
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json)
Hash identifier: 2L3dBWO1gS+Qj6oeIa3GfYrbQWAfk+95xDHgcg2f8Kw=
Subject key identifier: 70:DB:BE:0F:89:D7:74:45:44:53:08:05:70:C6:65:A3:66:65:ED:9D
Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
Manifest number: 8B
Signing time: Fri 25 Sep 2026 07:44:00 +0000
Manifest this update: Fri 25 Sep 2026 07:43:59 +0000
Manifest next update: Fri 02 Oct 2026 07:43:59 +0000
Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: LXyKAcn7yo2LvzZHnOVYXX6jJGge6DUcPOQU4x4dtqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D
Validity
Not Before: Sep 25 07:43:59 2026 GMT
Not After : Oct 2 07:43:59 2026 GMT
Subject: CN=6ab6263f-1ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:73:3e:8c:a1:a2:13:06:39:9a:a1:04:a4:
56:1e:b8:2d:40:d8:7b:61:c2:ce:e0:09:43:87:36:
49:fa:64:50:d0:34:b4:de:10:06:52:6e:1a:f7:e9:
e5:49:65:21:69:75:76:2c:cc:e4:d4:c8:2e:be:a3:
d8:0f:f6:5a:8f:91:1f:68:c7:01:f1:96:27:9f:de:
55:d1:fa:8c:38:62:76:9f:3f:a9:e4:65:94:1f:17:
01:fe:87:18:65:53:1f:4a:e1:ad:ba:fe:b0:16:fd:
be:82:88:cb:2b:8a:29:7d:32:61:9c:af:1e:8b:7c:
00:7c:72:44:db:5f:a4:0b:fe:a8:e1:f4:e7:b5:5a:
e8:6d:79:e9:8e:71:c6:2d:15:14:97:71:02:2d:8a:
42:8f:5b:3a:5f:41:6e:e3:e7:ee:84:34:43:71:27:
24:01:29:93:db:5e:89:34:ae:b3:b1:75:e3:a9:6e:
52:d2:b0:21:43:79:0d:a9:36:73:b0:10:70:58:fd:
87:1e:2a:b9:b6:a5:84:ad:38:cf:1f:96:11:71:04:
e9:6c:ad:66:f8:6b:dd:0f:0d:77:f5:9b:05:e6:b1:
df:a3:98:85:39:5d:4c:a6:ec:6e:0e:35:45:5d:59:
1e:a1:ab:87:d6:14:bf:ca:5c:f5:77:20:e2:33:c2:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DB:BE:0F:89:D7:74:45:44:53:08:05:70:C6:65:A3:66:65:ED:9D
X509v3 Authority Key Identifier:
keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:07:0f:5e:e6:45:8b:1a:cf:8b:99:2c:99:75:62:5c:5e:14:
3d:46:95:ee:8c:91:4c:76:af:14:6e:80:de:a3:cc:9c:b7:2d:
4e:17:6e:d1:20:83:c5:03:51:6f:34:60:1e:59:4d:2a:1d:0f:
df:60:e1:79:54:3a:84:93:ab:14:31:5e:03:90:5b:be:d5:cc:
c8:a9:62:a6:ce:26:58:0a:37:19:9e:9c:d5:b3:5f:9c:01:3e:
79:a9:92:41:b0:16:e9:9f:2c:5a:ff:b3:84:9a:a2:da:ae:cf:
cc:4d:38:72:fb:6c:ed:19:02:5c:58:dc:96:d1:8f:73:71:18:
33:a5:e7:e4:8e:8f:c7:bf:99:bd:89:ec:6e:21:39:2b:21:8b:
f7:d4:29:cd:01:2e:fe:6e:96:05:52:23:98:85:15:c7:0e:78:
53:ca:3c:86:e4:7a:bb:ec:8c:a7:eb:dd:12:1b:1f:3e:eb:09:
59:e7:8c:c5:c8:24:aa:f0:3d:dd:2b:2c:cd:38:8f:8a:3d:e8:
51:55:fd:be:13:77:ae:06:8e:bc:f4:18:a5:61:cc:e2:e5:11:
55:0e:92:84:fa:89:71:78:b6:f1:5e:3f:6b:15:28:7e:be:22:
9a:db:ca:34:05:22:9b:6b:91:36:0d:7c:b9:1a:8b:7b:c1:03:
7f:2c:24:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQwQUUxMTAvBgNVBAUTKDUzQjkyQzJEQTJENTQ5RTgxNDcwNDA3Q0M4RkYwQzc1
QjhDNEI3MkQwHhcNMjYwOTI1MDc0MzU5WhcNMjYxMDAyMDc0MzU5WjAYMRYwFAYD
VQQDEw02YWI2MjYzZi0xYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVJzPoyhohMGOZqhBKRWHrgtQNh7YcLO4AlDhzZJ+mRQ0DS03hAGUm4a9+nl
SWUhaXV2LMzk1MguvqPYD/Zaj5EfaMcB8ZYnn95V0fqMOGJ2nz+p5GWUHxcB/ocY
ZVMfSuGtuv6wFv2+gojLK4opfTJhnK8ei3wAfHJE21+kC/6o4fTntVrobXnpjnHG
LRUUl3ECLYpCj1s6X0Fu4+fuhDRDcSckASmT216JNK6zsXXjqW5S0rAhQ3kNqTZz
sBBwWP2HHiq5tqWErTjPH5YRcQTpbK1m+GvdDw139ZsF5rHfo5iFOV1MpuxuDjVF
XVkeoauH1hS/ylz1dyDiM8J6KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDbvg+J
13RFRFMIBXDGZaNmZe2dMB8GA1UdIwQYMBaAFFO5LC2i1UnoFHBAfMj/DHW4xLct
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDBBRS9CMzhFNUZENEVG
OUQxMUYwQTJENkI3Nzk2NzZGNTZCQy9VN2tzTGFMVlNlZ1VjRUI4eVA4TWRiakV0
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3a3NMYUxWU2VnVWNFQjh5UDhNZGJqRXR5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDBBRS9CMzhFNUZENEVGOUQxMUYwQTJENkI3Nzk2NzZGNTZCQy9VN2tzTGFMVlNl
Z1VjRUI4eVA4TWRiakV0eTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0AcPXuZFixrPi5ksmXViXF4UPUaV7oyRTHavFG6A3qPMnLctThdu0SCDxQNR
bzRgHllNKh0P32DheVQ6hJOrFDFeA5BbvtXMyKlips4mWAo3GZ6c1bNfnAE+eamS
QbAW6Z8sWv+zhJqi2q7PzE04cvts7RkCXFjcltGPc3EYM6Xn5I6Px7+ZvYnsbiE5
KyGL99QpzQEu/m6WBVIjmIUVxw54U8o8huR6u+yMp+vdEhsfPusJWeeMxcgkqvA9
3SsszTiPij3oUVX9vhN3rgaOvPQYpWHM4uURVQ6ShPqJcXi28V4/axUofr4imtvK
NAUim2uRNg18uRqLe8EDfywkjw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:16:24 2026 by rpki-client