
$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json)
Hash identifier: A/Lnx4QtSZpeb2WdIEeiuSnhsyKqfgsGFFYAGtmJ+Go=
Subject key identifier: 9B:20:EF:6E:1F:7A:41:3E:FA:3B:C1:7D:74:D0:E7:BD:89:C8:AC:5D
Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
Manifest number: 55
Signing time: Sat 13 Jun 2026 08:20:06 +0000
Manifest this update: Sat 13 Jun 2026 08:20:06 +0000
Manifest next update: Sat 20 Jun 2026 08:20:06 +0000
Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: yJPRaetUYPvh/6PLxvJnuURXkTmE40XUXaQRR33cVak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Validity
Not Before: Jun 13 08:20:06 2026 GMT
Not After : Jun 20 08:20:06 2026 GMT
Subject: CN=6a2d12b6-e0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6e:7e:57:f4:b3:1a:43:c8:42:eb:f6:2d:9d:
9f:9c:5d:75:0b:20:79:70:5f:86:4c:0f:e4:12:d2:
34:b3:43:74:9b:83:6f:8c:0c:07:51:d3:d9:71:19:
35:6d:09:41:7d:0f:18:23:43:51:ae:c5:84:2a:95:
7c:80:c1:93:90:b8:03:62:c1:e7:72:d6:b1:92:54:
aa:e0:a4:fc:cd:36:d4:ef:91:96:0e:db:0f:d6:0b:
2d:c5:13:5e:f2:cd:4a:80:c8:b0:78:83:d3:72:3d:
3d:f6:f3:bd:90:d4:e3:c4:01:79:0b:fe:eb:60:7e:
39:c5:0b:c5:f4:82:08:69:43:54:ac:59:d2:0f:69:
50:14:23:60:c5:cf:62:99:37:9d:7f:f0:47:7d:21:
6d:da:30:12:85:fd:0b:c1:de:68:40:f7:b7:3a:ce:
62:b8:75:af:5c:0c:1a:25:38:78:c8:8e:af:fe:e4:
7d:5b:12:06:07:a7:51:1d:87:29:3d:22:eb:d0:9e:
15:0f:03:17:5f:ce:a5:76:7f:d2:d0:7f:df:32:d7:
1e:83:e8:10:8e:03:b6:c5:69:74:2a:66:df:5c:76:
85:3e:e2:5e:a9:b5:ba:a2:89:5b:2b:7b:2a:5b:0b:
eb:1e:5a:2e:e0:96:2f:2b:3e:6b:b0:09:19:a3:15:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:EF:6E:1F:7A:41:3E:FA:3B:C1:7D:74:D0:E7:BD:89:C8:AC:5D
X509v3 Authority Key Identifier:
keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:e6:e0:36:2b:05:6d:a0:f4:05:56:86:44:ed:d5:3d:d0:10:
38:fc:4e:c0:49:da:c2:6f:d1:30:b2:d2:18:ed:d0:da:ea:cf:
4b:d6:b9:6b:50:ee:90:14:e9:d0:2e:55:b1:a4:02:bf:c7:37:
6a:94:93:31:75:e6:5d:30:6a:96:fe:4a:58:4d:11:10:cb:b8:
83:d2:3a:6f:9f:a8:f3:4d:60:45:9c:d4:a8:f0:af:c1:06:06:
bf:8a:e5:82:33:57:f7:13:d3:42:9e:13:f8:58:94:ed:26:86:
70:b2:90:93:6e:fa:01:97:92:dd:a0:39:91:fe:50:9e:a8:f9:
e8:85:2a:02:e8:43:0d:af:ae:4b:34:bb:45:63:5e:6e:ce:57:
ee:88:8b:57:a2:d8:3f:fb:0b:2b:89:8f:0b:98:dd:4e:dc:bf:
74:0c:d5:98:38:20:46:5b:28:bd:3b:b0:86:1f:90:d6:42:6e:
5f:6d:74:bd:18:19:86:03:55:69:52:30:fc:d6:0a:0d:1c:bb:
d4:ea:57:07:c7:83:a6:11:9a:4f:05:32:92:7d:be:e6:34:77:
33:92:2d:07:5d:27:aa:00:75:ac:45:9d:5f:cb:a5:99:84:82:
16:4b:15:5b:24:e9:bb:3c:85:9e:65:e5:4e:22:f6:95:48:bf:
6d:2c:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:09:58 2026 by rpki-client