
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File: 0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier: y2ORchp71jOdCLeAtKOCx67rXO2F1wWG5fj6bNk62zs=
Subject key identifier: 5E:6C:3F:D5:BF:38:BD:1A:03:7E:92:DC:10:15:22:BD:7E:98:DB:CE
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial: 06F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number: 06D2
Signing time: Thu 16 Apr 2026 22:16:32 +0000
Manifest this update: Thu 16 Apr 2026 22:16:32 +0000
Manifest next update: Thu 23 Apr 2026 22:16:32 +0000
Files and hashes: 1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: pF3FvD7P22NAOhbi7ULKnojbFq9dLLl5IK/F91g2f7g=)
2: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: jX0r26D7eTQAmi/KLRW0k/yca+QffQLV4qa7gOF/TdI=)
3: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: L6hABI5kNyEHBTZ/cEYXuskG1lk2aNB/iJZmFIuNgZo=)
4: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: UEUSncbvcRYXE+6AzGdqUvKwJ/u7rXG3RrB+0He5Cnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1777 (0x6f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Validity
Not Before: Apr 16 22:16:32 2026 GMT
Not After : Apr 23 22:16:32 2026 GMT
Subject: CN=69e15fc0-fe7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:3f:c0:88:42:0d:e2:ed:65:48:38:dc:0a:
a6:dc:14:89:77:f3:6e:8c:b5:71:46:0b:15:d1:9c:
a7:41:4b:d4:aa:02:e1:e7:fe:14:e4:3e:05:84:15:
58:3b:49:2f:c5:62:41:97:cb:82:55:4f:60:4b:5d:
4b:28:3c:5e:68:f1:b9:1f:93:0c:bd:b7:bc:a9:42:
a9:91:52:a9:d2:3e:9f:f8:d4:7d:5b:26:95:06:8e:
87:da:d6:0a:67:9b:31:df:c7:4c:79:9a:26:09:7f:
87:d0:5d:b2:3b:f9:fb:64:1b:81:ba:e6:fe:8f:3f:
d2:68:bf:a7:b4:78:18:3e:67:6c:34:2f:0c:bb:c1:
2f:1f:f3:0a:b9:9b:74:a4:6f:bf:08:06:d9:2f:eb:
42:2f:a9:45:6b:b9:14:29:ec:45:9a:ab:b7:e8:04:
9c:55:4f:b3:e0:de:5f:27:c4:2c:5d:03:10:fd:13:
c8:2d:6c:31:5d:b8:c0:12:a2:e5:85:75:06:cd:1e:
aa:34:3c:6f:84:73:ae:4f:d3:b1:ae:f6:eb:68:94:
71:45:67:06:9c:b2:14:d8:32:30:4d:23:48:3a:19:
9b:f8:93:74:67:72:73:a8:e6:81:c1:8c:8a:b3:19:
2e:49:cf:e7:b9:b0:41:a3:94:b4:a3:66:d6:24:5a:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:3F:D5:BF:38:BD:1A:03:7E:92:DC:10:15:22:BD:7E:98:DB:CE
X509v3 Authority Key Identifier:
keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:63:07:eb:5b:8a:b2:a2:84:fd:6d:af:40:34:17:0b:aa:8e:
f3:77:b3:7d:cc:2c:9c:23:85:1d:eb:74:f2:b8:d3:d5:2c:3d:
c5:e7:7c:7b:11:2c:61:63:9d:14:09:35:b8:31:e4:81:d7:72:
58:89:7a:40:13:70:5e:58:a8:4d:42:c3:82:bc:69:80:63:39:
86:2c:03:f0:ef:e6:86:2b:92:ad:bd:5f:31:d7:24:82:0b:63:
ab:c0:cf:fc:30:a7:04:c5:3a:dd:96:dd:e3:d5:66:19:35:e4:
33:95:06:e1:d9:3c:ff:49:19:c4:22:db:b6:de:e5:d9:94:2d:
8e:22:3c:76:eb:4a:f1:f7:9f:ab:41:37:bf:34:ce:20:47:2f:
ee:f0:47:8b:48:43:42:11:46:c2:2b:2d:6d:54:62:04:f5:65:
50:74:77:3b:f2:cb:04:5f:b5:8c:45:88:b8:4b:93:50:b3:47:
6d:4f:f0:78:8b:9a:53:10:3e:2c:f2:d7:f3:1d:a1:3a:8d:82:
eb:5b:20:fb:d8:8f:f9:3d:f9:0c:5d:9c:01:a7:ff:1b:1a:25:
b6:53:5e:0f:b2:5f:ed:e7:74:d3:ac:2c:81:e6:36:13:79:37:
58:61:3f:f3:e7:2f:4a:97:12:72:51:76:a9:d6:19:de:ca:2e:
63:25:d6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:16 2026 by rpki-client