
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: 4a+yzGifb4E7bYF8PqEjIig9axTBvijwIyaC7YwIMVc=
Subject key identifier: 7A:EC:C3:6B:44:BA:CF:82:67:99:F2:DC:8A:B3:9F:4E:02:52:40:31
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 06E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 06AF
Signing time: Fri 12 Jun 2026 22:31:43 +0000
Manifest this update: Fri 12 Jun 2026 22:31:43 +0000
Manifest next update: Fri 19 Jun 2026 22:31:43 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: tFYzKtaYxraeUc04UVQlSPvYPSgfVpsdTqkkaO011zQ=)
2: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: vxAnQu8I+FETfsi2yVbOeGtWdoSBCdNqoU43CnDVcmU=)
3: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: tBhBUhrw0Op7ettMh29/peo+xDDgIQVsQGBwOWayPp8=)
4: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: JRKiJJ9AWmFRvC8bzLvB5N74Umbi+4AAyRuytcebbpc=)
5: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: WCFojuggE3ZNtWIBN6Mw5rcPm1Wz+bqqQpugJ6sdoRE=)
6: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: vY5QoFj5EHYuHnY1WoGJpIuRo8oxFf3pMcROdKUYi68=)
7: 311221F84DDF11F1B04EC87CBC833773.roa (hash: I0GEToVYJ8K9D+Rdoyrx1y5R9bJA2VGV0O6cO0v2MXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Jun 12 22:31:43 2026 GMT
Not After : Jun 19 22:31:43 2026 GMT
Subject: CN=6a2c88cf-667c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:f7:a6:e1:e4:21:f6:24:8e:b7:99:c0:0a:
ac:7a:6b:e0:d6:f3:ca:b0:75:68:19:a1:94:56:c5:
0b:8d:be:85:8b:59:1c:ef:41:94:c6:37:4c:8d:ac:
59:3b:4b:ba:5e:c4:69:78:c3:fe:2d:57:3e:f5:de:
cb:33:05:7b:9c:74:84:5e:da:18:2c:72:b4:8c:17:
89:00:95:06:83:ee:15:72:4a:62:87:ee:9f:24:50:
ec:3d:ad:d7:b0:ee:6c:df:1a:46:cc:2e:8b:a7:5a:
ac:e8:d0:3b:6b:5a:56:09:b7:6c:41:d0:7b:9a:3b:
ea:97:56:63:06:d7:fa:37:7c:cc:e8:ce:16:73:37:
1b:c7:04:8b:7c:8e:f2:8b:d3:bf:0f:6c:fd:01:5d:
15:ac:b8:8c:d2:0a:a6:85:3b:b7:b5:55:7f:5c:bb:
cf:99:41:1a:87:34:22:c5:fc:0d:f5:89:b2:21:de:
e9:02:3d:3d:42:4c:4e:92:b0:05:4c:aa:57:79:af:
75:53:36:f1:00:ea:a4:2f:de:dc:69:24:d2:3a:af:
21:dd:7b:50:8a:5a:dc:b1:37:60:9a:d1:3e:dc:cf:
01:86:1a:bf:c8:d0:e3:e7:8a:68:2b:9f:19:97:41:
0a:14:63:3c:77:5f:b2:5c:59:6c:b2:ee:25:24:46:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EC:C3:6B:44:BA:CF:82:67:99:F2:DC:8A:B3:9F:4E:02:52:40:31
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e2:c0:a4:0d:4f:17:af:40:a9:58:50:c1:67:77:ad:f5:30:
52:65:49:2e:4d:5f:ee:36:c7:42:4c:31:4f:90:f3:07:e6:af:
33:b8:1f:10:bd:2b:73:c5:76:b7:d6:a4:98:c1:ee:ff:04:5d:
71:30:b5:6e:31:de:7e:e3:03:cf:b2:81:77:6e:b9:6f:9b:ff:
e2:b4:6c:07:ed:bf:07:d5:c9:5b:ad:cf:76:d0:6e:b3:ac:fc:
98:c0:a1:fd:fc:40:3a:b1:54:0d:7f:13:e0:34:02:af:6a:fb:
57:3f:ee:de:5f:46:b7:6b:d1:50:46:9a:57:5f:bb:f8:99:d3:
ad:0e:b4:23:4c:c5:b1:05:23:be:3d:6f:85:01:20:3b:77:c0:
fe:09:ab:3b:9e:21:e5:8a:95:28:e1:83:20:f6:59:9c:b3:3f:
cf:f5:48:66:d5:67:21:99:c3:bb:56:14:46:7b:c8:39:5c:b8:
7e:a8:c9:89:b1:d7:60:17:6c:27:c5:02:69:15:77:0a:88:52:
47:80:a9:c2:ef:03:ca:e6:bc:80:24:e2:31:ce:df:33:05:c2:
58:39:06:8a:2e:2e:23:8e:64:f6:a8:b5:ae:95:50:21:de:ab:
53:56:68:69:f9:f8:6f:94:16:8f:2e:0b:6b:7b:96:7d:f9:91:
45:78:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:37:57 2026 by rpki-client