
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: 54xuO2pR8tCWGExSJNtLtJC12hxSIKvBfFrCk9Mjrfc=
Subject key identifier: 96:EB:7C:8A:A8:1F:7A:1D:9C:2F:EE:7A:4A:72:8B:E0:22:DE:C2:C4
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 072B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 06F1
Signing time: Wed 14 Oct 2026 22:42:02 +0000
Manifest this update: Wed 14 Oct 2026 22:42:01 +0000
Manifest next update: Wed 21 Oct 2026 22:42:01 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: YExBWD/fTJmgKXbnGdNmdHRsJplufdUbRwMA0JSZ5C8=)
2: CA2056AEA5F911F1863AFD4E4011F970.roa (hash: itjkc0sV7heJhjpLLMb7teKe82pbw3263Tb2aZzAyS8=)
3: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: vY5QoFj5EHYuHnY1WoGJpIuRo8oxFf3pMcROdKUYi68=)
4: 311221F84DDF11F1B04EC87CBC833773.roa (hash: I0GEToVYJ8K9D+Rdoyrx1y5R9bJA2VGV0O6cO0v2MXM=)
5: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: JRKiJJ9AWmFRvC8bzLvB5N74Umbi+4AAyRuytcebbpc=)
6: 03A116B2A53111F1AEF72B144211F970.roa (hash: KNz8Cr2ZY2lOPgvrxVkMGeRTemwZCfXtM04vURqUd9M=)
7: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: WCFojuggE3ZNtWIBN6Mw5rcPm1Wz+bqqQpugJ6sdoRE=)
8: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: vxAnQu8I+FETfsi2yVbOeGtWdoSBCdNqoU43CnDVcmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 18:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Oct 14 22:42:01 2026 GMT
Not After : Oct 21 22:42:01 2026 GMT
Subject: CN=6ad0053a-1da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:7b:de:b3:de:de:ec:ca:b3:0b:b9:9b:04:
59:3a:13:4a:60:88:41:9a:5c:6e:8e:05:5e:59:e3:
c3:6a:ce:2e:cc:ea:e5:af:ce:97:ed:cb:9b:a6:ea:
a3:78:c0:61:a4:9d:2c:e4:11:04:90:cc:91:56:37:
56:6a:c8:d7:85:76:e0:09:67:81:01:f7:f3:e5:c3:
4e:b7:7d:19:d5:42:4c:48:82:bf:04:fe:0a:1c:e4:
31:14:20:3a:bd:ea:16:d1:f3:ff:59:49:c0:9d:d8:
d7:21:58:cf:fc:4d:35:9e:52:36:a6:bd:eb:a3:1f:
74:9d:76:77:3c:33:1f:55:19:64:ac:b2:90:5d:40:
c2:01:70:35:80:4e:31:c7:a6:4e:47:3c:3b:03:45:
b1:7d:17:32:c6:33:4a:72:39:ab:df:3a:05:1e:be:
57:12:8d:12:f7:c6:14:29:3d:8b:a8:fe:5e:d9:94:
0a:e7:33:45:7f:ee:09:ff:25:d4:17:3d:63:74:d1:
7d:2f:b8:bf:73:08:d0:31:57:3b:5a:d4:77:94:a5:
da:46:b6:4e:4b:eb:cf:0c:77:f3:ef:7f:60:41:93:
e9:6c:e2:09:bc:5d:37:39:5a:75:2d:31:92:0e:8c:
22:1d:1b:eb:b6:0f:43:4d:4e:ce:da:5d:e9:a7:5e:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EB:7C:8A:A8:1F:7A:1D:9C:2F:EE:7A:4A:72:8B:E0:22:DE:C2:C4
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:03:30:f8:59:ed:82:fb:22:ea:9c:c3:b1:85:73:84:e7:2c:
ff:f4:10:67:7b:a1:67:f9:37:ad:89:92:95:94:16:a5:65:0e:
22:a4:7b:56:f2:4f:9a:35:38:0a:72:45:49:07:5c:8c:fc:5c:
b1:c9:9d:9b:21:26:0a:b8:d8:1a:de:8e:0e:00:67:bd:f3:89:
30:1b:e8:37:ce:b8:03:eb:f7:71:70:d0:98:99:c7:fb:d6:78:
58:8e:3a:36:84:cd:5b:d9:06:78:a7:77:85:a1:45:c6:df:93:
7b:81:a6:41:4a:54:85:f6:8f:3a:73:e4:af:7c:d4:f3:7d:4a:
ee:48:fa:e8:c1:4b:01:9e:51:c8:b7:f9:5e:d5:dd:90:80:ef:
0e:73:47:ca:c0:75:60:89:76:45:69:ef:59:82:9d:da:f6:96:
65:05:3a:e9:e7:4f:29:f5:ae:f7:c1:c8:a0:f8:bd:a7:64:af:
6d:c3:76:b6:7e:32:8b:cf:f7:90:38:23:1e:11:6a:03:03:75:
d5:94:7e:93:91:d2:ac:66:96:b4:d0:fd:e3:f5:5c:9f:6f:03:
2a:4e:7d:ef:78:aa:7a:a8:7e:73:10:bc:1d:65:f8:54:d4:ba:
5b:8f:9c:6d:44:f3:9f:fe:ea:0e:3e:c1:a5:b6:38:e0:08:2d:
3c:92:0a:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG
MDVCQUYyMTEwHhcNMjYxMDE0MjI0MjAxWhcNMjYxMDIxMjI0MjAxWjAYMRYwFAYD
VQQDEw02YWQwMDUzYS0xZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Qd73rPe3uzKswu5mwRZOhNKYIhBmlxujgVeWePDas4uzOrlr86X7cubpuqj
eMBhpJ0s5BEEkMyRVjdWasjXhXbgCWeBAffz5cNOt30Z1UJMSIK/BP4KHOQxFCA6
veoW0fP/WUnAndjXIVjP/E01nlI2pr3rox90nXZ3PDMfVRlkrLKQXUDCAXA1gE4x
x6ZORzw7A0WxfRcyxjNKcjmr3zoFHr5XEo0S98YUKT2LqP5e2ZQK5zNFf+4J/yXU
Fz1jdNF9L7i/cwjQMVc7WtR3lKXaRrZOS+vPDHfz739gQZPpbOIJvF03OVp1LTGS
DowiHRvrtg9DTU7O2l3pp15SaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbrfIqo
H3odnC/uekpyi+Ai3sLEMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE
MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4
bFZGSjlYWWhHUVR3VzY4aEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0gMw+Fntgvsi6pzDsYVzhOcs//QQZ3uhZ/k3rYmSlZQWpWUOIqR7VvJPmjU4
CnJFSQdcjPxcscmdmyEmCrjYGt6ODgBnvfOJMBvoN864A+v3cXDQmJnH+9Z4WI46
NoTNW9kGeKd3haFFxt+Te4GmQUpUhfaPOnPkr3zU831K7kj66MFLAZ5RyLf5XtXd
kIDvDnNHysB1YIl2RWnvWYKd2vaWZQU66edPKfWu98HIoPi9p2SvbcN2tn4yi8/3
kDgjHhFqAwN11ZR+k5HSrGaWtND94/Vcn28DKk5973iqeqh+cxC8HWX4VNS6W4+c
bUTzn/7qDj7BpbY44AgtPJIKtA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:52:55 2026 by rpki-client