
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File: u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier: uC7sBX5e0/3E32oiCK61uzOC3mIi4bcWMwGA6mstTps=
Subject key identifier: 51:08:47:34:36:C4:B7:54:38:9F:7B:F0:55:D5:94:A2:21:04:86:BA
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial: 028C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number: 0280
Signing time: Fri 17 Apr 2026 01:37:13 +0000
Manifest this update: Fri 17 Apr 2026 01:37:13 +0000
Manifest next update: Fri 24 Apr 2026 01:37:13 +0000
Files and hashes: 1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: /jGGaoCLQGUp0Tb4suGrYX4Yq+MyRRlqTodADRndCwI=)
2: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: onPZDg24JU1SAnJ+1qdctr4Q+6RG244WKpPI60NUB8Y=)
3: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: AF+OSPPeJ/k4cpuI6pm2/IpiY0n6OFKaOYlrZAsamTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Validity
Not Before: Apr 17 01:37:13 2026 GMT
Not After : Apr 24 01:37:13 2026 GMT
Subject: CN=69e18ec9-bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:8c:a2:85:04:ec:00:31:b2:77:f6:69:dc:
3a:a9:f1:45:eb:c3:26:a8:4b:e3:04:3b:5a:fd:26:
b1:57:ea:70:73:01:38:67:13:e9:e4:ee:2a:fc:bc:
e0:2a:39:d3:9c:64:b8:51:20:41:7b:0d:ae:5e:8d:
31:76:ab:84:f1:0f:36:75:80:c8:10:10:4c:03:17:
8e:80:51:f4:06:db:e7:b1:7c:20:3c:a1:49:fe:da:
74:e2:a2:4a:5f:eb:dd:07:48:ee:e3:dc:b3:01:ca:
0c:2d:c3:57:f4:8e:26:c2:5d:cb:9b:16:75:49:97:
b8:3d:df:89:40:4e:f0:62:33:3b:97:1b:f0:a5:44:
d1:37:90:3a:0b:00:cc:cb:6e:38:98:d9:23:80:52:
63:34:fb:06:42:1b:e2:77:e9:11:7a:1c:4b:5f:6f:
8a:14:f4:27:d0:44:0e:84:9a:d4:2d:9f:2a:ad:41:
89:51:ce:84:3d:fa:5a:e9:de:f1:a0:4b:36:71:45:
65:ae:f1:e1:c9:13:ce:f3:26:98:ca:e4:2e:97:2e:
6b:a5:90:b3:41:f8:a4:b0:48:69:99:1e:05:a4:ce:
28:fc:c2:fd:50:5b:5b:11:24:4c:a2:93:fc:b2:59:
81:7c:aa:15:ad:10:9e:cb:b1:90:6f:ae:76:e0:a1:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:08:47:34:36:C4:B7:54:38:9F:7B:F0:55:D5:94:A2:21:04:86:BA
X509v3 Authority Key Identifier:
keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:88:68:4e:8b:8c:44:8d:8e:cd:f5:f3:1f:ed:18:b0:58:0e:
e2:35:37:39:7b:6a:56:96:5a:d4:34:a7:6d:a2:16:c5:5f:25:
6f:55:01:d4:5c:7e:30:a8:28:df:69:98:0d:b3:9b:59:ff:62:
4b:14:5e:8d:07:09:31:9e:9a:a0:38:33:fd:23:e4:33:da:09:
03:79:d9:60:a9:e9:53:83:09:6e:c9:1b:ed:ed:9c:25:a4:de:
04:68:13:e1:c0:b9:f1:b1:c0:5d:88:66:f2:6c:09:35:d7:dc:
98:8e:be:7f:3c:db:5c:c9:b2:47:ad:c1:98:31:87:c0:22:b6:
f1:d8:51:36:96:ab:50:09:e6:6a:ed:c5:0a:2a:f2:fc:a3:1d:
7d:2e:6e:8e:e6:db:d6:55:63:ef:77:ce:c0:e4:f3:07:72:8a:
bb:2a:3f:e4:3d:5f:d8:ad:cb:9f:5c:d1:19:b6:2d:f8:98:b2:
54:80:e3:4e:04:fc:dd:88:af:22:c5:43:1d:0d:4f:71:1e:98:
f2:35:d5:d9:9d:a8:13:33:a4:81:4b:0b:e1:a2:2a:81:e2:2b:
56:46:e4:62:14:46:74:ad:f0:f7:b9:69:b1:6c:0a:d1:15:ab:
39:c1:6c:fd:8c:72:2f:a5:61:ec:cb:1e:df:af:70:f3:4f:ff:
64:03:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:04:44 2026 by rpki-client