
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
File: UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft (raw, json)
Hash identifier: dMKzftO4bZgnP14YO4Wl9ISFta+KGfCu52ii37NPxS8=
Subject key identifier: 35:AA:E0:81:50:2D:F7:A3:23:36:9D:79:BC:0F:FE:1F:BD:42:2B:FC
Authority key identifier: 52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B
Certificate issuer: /CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B
Certificate serial: 0AE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
Manifest number: 0AD8
Signing time: Mon 12 Oct 2026 19:32:27 +0000
Manifest this update: Mon 12 Oct 2026 19:32:27 +0000
Manifest next update: Mon 19 Oct 2026 19:32:27 +0000
Files and hashes: 1: UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl (hash: 9D3teYZ04Pu/PUuEb4XUGEhYEC+qCWyzba2QitVOpY0=)
2: 21028CF67EF811EAAD47CD30C4F9AE02.roa (hash: N4nwatfxEhehTAjjh/ZeTrbraCN50LGzf/5xzXSLM4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl
rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 19:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A459D, serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B
Validity
Not Before: Oct 12 19:32:27 2026 GMT
Not After : Oct 19 19:32:27 2026 GMT
Subject: CN=6acd35cb-d187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:f7:78:f2:09:ca:a8:fc:87:ee:de:99:ec:
8a:8b:ac:ba:63:2d:fe:2f:46:54:ee:a7:aa:d6:05:
a1:a3:10:b4:80:47:c2:ab:8b:66:19:de:e5:8c:54:
3a:7b:f8:cb:02:41:33:25:43:ed:5b:0e:16:0b:0e:
fe:79:96:08:7b:7c:a4:b7:49:88:97:16:62:8d:0f:
1f:d3:0f:fe:60:d7:05:14:73:9f:d4:4d:b9:5f:cf:
48:8a:8d:94:8d:e3:4b:3e:4a:fa:97:05:99:a8:4d:
54:2a:6f:9d:6b:c2:70:a2:97:34:87:e3:45:c4:1a:
38:86:6a:1c:77:df:56:e4:b8:c7:78:9b:11:7a:7e:
a2:44:9e:6c:2a:24:55:68:ca:53:3a:6a:44:3a:59:
f6:9a:51:20:04:43:2a:51:a3:0b:88:c0:f8:d4:10:
c1:23:09:0c:82:10:39:4b:c9:8f:a0:b4:d9:12:49:
0e:75:ef:d3:cd:20:97:c2:d5:d0:7f:65:60:7a:e2:
a7:08:47:f6:52:9d:75:01:57:7c:33:7e:df:05:0b:
39:da:63:7c:5d:21:64:e2:01:09:35:68:3a:d5:2c:
0d:64:05:07:20:7d:c9:e2:e5:84:f1:92:99:ff:02:
29:bb:b0:db:e6:18:4d:00:cd:17:b9:f3:a5:18:6c:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:E0:81:50:2D:F7:A3:23:36:9D:79:BC:0F:FE:1F:BD:42:2B:FC
X509v3 Authority Key Identifier:
keyid:52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:06:1e:de:e8:44:e1:84:fb:6a:09:0b:c0:f5:c5:24:2f:0b:
8f:1e:60:bd:62:7a:df:39:89:fa:f8:a2:23:84:63:36:4b:be:
cd:70:fa:17:dc:8b:0a:c0:5b:61:9e:67:82:5c:84:e7:7a:99:
04:e4:e1:bb:21:64:7f:5a:bf:d0:f4:41:77:9d:d8:6c:91:7d:
94:2a:87:2b:82:7d:59:fb:27:92:77:0b:24:bc:f1:4e:2a:cb:
74:31:da:d4:94:bb:55:38:e0:4a:d4:44:f2:0d:a9:28:f0:00:
24:ff:5c:a3:3b:2e:a4:88:9d:1d:f7:f7:92:e1:67:cb:bb:74:
9b:03:29:58:9c:46:ef:83:53:c6:e2:d6:45:5e:2a:77:85:c9:
ab:ee:4e:0a:80:38:ee:5c:79:90:d3:23:0e:e7:26:98:70:d8:
11:69:e6:73:a8:31:dc:d0:92:fc:ba:a8:90:e7:6c:6f:35:97:
99:af:1c:28:8a:a7:b0:0a:74:a3:e2:df:0a:b7:1d:b2:3f:06:
7c:77:47:03:69:17:7c:ab:b4:66:e5:0c:82:6c:71:f1:63:b5:
c1:ab:96:d5:bf:70:20:6b:7a:ab:b5:2d:aa:1e:28:f8:50:db:
b4:bf:78:b0:32:a6:c7:c8:36:3d:47:3f:d2:fb:14:69:fe:14:
ed:93:60:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ1OUQxMTAvBgNVBAUTKDUyQjIxOTk1NDI5QzQ0RjhBN0Y0RUM5OUU1MzA0MDg3
MEQ2RDM4NUIwHhcNMjYxMDEyMTkzMjI3WhcNMjYxMDE5MTkzMjI3WjAYMRYwFAYD
VQQDEw02YWNkMzVjYi1kMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwoj3ePIJyqj8h+7emeyKi6y6Yy3+L0ZU7qeq1gWhoxC0gEfCq4tmGd7ljFQ6
e/jLAkEzJUPtWw4WCw7+eZYIe3ykt0mIlxZijQ8f0w/+YNcFFHOf1E25X89Iio2U
jeNLPkr6lwWZqE1UKm+da8Jwopc0h+NFxBo4hmocd99W5LjHeJsRen6iRJ5sKiRV
aMpTOmpEOln2mlEgBEMqUaMLiMD41BDBIwkMghA5S8mPoLTZEkkOde/TzSCXwtXQ
f2VgeuKnCEf2Up11AVd8M37fBQs52mN8XSFk4gEJNWg61SwNZAUHIH3J4uWE8ZKZ
/wIpu7Db5hhNAM0XufOlGGwmaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWq4IFQ
LfejIzadebwP/h+9Qiv8MB8GA1UdIwQYMBaAFFKyGZVCnET4p/TsmeUwQIcNbThb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU5RC81RkFCOTcyRTdF
RjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQaW45T3laNVRCQWh3MXRP
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VySVpsVUtjUlBpbjlPeVo1VEJBaHcxdE9Gcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDU5RC81RkFCOTcyRTdFRjYxMUVBQTk3OUEzMkRDNEY5QUUwMi9VcklabFVLY1JQ
aW45T3laNVRCQWh3MXRPRnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwwYe3uhE4YT7agkLwPXFJC8Ljx5gvWJ63zmJ+viiI4RjNku+zXD6F9yLCsBb
YZ5nglyE53qZBOThuyFkf1q/0PRBd53YbJF9lCqHK4J9WfsnkncLJLzxTirLdDHa
1JS7VTjgStRE8g2pKPAAJP9cozsupIidHff3kuFny7t0mwMpWJxG74NTxuLWRV4q
d4XJq+5OCoA47lx5kNMjDucmmHDYEWnmc6gx3NCS/LqokOdsbzWXma8cKIqnsAp0
o+LfCrcdsj8GfHdHA2kXfKu0ZuUMgmxx8WO1wauW1b9wIGt6q7Utqh4o+FDbtL94
sDKmx8g2PUc/0vsUaf4U7ZNgDg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:26:28 2026 by rpki-client