10:
bc:77:43:d5:8a:b3:72:93:f9:e9:1a:23:f0:bf:2d:
40:6d:bf:34:d2:79:4c:54:80:44:64:2f:dc:26:c0:
c4:57:46:0c:59:e2:80:76:78:62:56:d3:13:f4:8d:
2a:ae:34:ed:72:43:d0:c5:5d:7d:8e:45:ab:6e:e1:
ba:41:09:b1:1c:6c:5e:90:99:91:d8:c0:f5:e0:d3:
1d:98:f4:cc:11:52:90:72:a4:0a:e0:d6:cf:85:48:
23:f2:1a:65:e8:d7:e3:b4:8a:43:a5:8d:c5:d8:28:
af:6a:ce:2b:8d:da:d8:e2:cd:78:ea:e4:6e:f4:bd:
48:72:97:bc:5a:2b:00:d3:22:a5:c1:66:93:00:8d:
1a:36:f7:21:77:68:0a:20:43:ef:14:e6:d7:e3:fb:
0f:21:3f:0c:6a:59:cf:85:98:56:c7:38:79:11:aa:
e0:01:88:7a:28:be:36:7e:47:72:c5:0b:b3:e3:49:
61:55:76:60:66:54:77:cd:ea:d1:98:20:19:42:77:
a9:3b:aa:e0:0c:69:ae:e7:eb:58:d5:58:2e:b3:3a:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:31:23:A8:EB:9A:69:8C:A0:C4:85:07:D1:9B:C0:80:BE:75:23:5E
X509v3 Authority Key Identifier:
keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d3:c3:49:39:fc:0d:0e:bb:ac:16:4b:c2:c0:5c:1a:59:c7:
b8:59:e3:82:70:23:0e:0a:19:57:7a:33:d1:94:4a:53:89:a9:
89:1e:84:6e:72:16:41:41:51:e8:ba:90:36:67:78:72:24:60:
da:c2:94:e8:d3:f5:0a:9e:7a:38:70:3a:bf:b5:df:77:ea:e7:
df:3d:a9:b0:88:5d:6b:be:6f:02:67:8c:b9:40:38:f3:ed:64:
5b:8f:60:e3:b2:0d:53:40:cc:d2:89:e5:50:d0:0c:fc:d1:fd:
16:61:41:c0:30:08:c8:05:16:98:1d:7e:04:47:9f:36:09:32:
e0:c6:93:c2:35:80:a8:87:ec:cb:e4:63:2a:ff:43:5b:91:e4:
c9:6d:86:9c:db:6c:bf:b5:36:6b:17:bb:76:79:2d:f3:61:86:
89:7d:eb:83:12:a2:fa:58:f3:5c:b7:c0:5a:d3:ac:b5:60:c5:
a4:2a:d4:fd:73:78:07:5b:c0:4c:c1:cc:c8:f9:df:28:00:3c:
00:a6:20:f7:c4:07:51:c8:a3:e7:4a:6d:fe:f3:5d:0f:d9:7c:
f1:cb:56:99:bf:0a:68:2e:c1:b2:a0:f1:c2:86:77:96:96:b9:
08:0a:a4:e0:d7:38:b0:52:17:d4:b5:37:1f:f2:68:55:28:a0:
a5:9c:1a:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjYwOTIwMjIwMDU0WhcNMjYwOTI3MjIwMDU0WjAYMRYwFAYD
VQQDEw02YWIwNTc5Ni0wNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlhiE3lrzlhuiCob+5Ocy1jGtBOSIA+DXPT089Ge5c9iaum6VwUKgotjsuhC8
d0PVirNyk/npGiPwvy1Abb800nlMVIBEZC/cJsDEV0YMWeKAdnhiVtMT9I0qrjTt
ckPQxV19jkWrbuG6QQmxHGxekJmR2MD14NMdmPTMEVKQcqQK4NbPhUgj8hpl6Nfj
tIpDpY3F2Civas4rjdrY4s146uRu9L1Icpe8WisA0yKlwWaTAI0aNvchd2gKIEPv
FObX4/sPIT8MalnPhZhWxzh5EargAYh6KL42fkdyxQuz40lhVXZgZlR3zerRmCAZ
QnepO6rgDGmu5+tY1Vguszql+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYxI6jr
mmmMoMSFB9GbwIC+dSNeMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADNPDSTn8DQ67rBZLwsBcGlnHuFnjgnAjDgoZV3oz0ZRKU4mpiR6EbnIWQUFR
6LqQNmd4ciRg2sKU6NP1Cp56OHA6v7Xfd+rn3z2psIhda75vAmeMuUA48+1kW49g
47INU0DM0onlUNAM/NH9FmFBwDAIyAUWmB1+BEefNgky4MaTwjWAqIfsy+RjKv9D
W5HkyW2GnNtsv7U2axe7dnkt82GGiX3rgxKi+ljzXLfAWtOstWDFpCrU/XN4B1vA
TMHMyPnfKAA8AKYg98QHUcij50pt/vNdD9l88ctWmb8KaC7BsqDxwoZ3lpa5CAqk
4Nc4sFIX1LU3H/JoVSigpZwalA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:19:20 2026 by rpki-client