
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
File: u4iGb_vrTN7pUxHmIJ92pQG8G48.mft (raw, json)
Hash identifier: r19k33SgE5vH4XPKZCF8t3c1HXjvuhenFpGYtB6djgM=
Subject key identifier: 84:6F:7D:17:E3:8D:BF:92:8F:1B:D6:75:CB:BB:BE:50:05:E7:F3:20
Authority key identifier: BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
Certificate issuer: /CN=A91A9E90/serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
Manifest number: 35
Signing time: Sun 11 Oct 2026 09:17:48 +0000
Manifest this update: Sun 11 Oct 2026 09:17:47 +0000
Manifest next update: Sun 18 Oct 2026 09:17:47 +0000
Files and hashes: 1: u4iGb_vrTN7pUxHmIJ92pQG8G48.crl (hash: 0z9HeP8R9742opUnGCkZMIaqUM25x7fj///me3LwsQ0=)
2: A668211C79AB11F1870FA39595A30FBC.roa (hash: bMn1My/eGVHQu+9YF4NOAoOsKQU7m5hZjyTX5JuRqWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E90, serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Validity
Not Before: Oct 11 09:17:47 2026 GMT
Not After : Oct 18 09:17:47 2026 GMT
Subject: CN=6acb543c-7fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:cb:e0:8c:58:f4:77:94:8c:67:ba:ec:de:
75:ae:33:ed:d1:f7:1a:82:53:16:75:e7:24:12:02:
4e:cf:3f:a4:e6:20:e2:4e:4e:c7:15:1a:99:9f:5c:
5b:fb:49:74:28:b6:59:10:45:36:7b:e6:2f:98:17:
25:b9:8a:b9:40:36:26:e3:1f:1c:2f:60:0d:fa:9d:
d6:b9:51:af:0e:70:9c:5a:18:6e:23:3a:b1:f9:c1:
33:c3:8a:9d:36:f6:90:72:83:12:1e:a8:20:f5:6f:
6b:bf:73:c5:b0:69:c1:d7:5e:be:1e:de:57:82:0b:
65:c2:25:68:14:33:11:75:26:fa:1d:ab:9e:1c:27:
f6:bd:44:e0:8c:d6:9d:15:18:0c:b2:83:8a:cb:ec:
e9:91:1f:97:04:a7:10:bf:ca:d6:87:3c:76:44:65:
dd:f5:66:bf:f5:df:65:5b:c8:f3:a1:88:15:ae:53:
cd:c1:41:94:11:93:a7:7f:42:88:79:15:fe:53:b2:
c0:fe:ed:6b:15:b5:a5:2f:67:be:e1:02:40:a3:2f:
68:b4:61:97:d9:f3:b2:9c:e2:e0:17:9c:43:a5:37:
28:99:ee:64:7d:a2:a1:c8:7f:04:d2:c2:e8:10:75:
8a:32:d6:a9:77:93:e9:e4:7e:ea:14:fc:3b:5f:e1:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:7D:17:E3:8D:BF:92:8F:1B:D6:75:CB:BB:BE:50:05:E7:F3:20
X509v3 Authority Key Identifier:
keyid:BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:ea:ff:70:fe:72:2b:10:ac:fd:1b:58:03:78:95:2b:bc:39:
89:d8:8e:46:98:ff:2b:c3:c6:20:3b:be:62:f1:e3:0f:0a:7f:
c8:c9:81:5d:6b:10:a0:44:a9:25:13:b4:6a:f1:05:88:66:c8:
70:46:a8:2c:8b:cb:2f:f9:85:6a:34:0c:af:f9:62:de:08:c5:
d5:f0:6a:18:cd:ef:1a:b6:a3:51:e9:34:1f:89:e1:23:93:a1:
03:7a:c0:5d:9e:eb:ef:97:49:1b:89:f3:2b:43:81:5a:f4:46:
16:4e:39:47:dc:9a:f5:4b:03:3e:ec:3f:0b:1c:52:26:56:d6:
2c:2e:29:d0:72:53:db:df:a3:43:44:cd:3c:84:d1:2b:b2:31:
1b:8c:4b:09:ff:f0:58:b7:c8:28:49:a1:f4:c3:6a:dc:52:6a:
6b:be:47:bb:b4:d3:3b:c0:a3:5b:a7:73:76:87:dc:65:2e:5f:
a9:e1:eb:ad:f1:49:dc:93:f7:60:a5:be:ad:f5:b9:7b:73:8a:
da:fa:10:00:af:c3:6d:60:68:70:6a:50:f6:ce:c1:15:72:27:
70:d4:b4:7e:af:ca:3b:60:8f:b7:35:01:f4:aa:7d:36:68:7c:
6d:da:7f:68:2b:9f:6b:97:53:a0:b2:d0:5d:88:fb:75:65:80:
a3:be:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:54:03 2026 by rpki-client