
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier: qdksWc9cLQdXdRwzd0wAOLsJMArmuhLJ4XmqQmgu3+Q=
Subject key identifier: B3:40:3D:4A:6B:87:8F:0A:66:AD:95:E9:BC:9C:58:B4:97:09:F8:1A
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial: 0E57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number: 0DEA
Signing time: Tue 22 Sep 2026 17:48:42 +0000
Manifest this update: Tue 22 Sep 2026 17:48:42 +0000
Manifest next update: Tue 29 Sep 2026 17:48:42 +0000
Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: G/sGYttXZWbQjA2vKW6LKsQlZFxBqCrgJCO94lRuS4M=)
2: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
3: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
4: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: Ck9MZoOe7ob2C2a2or+Dyfv/jAKPzOkcpTF0nOQQiL4=)
5: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Validity
Not Before: Sep 22 17:48:42 2026 GMT
Not After : Sep 29 17:48:42 2026 GMT
Subject: CN=6ab2bf7a-75a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:c6:6b:a9:6e:03:93:b7:15:11:d4:b2:29:
c0:8f:71:b3:e7:ec:5b:8a:89:82:30:f7:b8:58:5a:
f3:d9:39:6e:0e:22:ec:ee:3e:17:12:f8:1e:6d:40:
02:34:bd:5f:f5:89:c3:af:40:31:ff:d7:ac:df:e5:
3d:e5:57:bb:fa:95:c6:c3:ca:61:6c:9d:4d:ce:86:
13:cd:41:bf:1b:4e:1b:61:fe:70:90:ef:3c:b0:1d:
ef:96:68:88:69:01:95:31:7d:0d:99:ae:62:76:28:
2c:a0:6d:8b:4c:36:b7:24:28:3f:35:90:c3:2f:c5:
df:4b:ba:5e:a1:5f:c1:f0:6f:1e:be:f9:11:99:2b:
12:ff:d4:37:d4:b3:ce:ba:4a:ad:e1:94:0c:91:04:
4f:c2:56:09:03:66:d5:94:8b:a4:ec:fd:35:72:cc:
cc:cd:1a:9f:70:19:f9:80:98:c5:ba:1a:bd:c6:ee:
d5:a8:c2:66:3a:37:ea:46:db:69:d6:45:23:b4:55:
e9:fb:11:ee:54:bc:4c:12:66:08:39:ca:72:d3:f2:
e5:b9:bb:99:15:65:d8:74:06:8d:3d:f6:b3:9c:f7:
5a:75:74:26:0d:44:a7:d3:0e:e7:cb:6d:6f:b3:a3:
69:93:d2:7d:28:3d:9e:32:67:30:87:c9:ad:21:a1:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:40:3D:4A:6B:87:8F:0A:66:AD:95:E9:BC:9C:58:B4:97:09:F8:1A
X509v3 Authority Key Identifier:
keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:80:81:ec:aa:63:53:be:1b:94:a5:23:f1:72:73:31:17:95:
17:34:53:cd:99:e7:23:c7:da:be:6e:96:f8:70:24:fc:71:80:
4f:af:a4:ab:3e:54:25:67:99:1c:99:7d:06:d4:4d:c5:77:f0:
1f:2f:01:1c:1b:79:27:6d:18:22:f2:7e:b9:60:c5:35:25:13:
58:69:94:46:cd:05:d3:b0:34:41:31:8d:4e:ca:09:17:95:7d:
5e:b0:ae:9a:f7:0c:73:91:5e:83:50:28:eb:0b:27:82:02:dc:
d1:6a:f8:ee:fd:7b:cb:80:d4:9e:80:43:3d:3c:65:69:a9:04:
67:4a:26:19:4d:15:31:9d:bb:71:9b:a6:79:5a:a7:61:5f:bb:
d7:b6:a1:68:f1:2c:f9:f0:ed:01:df:0b:20:8a:33:94:23:ea:
ed:0e:72:20:1f:f7:44:e9:96:29:e2:fa:14:2b:8f:fc:3d:c3:
4c:1d:bd:09:47:61:b6:e4:65:d3:56:56:1d:76:a5:35:dc:74:
f2:86:18:2f:52:22:9a:61:ef:89:34:33:f5:f1:21:12:6a:ff:
9a:a8:06:e3:19:29:ac:a9:36:81:4c:3e:79:4d:47:c2:57:2d:
cf:05:40:93:75:f8:55:8f:7e:6c:74:0a:ff:bc:9f:ca:f3:10:
16:aa:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:23:33 2026 by rpki-client