
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
File: u4iGb_vrTN7pUxHmIJ92pQG8G48.mft (raw, json)
Hash identifier: 5q8ghX9DOdswcOu4obEReIoe/v+eS9g6azE9rC5db8s=
Subject key identifier: 25:32:24:C5:98:E1:57:EA:BD:51:69:68:17:9C:31:E3:0D:8E:67:8A
Authority key identifier: BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
Certificate issuer: /CN=A91A9E90/serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
Manifest number: 0E
Signing time: Mon 27 Jul 2026 11:32:03 +0000
Manifest this update: Mon 27 Jul 2026 11:32:03 +0000
Manifest next update: Mon 03 Aug 2026 11:32:03 +0000
Files and hashes: 1: u4iGb_vrTN7pUxHmIJ92pQG8G48.crl (hash: k9nnUKLibZ4LJgK9bN5sz8750NcG9FBsK4zkWhumRrc=)
2: A668211C79AB11F1870FA39595A30FBC.roa (hash: bMn1My/eGVHQu+9YF4NOAoOsKQU7m5hZjyTX5JuRqWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E90, serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Validity
Not Before: Jul 27 11:32:03 2026 GMT
Not After : Aug 3 11:32:03 2026 GMT
Subject: CN=6a6741b3-6fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:a5:c7:c8:67:c2:c3:f7:23:02:63:c9:66:
d5:e0:07:61:af:0b:e6:24:69:a7:50:56:89:de:f2:
91:39:5d:da:4c:fc:a3:c5:b0:8e:9a:b5:04:b5:46:
f7:ee:68:c1:12:a8:ea:84:44:a5:be:1d:9a:8c:b7:
88:91:65:2c:dd:03:3e:a1:d5:30:82:c5:8a:2c:5c:
84:b8:a8:75:af:60:f8:f5:1f:11:c8:f4:ce:b3:53:
2b:83:96:58:cf:6b:c5:a8:a0:9e:5c:ee:0e:99:94:
af:3d:82:bd:f0:52:6b:95:bd:a6:39:8e:83:85:bc:
ce:df:95:b9:dc:a9:fe:1e:63:42:18:ad:c6:e0:65:
58:14:1a:3c:38:4e:02:a5:3c:79:69:0c:bf:3e:78:
2d:5c:de:a9:e8:97:6c:1b:b3:b7:94:17:35:32:03:
dd:fc:22:2d:e2:f9:b3:15:ca:f8:79:31:2e:f9:06:
60:82:9c:44:4b:89:81:89:f8:c5:55:f8:4f:a2:66:
27:fe:49:3f:10:89:da:a8:c8:44:66:90:bc:69:7b:
6e:4c:51:8a:e2:fa:f6:de:c9:e4:7e:18:18:06:0a:
ee:e1:c3:07:73:fb:c9:cd:5f:c7:04:67:50:a3:f2:
63:81:df:86:ef:01:78:ec:8d:dd:29:b1:81:72:5a:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:32:24:C5:98:E1:57:EA:BD:51:69:68:17:9C:31:E3:0D:8E:67:8A
X509v3 Authority Key Identifier:
keyid:BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:aa:41:ff:6c:64:f4:1a:42:4c:99:0d:5e:3c:5a:bd:60:c3:
e5:58:91:0e:9c:fa:bf:d9:a4:b0:f2:88:84:08:06:de:f0:ad:
5f:60:24:c4:02:15:78:f9:e7:cb:e0:ae:e9:65:3e:bf:8b:a3:
6a:9a:e8:a0:e9:1c:34:90:57:b2:cd:69:7c:02:47:24:b1:9f:
74:36:b8:4c:87:20:75:f9:33:22:7e:9c:03:83:fc:45:df:0d:
fa:43:e5:ad:f0:ab:0d:8a:be:01:24:2c:2e:59:15:9d:3f:0f:
14:12:2f:b0:df:50:db:14:b0:29:6e:c0:89:d9:fa:44:cf:e2:
17:0d:c5:57:23:dd:18:73:89:a2:b9:fb:4e:8c:1b:52:68:cd:
ce:aa:d9:aa:cd:d7:0b:04:d0:27:aa:a5:3b:af:39:07:81:f8:
cc:3c:58:9f:39:67:a8:a2:69:19:a6:34:00:7e:f6:7b:e7:fc:
06:02:3c:cd:e9:ef:77:3a:18:2b:1f:74:9c:18:af:88:67:e9:
88:25:27:51:24:e3:30:50:b0:d6:f6:aa:3c:5e:a6:f1:e4:cd:
c0:a9:95:fc:09:a3:85:d3:11:ff:22:63:66:51:87:e1:7a:73:
ff:1b:43:fa:77:f7:e2:f5:1e:08:ce:e0:69:97:c3:6c:2f:72:
ef:3c:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:50:33 2026 by rpki-client