
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier: merrxRS50QhnRJMhXUrJ8T+a5kHjCtIryqPNMh8rDw0=
Subject key identifier: 1C:06:1B:85:60:19:1D:9D:55:53:E3:CF:AD:8C:96:77:55:81:30:2E
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial: 0E3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number: 0DCD
Signing time: Tue 28 Jul 2026 18:05:05 +0000
Manifest this update: Tue 28 Jul 2026 18:05:05 +0000
Manifest next update: Tue 04 Aug 2026 18:05:05 +0000
Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: ECM2aCGZ4svQrfUkJoH/JY7NGoaNaUcwxaeAkiuqeKI=)
2: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
3: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: Ck9MZoOe7ob2C2a2or+Dyfv/jAKPzOkcpTF0nOQQiL4=)
4: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
5: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3642 (0xe3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Validity
Not Before: Jul 28 18:05:05 2026 GMT
Not After : Aug 4 18:05:05 2026 GMT
Subject: CN=6a68ef51-905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:06:a6:09:61:12:14:51:54:eb:95:d5:be:
02:5e:b7:a9:7a:33:2a:dd:cc:4e:b3:0f:e6:61:08:
4b:dc:20:26:04:a2:2f:cd:2a:b1:40:80:f3:f2:24:
1b:b6:6c:af:39:8a:91:ba:d9:83:d4:ff:02:81:9f:
b5:6d:d3:d8:d0:27:8a:b8:0d:5f:f7:3b:d1:0e:8e:
0d:cc:b3:50:fb:66:72:96:80:e3:5a:c5:92:c3:e3:
50:fb:51:94:32:31:82:0d:64:9a:79:27:32:bc:3f:
33:cc:06:cf:82:b0:0e:f2:84:4f:df:f7:2a:96:e0:
e5:e4:e9:b2:8a:a9:40:44:56:3a:dd:a2:91:c9:cb:
bf:31:bf:84:fa:4e:97:2e:d7:cd:cf:a3:e8:5a:01:
11:9e:1f:f6:7b:7d:b7:07:4a:2a:95:e1:33:4e:6c:
01:4c:22:47:85:c1:6e:69:db:99:f1:32:84:2f:7c:
57:10:21:e0:a0:b7:5b:c9:05:5d:18:53:8a:a0:06:
05:23:24:55:bc:c4:d2:14:3f:dc:60:00:c5:54:97:
21:43:7a:ee:5e:6f:3b:f1:57:d9:6d:43:0a:79:a2:
64:24:46:ca:51:59:ca:23:ee:7e:6a:1e:92:e7:71:
9c:0c:1a:64:eb:a1:37:8e:c3:32:d7:cd:ac:01:80:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:06:1B:85:60:19:1D:9D:55:53:E3:CF:AD:8C:96:77:55:81:30:2E
X509v3 Authority Key Identifier:
keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ee:4e:ae:35:e6:d5:76:1a:78:e5:91:3e:3f:80:07:c1:b1:
5c:6a:96:85:4a:8f:35:fe:2d:12:a0:13:ae:5c:9e:d5:dc:4c:
d7:3e:21:1c:93:c0:b2:09:6d:18:de:e4:6c:d0:47:30:51:60:
98:17:85:ae:c2:11:ee:ca:41:ca:e6:a8:7d:ba:c9:5b:bc:ac:
ec:90:c8:e2:c5:a3:b4:41:a6:ae:97:39:da:8e:65:fb:6d:8d:
9b:48:70:57:cc:5f:02:18:40:72:36:16:2d:c2:61:4f:f4:78:
c7:f6:0c:da:67:bc:69:ff:b4:ec:62:e0:79:02:b6:e2:8c:39:
bf:ef:80:23:9e:c5:4c:00:f2:b4:d2:0f:75:43:65:47:9d:4d:
f6:09:dd:a8:30:49:7d:f9:a1:1f:8f:19:20:6a:d3:30:e8:93:
6a:28:39:63:8e:f3:3d:54:8d:ab:66:25:71:79:26:c2:48:25:
8a:a0:f9:85:87:96:57:fe:f1:54:cd:68:1f:6a:58:95:ad:a9:
49:6f:68:6b:cc:4a:14:89:ba:82:0d:d0:60:1c:44:9c:b8:c8:
82:87:c2:8c:08:2c:21:e3:18:0e:dd:16:5b:1c:01:22:c1:05:
70:b7:9b:63:2b:42:40:98:e0:e2:47:a8:ee:48:a8:70:e3:38:
8e:f2:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:13 2026 by rpki-client