
$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json)
Hash identifier: G1fnRk3qJtF5AE8YXLfYQ4+SQ79WvY+dfFbINAdEdj8=
Subject key identifier: 16:EB:49:8F:1D:93:DC:83:B5:A3:CA:B1:81:28:B6:55:7B:3E:58:A1
Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
Manifest number: 6B
Signing time: Mon 27 Jul 2026 10:16:16 +0000
Manifest this update: Mon 27 Jul 2026 10:16:16 +0000
Manifest next update: Mon 03 Aug 2026 10:16:16 +0000
Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: qEht8Drd4Fg1d4nPB7CzCgDI0zJ3UnB+Jf5R9TDl3Fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Validity
Not Before: Jul 27 10:16:16 2026 GMT
Not After : Aug 3 10:16:16 2026 GMT
Subject: CN=6a672ff0-041e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:e8:28:f1:1d:2b:f2:ae:de:89:6a:1a:4c:
9f:83:94:5a:27:e3:f1:8b:98:0e:be:ae:aa:55:02:
11:c5:f5:6e:99:24:f1:ef:e6:90:61:74:5b:4d:7a:
70:61:ba:f2:19:71:1d:1b:81:6a:60:3b:b3:84:70:
95:ed:ab:a5:ea:db:4b:76:e6:29:36:90:b6:92:29:
e2:54:a5:98:df:b7:5b:ba:ef:08:75:1a:29:94:08:
92:fb:fd:cd:77:a1:21:9d:99:9b:6b:a4:9c:e7:29:
a2:c9:a6:6a:6d:db:ab:9c:37:e7:b7:af:b0:6f:ee:
dd:4f:65:9e:e8:c4:40:89:4c:bf:d0:20:cc:ed:f5:
0f:c4:c0:32:80:6d:a9:8c:b1:78:34:a6:ab:fc:4d:
13:fe:cb:9d:80:bf:04:a6:b1:bd:88:2e:21:c9:70:
e6:2e:00:a2:a0:a1:a6:26:ea:ec:e0:5b:4d:79:cb:
55:e8:2a:69:a5:c0:8c:f1:fa:d6:fb:88:7d:9a:c0:
17:2a:48:bf:88:62:8e:23:93:d6:16:fb:eb:85:86:
26:85:bf:70:ac:df:18:a7:37:d3:2f:55:62:86:21:
2b:26:62:9c:7c:b9:88:6d:ac:f4:65:00:88:c3:15:
eb:d6:e4:04:85:a8:d9:e3:65:ed:83:26:68:c0:92:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:49:8F:1D:93:DC:83:B5:A3:CA:B1:81:28:B6:55:7B:3E:58:A1
X509v3 Authority Key Identifier:
keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:93:11:2e:73:76:ac:b6:bc:8a:b5:53:57:df:8b:0c:6e:a1:
da:6b:0f:29:1b:1a:13:08:46:44:6f:ca:72:37:14:5d:a6:67:
6e:13:8a:82:32:86:80:16:91:c3:de:4d:31:58:5d:d4:15:1a:
33:3c:1c:77:49:ed:08:3a:f3:13:ae:b3:9c:16:dc:dd:70:b5:
c6:36:69:be:17:83:aa:c2:4b:cd:3c:e7:3d:51:23:60:e7:6a:
da:39:2d:de:68:a0:91:79:76:5e:d5:6a:0d:e7:04:05:b9:94:
58:64:6c:ca:8c:4e:82:a2:4e:d7:3b:f2:74:10:78:64:36:0f:
05:7c:78:84:37:66:dc:0c:b2:75:37:3f:d8:1a:d3:1d:0d:28:
a3:c0:12:b7:d7:68:cc:9b:2e:ee:41:af:cb:32:1a:a4:33:d8:
fa:15:35:90:64:0f:88:82:2d:25:44:68:ee:62:7e:1c:b8:a7:
f4:c4:88:07:27:a3:e1:20:70:34:a3:50:68:6c:e7:a5:2e:9a:
8c:92:33:b4:79:c6:e6:55:6b:f7:5e:eb:1a:5c:2e:43:64:24:
54:d9:98:b5:bc:11:75:00:93:dc:29:0c:67:38:cd:c0:25:19:
50:3a:93:d0:dc:82:2d:ac:b1:d5:03:5f:43:f3:ab:b3:7f:c0:
4f:30:c1:94
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NDBBRTExMC8GA1UEBRMoNTNCOTJDMkRBMkQ1NDlFODE0NzA0MDdDQzhGRjBDNzVC
OEM0QjcyRDAeFw0yNjA3MjcxMDE2MTZaFw0yNjA4MDMxMDE2MTZaMBgxFjAUBgNV
BAMTDTZhNjcyZmYwLTA0MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxCugo8R0r8q7eiWoaTJ+DlFon4/GLmA6+rqpVAhHF9W6ZJPHv5pBhdFtNenBh
uvIZcR0bgWpgO7OEcJXtq6Xq20t25ik2kLaSKeJUpZjft1u67wh1GimUCJL7/c13
oSGdmZtrpJznKaLJpmpt26ucN+e3r7Bv7t1PZZ7oxECJTL/QIMzt9Q/EwDKAbamM
sXg0pqv8TRP+y52AvwSmsb2ILiHJcOYuAKKgoaYm6uzgW015y1XoKmmlwIzx+tb7
iH2awBcqSL+IYo4jk9YW++uFhiaFv3Cs3xinN9MvVWKGISsmYpx8uYhtrPRlAIjD
FevW5ASFqNnjZe2DJmjAknunAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFutJjx2T
3IO1o8qxgSi2VXs+WKEwHwYDVR0jBBgwFoAUU7ksLaLVSegUcEB8yP8MdbjEty0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MEFFL0IzOEU1RkQ0RUY5
RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2VnVWNFQjh5UDhNZGJqRXR5
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVTdrc0xhTFZTZWdVY0VCOHlQOE1kYmpFdHkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0
MEFFL0IzOEU1RkQ0RUY5RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2Vn
VWNFQjh5UDhNZGJqRXR5MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCMkxEuc3astryKtVNX34sMbqHaaw8pGxoTCEZEb8pyNxRdpmduE4qCMoaAFpHD
3k0xWF3UFRozPBx3Se0IOvMTrrOcFtzdcLXGNmm+F4OqwkvNPOc9USNg52raOS3e
aKCReXZe1WoN5wQFuZRYZGzKjE6Cok7XO/J0EHhkNg8FfHiEN2bcDLJ1Nz/YGtMd
DSijwBK312jMmy7uQa/LMhqkM9j6FTWQZA+Igi0lRGjuYn4cuKf0xIgHJ6PhIHA0
o1BobOelLpqMkjO0ecbmVWv3XusaXC5DZCRU2Zi1vBF1AJPcKQxnOM3AJRlQOpPQ
3IItrLHVA19D86uzf8BPMMGU
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:05 2026 by rpki-client