
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json)
Hash identifier: XTli/m/r+mzHVfOPCcbTEAlhaZ9Scs1HcertMgtYluU=
Subject key identifier: BE:91:00:D3:3E:09:7C:FC:E1:1A:B4:27:98:21:94:58:90:E0:74:EB
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial: 03C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
Manifest number: 03BE
Signing time: Wed 23 Sep 2026 00:11:20 +0000
Manifest this update: Wed 23 Sep 2026 00:11:20 +0000
Manifest next update: Wed 30 Sep 2026 00:11:20 +0000
Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: iFG7zp0o0JWbqWNGZKXBFiAV7osjHnd+UuLwE7P2ihQ=)
2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: xUdGjut85J8auqIyCk2ULhlxGhkzVM/KegV60so15Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Validity
Not Before: Sep 23 00:11:20 2026 GMT
Not After : Sep 30 00:11:20 2026 GMT
Subject: CN=6ab31928-8a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:a2:c9:92:27:87:04:23:71:34:5e:e8:ff:
2e:07:9f:29:76:3e:3c:8d:27:a8:fc:8d:89:b7:a1:
62:5f:18:e8:88:8f:0c:29:59:e4:7f:8f:e6:11:17:
07:58:f6:bb:a9:5e:c9:04:3f:96:3b:77:e8:f7:11:
31:3d:ef:37:cd:96:49:63:b3:1c:20:34:63:eb:84:
97:a2:a5:ca:5d:bb:b6:26:24:9a:6e:da:79:7d:b8:
31:2c:16:78:1f:05:22:18:99:19:5a:1e:e4:91:6f:
22:21:b0:c6:0f:8b:29:84:b8:b0:20:b1:79:e3:e2:
4b:e4:99:e8:d7:a3:e8:17:47:5b:e1:12:8f:b3:28:
8e:7d:65:2a:39:7a:8b:a5:55:e8:58:dc:cd:71:a3:
3c:d6:6e:2c:d9:4e:d4:f8:5f:7c:5c:33:61:28:0d:
cd:b2:3b:07:89:26:ca:ec:7a:d1:34:0f:e7:cd:22:
91:0b:ad:16:35:65:07:80:31:d5:ee:c6:c5:1f:3c:
07:bd:e4:be:72:bd:51:dc:dd:00:b8:1f:db:39:57:
90:f6:15:52:11:fc:03:8d:9e:15:6a:0f:a5:cb:d8:
c5:6c:7a:d0:f3:9f:8c:0d:22:26:28:0f:57:46:7f:
d9:3d:f9:62:bf:d9:57:32:89:79:f3:e0:ea:6b:e6:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:91:00:D3:3E:09:7C:FC:E1:1A:B4:27:98:21:94:58:90:E0:74:EB
X509v3 Authority Key Identifier:
keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5f:42:9c:c1:44:ad:33:64:da:f1:81:e8:06:39:5f:bb:ef:
aa:6c:c1:e5:f2:17:dd:b8:46:90:f7:e4:e1:90:dc:84:65:f4:
18:1b:ad:46:e0:6e:d6:90:11:61:b1:9a:13:e4:81:d5:01:ba:
20:b2:8c:3c:54:b1:32:7f:f2:8e:d7:e4:fa:65:17:f1:09:d4:
81:22:a6:b0:b1:e1:e1:11:67:ca:51:ad:ad:62:ff:08:cb:82:
73:27:0d:6f:4f:68:a9:cd:f3:4d:89:25:43:30:eb:07:c2:db:
fd:aa:08:77:36:d4:64:bd:09:1b:b9:84:3e:4d:35:06:91:f7:
17:63:ec:15:78:c5:a1:b4:73:a9:23:b3:a4:b4:8f:28:bd:48:
6c:3b:b1:88:f9:30:4b:5a:be:7e:82:11:b5:0a:ea:48:8c:80:
67:6e:63:33:98:6a:50:91:1d:8b:03:9d:b7:f1:75:99:a1:e2:
9d:99:f9:fe:e8:3a:04:44:8e:b8:b4:6b:4c:21:be:fc:48:1d:
9f:b9:41:78:e1:80:4c:39:66:d2:5c:0a:51:e1:ab:d2:1d:1e:
00:86:ab:04:15:3a:4f:07:23:9d:a4:29:5f:b7:f1:cd:15:6a:
71:8b:6f:a7:45:c0:b3:49:2b:db:a1:ea:1a:2e:93:79:4a:ea:
0d:5a:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:52:13 2026 by rpki-client