
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
File: Ul6ia2phflqvwFQjzOWI3hnsWEc.mft (raw, json)
Hash identifier: OAVYlMQpepvEBl6UhO8IuOGNdWkbO052duNsbkh3LUY=
Subject key identifier: 14:9E:EB:C7:55:36:68:71:16:4C:35:0F:93:DA:1F:CD:74:D8:E1:63
Authority key identifier: 52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
Certificate issuer: /CN=A91975F1/serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Certificate serial: 0373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
Manifest number: 036E
Signing time: Sun 19 Apr 2026 00:46:33 +0000
Manifest this update: Sun 19 Apr 2026 00:46:32 +0000
Manifest next update: Sun 26 Apr 2026 00:46:32 +0000
Files and hashes: 1: Ul6ia2phflqvwFQjzOWI3hnsWEc.crl (hash: y8cRxZaz8TIpfhfTp/ELg12Ob2eqgD0AuSM3a119uCM=)
2: 412DD396EE3B11EC8EE6DA63C4F9AE02.roa (hash: xUdGjut85J8auqIyCk2ULhlxGhkzVM/KegV60so15Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975F1, serialNumber=525EA26B6A617E5AAFC05423CCE588DE19EC5847
Validity
Not Before: Apr 19 00:46:32 2026 GMT
Not After : Apr 26 00:46:32 2026 GMT
Subject: CN=69e425e9-87e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:9c:62:31:1c:8d:d1:1b:09:c9:c6:28:4e:
b2:f2:a9:bd:56:4c:15:00:fd:00:84:77:5d:d2:21:
3c:fd:7d:2f:08:35:7a:0a:e5:53:7d:1c:33:8b:a4:
28:73:9c:82:46:bb:c6:d9:a9:fc:d1:7d:5c:0f:2d:
92:c6:86:23:8c:85:81:86:82:c3:98:23:2a:b6:85:
15:f9:3b:bf:2f:d6:46:ac:63:72:7a:49:f1:81:5d:
94:08:1c:e0:af:d7:13:61:c9:f2:dd:cb:bd:78:ff:
1c:50:3b:d7:06:e3:e7:a1:9c:5a:86:9a:43:5d:9d:
f5:70:bb:92:6e:11:b2:92:3e:31:98:30:80:41:d0:
ae:bd:30:4f:6f:ab:2b:2d:4f:0d:03:f6:46:61:1d:
30:bb:7c:1f:2c:2a:78:9e:80:d9:94:3b:ad:15:58:
52:e3:4b:ef:07:fa:6e:af:5b:9e:b8:7e:ff:ec:6c:
90:18:1b:77:22:11:ef:53:cc:a0:6a:36:5f:06:cb:
f8:db:c0:6a:9b:bb:81:72:8b:7e:08:04:58:de:6e:
34:8c:9c:9d:28:58:df:e3:29:71:17:f6:cd:12:f1:
32:60:30:48:07:d9:ff:f9:d5:2f:66:cd:08:98:de:
0e:9e:25:e6:0e:75:a2:23:18:67:1c:bb:2e:64:c6:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9E:EB:C7:55:36:68:71:16:4C:35:0F:93:DA:1F:CD:74:D8:E1:63
X509v3 Authority Key Identifier:
keyid:52:5E:A2:6B:6A:61:7E:5A:AF:C0:54:23:CC:E5:88:DE:19:EC:58:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul6ia2phflqvwFQjzOWI3hnsWEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975F1/CB66330AEE2C11EC956B2C4FC4F9AE02/Ul6ia2phflqvwFQjzOWI3hnsWEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:a7:6e:5c:ec:7d:50:15:da:53:1d:31:07:be:cc:72:7b:
f7:27:d2:fc:b4:b5:af:d4:43:ef:4c:87:63:db:27:df:ee:ca:
43:8a:f7:bc:c3:0c:27:b3:7d:83:7e:a5:8f:a5:ac:e2:8b:9b:
f1:5d:7b:de:b9:c3:90:66:fe:81:5d:eb:92:8b:68:e4:7e:aa:
2d:f7:ff:03:0c:82:80:21:f4:2a:ee:3b:a2:3d:32:06:b9:da:
97:2e:4e:b6:81:af:4d:29:23:e5:a1:d7:6f:7c:4b:fc:c4:db:
b7:98:38:82:fe:6a:3f:95:48:cb:05:7d:27:fe:ec:73:4d:13:
53:47:23:75:48:9b:a4:f4:f3:bf:4a:07:9d:8c:c0:38:12:17:
73:9e:54:7b:87:12:f4:8d:c7:1c:2e:3b:2c:eb:64:7f:2c:51:
4a:8f:d6:e6:02:4b:9e:97:53:d8:16:54:1a:37:91:89:cf:34:
bb:dd:56:49:82:47:cd:56:4a:08:aa:2c:88:09:a6:7e:68:94:
4e:fa:1b:1f:5a:c8:f0:a1:a8:18:c1:93:42:76:46:ed:04:55:
74:66:08:be:7d:a3:a9:76:5d:a5:86:94:d9:eb:5d:66:58:a8:
f3:f6:85:2f:1b:fb:c7:1f:89:f8:34:a3:a3:b4:00:24:57:79:
f8:22:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:23 2026 by rpki-client