
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
File: U7k_pg5FC4jfnLdgztYlltomSAY.mft (raw, json)
Hash identifier: RHbeqcqwHEsrCZ5S9GuPLHUGyLSNRovEmQYpl6+9S0g=
Subject key identifier: 74:2E:47:94:16:CB:2E:B8:EE:8A:B7:44:39:9B:92:C8:4F:2F:B2:63
Authority key identifier: 53:B9:3F:A6:0E:45:0B:88:DF:9C:B7:60:CE:D6:25:96:DA:26:48:06
Certificate issuer: /CN=A91927A0/serialNumber=53B93FA60E450B88DF9CB760CED62596DA264806
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
Manifest number: 18
Signing time: Thu 05 Nov 2026 10:02:03 +0000
Manifest this update: Thu 05 Nov 2026 10:02:02 +0000
Manifest next update: Thu 12 Nov 2026 10:02:02 +0000
Files and hashes: 1: U7k_pg5FC4jfnLdgztYlltomSAY.crl (hash: 9PJ/w6PWLWcBd7TfPmkAZdeoTunskbfMVi9QG3nbgiU=)
2: 073A991CB7C211F1A276FF195F11F970.roa (hash: ESHniOIE6hjdTnh19HGi7Rold0meXeAIjgAAbP+FVrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.crl
rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91927A0, serialNumber=53B93FA60E450B88DF9CB760CED62596DA264806
Validity
Not Before: Nov 5 10:02:02 2026 GMT
Not After : Nov 12 10:02:02 2026 GMT
Subject: CN=6aec541a-c05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:bc:87:3e:52:19:8e:74:b9:b2:dd:a8:9e:
64:d5:56:e4:a2:db:ee:9d:46:1e:9f:34:5a:41:fa:
a3:bc:89:ba:19:0f:0e:eb:4f:0c:17:be:22:0e:89:
08:42:d9:2e:6d:14:d3:43:84:04:fe:35:6a:dc:59:
0f:1c:b4:54:f7:78:85:9c:48:1d:69:5c:90:f1:28:
99:68:3b:d3:9d:b1:ca:d8:63:4f:98:bb:8a:7d:fa:
5c:e5:f5:e2:ad:8e:01:7b:05:5f:89:58:4c:54:a9:
67:b3:f7:b3:e8:08:bb:f1:fa:e2:d3:15:04:ed:56:
0d:82:bb:ce:bd:cb:c8:9e:02:11:fb:58:10:dc:bc:
86:68:79:c4:06:7e:46:8a:ee:9c:aa:05:a5:4f:ca:
28:6d:56:a6:44:aa:5e:0c:59:1b:4c:7f:60:17:54:
7d:66:7c:b8:e9:f7:17:f2:98:b8:44:db:62:79:00:
31:86:33:c6:29:c5:17:a5:3a:d0:e9:92:a1:11:3c:
28:5e:12:dd:a9:79:c1:03:0f:9c:cc:69:f8:9c:bd:
9c:4d:24:4e:c7:d0:a6:ed:6c:fa:fd:43:12:59:b0:
ce:d2:e7:74:49:00:e7:fc:f3:ec:1a:db:77:ed:e2:
82:63:ae:f4:cd:6b:41:36:c1:b3:a8:1b:0d:ad:42:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2E:47:94:16:CB:2E:B8:EE:8A:B7:44:39:9B:92:C8:4F:2F:B2:63
X509v3 Authority Key Identifier:
keyid:53:B9:3F:A6:0E:45:0B:88:DF:9C:B7:60:CE:D6:25:96:DA:26:48:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:d6:aa:25:f5:09:b7:a2:6b:48:4a:51:14:bb:1a:fc:42:b2:
33:08:04:e4:80:34:51:f9:8d:36:05:0b:46:a8:11:91:16:83:
56:6b:cc:00:02:a3:45:18:c4:b6:17:28:57:be:b7:02:0d:e9:
9d:ce:e8:bc:d3:6e:3b:22:71:cd:32:31:d5:48:ca:b4:92:3a:
8b:15:c6:09:0e:f8:89:3b:ed:0c:5c:62:20:05:c2:36:93:f4:
25:52:9d:99:f8:9b:3d:2f:d0:b2:61:89:6e:fa:23:86:f4:78:
3f:a9:30:d6:30:cc:6b:e6:ad:9e:42:fa:9f:0b:42:aa:62:4a:
97:11:1c:3e:6c:a6:81:30:ab:2f:e5:23:9b:05:fb:79:a4:09:
70:22:50:74:88:b3:a9:d7:4e:fc:47:5d:49:7d:0c:c5:b0:4e:
45:f1:11:a6:3c:47:dd:33:c6:04:b3:09:d6:54:0a:6d:7d:1e:
4f:8a:2e:a5:01:8b:61:0e:65:5a:c5:a3:46:29:d9:bf:09:8a:
7d:39:10:ee:99:5b:bc:4b:3d:e6:60:d6:93:46:31:9b:04:4e:
d4:5f:2b:6f:c6:fb:e2:89:20:6b:5f:73:c3:1a:36:b6:dd:63:
4e:88:c9:7e:1f:e8:b2:b5:7c:3b:15:47:c1:d1:c1:47:f6:fa:
27:7d:9f:76
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MjdBMDExMC8GA1UEBRMoNTNCOTNGQTYwRTQ1MEI4OERGOUNCNzYwQ0VENjI1OTZE
QTI2NDgwNjAeFw0yNjExMDUxMDAyMDJaFw0yNjExMTIxMDAyMDJaMBgxFjAUBgNV
BAMTDTZhZWM1NDFhLWMwNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCXxbyHPlIZjnS5st2onmTVVuSi2+6dRh6fNFpB+qO8iboZDw7rTwwXviIOiQhC
2S5tFNNDhAT+NWrcWQ8ctFT3eIWcSB1pXJDxKJloO9OdscrYY0+Yu4p9+lzl9eKt
jgF7BV+JWExUqWez97PoCLvx+uLTFQTtVg2Cu869y8ieAhH7WBDcvIZoecQGfkaK
7pyqBaVPyihtVqZEql4MWRtMf2AXVH1mfLjp9xfymLhE22J5ADGGM8YpxRelOtDp
kqERPCheEt2pecEDD5zMaficvZxNJE7H0KbtbPr9QxJZsM7S53RJAOf88+wa23ft
4oJjrvTNa0E2wbOoGw2tQsl3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdC5HlBbL
LrjuirdEOZuSyE8vsmMwHwYDVR0jBBgwFoAUU7k/pg5FC4jfnLdgztYlltomSAYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyN0EwLzIxQTYwOUY0QjdD
MTExRjFCMEZGRDIwMjVGMTFGOTcwL1U3a19wZzVGQzRqZm5MZGd6dFlsbHRvbVNB
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVTdrX3BnNUZDNGpmbkxkZ3p0WWxsdG9tU0FZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
N0EwLzIxQTYwOUY0QjdDMTExRjFCMEZGRDIwMjVGMTFGOTcwL1U3a19wZzVGQzRq
Zm5MZGd6dFlsbHRvbVNBWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCW1qol9Qm3omtISlEUuxr8QrIzCATkgDRR+Y02BQtGqBGRFoNWa8wAAqNFGMS2
FyhXvrcCDemdzui80247InHNMjHVSMq0kjqLFcYJDviJO+0MXGIgBcI2k/QlUp2Z
+Js9L9CyYYlu+iOG9Hg/qTDWMMxr5q2eQvqfC0KqYkqXERw+bKaBMKsv5SObBft5
pAlwIlB0iLOp1078R11JfQzFsE5F8RGmPEfdM8YEswnWVAptfR5Pii6lAYthDmVa
xaNGKdm/CYp9ORDumVu8Sz3mYNaTRjGbBE7UXytvxvviiSBrX3PDGja23WNOiMl+
H+iytXw7FUfB0cFH9vonfZ92
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:38:49 2026 by rpki-client