
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier: gVDnNZgGDR0pbSvGYHRoMgMpZJM9DX0hLJWqnBDNc/0=
Subject key identifier: E5:56:9B:AA:78:3F:FC:9F:97:2B:0E:27:25:1A:18:34:2E:33:E3:A4
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial: 060B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number: 05FD
Signing time: Fri 12 Jun 2026 22:56:01 +0000
Manifest this update: Fri 12 Jun 2026 22:56:00 +0000
Manifest next update: Fri 19 Jun 2026 22:56:00 +0000
Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: /n2UvJzi+Z+us35mkF1b+XHfEcM5oHIa4tDACS5pjlI=)
2: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: n7blhtr8CeB1GQILH2tbTNGZrE0mtz4/kPdd9dFJxPM=)
3: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: 3Myni48C8MqbnkMOucThNgI8mHbpIgv3RcenlXVut6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1547 (0x60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Validity
Not Before: Jun 12 22:56:00 2026 GMT
Not After : Jun 19 22:56:00 2026 GMT
Subject: CN=6a2c8e80-68b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:92:98:3f:5c:73:91:8c:a6:6b:be:e9:c7:
b1:50:0a:96:76:05:a3:f9:eb:68:f2:2c:38:97:85:
d5:42:11:dd:8d:88:3a:4b:ce:1d:9c:f1:b1:40:f5:
13:e6:44:07:be:90:8c:6c:48:9a:41:f4:55:8b:77:
c9:da:fb:fa:cc:d6:2e:80:64:73:f7:a5:63:9e:9d:
ea:37:a6:a9:f6:1b:1a:49:48:e7:a1:8a:82:8e:e2:
e4:6c:7c:c7:85:36:8f:98:d6:db:3c:39:6f:81:09:
89:5c:16:e3:2e:d3:9b:e6:27:6a:33:10:e4:cb:52:
36:93:6e:cc:93:e1:19:da:c9:ec:44:c4:ed:3c:02:
de:1a:8f:61:50:cd:1f:57:25:c4:c7:e4:b3:1d:59:
65:93:e5:d7:6a:39:dc:f5:3e:73:23:11:fd:ad:1b:
32:97:90:6a:14:4a:77:59:aa:90:9a:88:d2:cc:0a:
a7:41:0d:11:1c:67:27:ea:c3:7b:7d:d3:f3:35:bc:
0c:3e:91:ff:7e:19:15:75:55:53:dd:0b:6b:e5:10:
ec:73:80:1e:ad:fb:96:c8:6f:36:9b:53:8e:c4:52:
3c:aa:67:d2:eb:16:3d:4f:87:75:cd:fc:45:d2:5e:
8c:31:b4:3d:ab:d7:90:82:5e:f1:bf:ca:07:15:44:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:9B:AA:78:3F:FC:9F:97:2B:0E:27:25:1A:18:34:2E:33:E3:A4
X509v3 Authority Key Identifier:
keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ae:04:d2:e4:83:74:2b:25:01:4b:55:a9:8c:65:33:6e:f7:
bf:2c:41:5e:b1:11:0d:bc:8b:d4:1e:20:03:8a:74:1c:93:29:
52:a3:6f:3b:f1:e9:e1:11:32:ca:ec:b7:0e:43:c2:ff:0a:c6:
d4:9f:84:da:34:2f:2e:f0:0e:a1:b3:da:84:78:60:2d:02:48:
84:36:e4:8b:51:42:e8:88:6c:a1:b2:38:9a:f3:b1:60:34:6b:
1e:19:dc:bd:f5:63:03:04:67:ef:8c:90:f2:15:16:ac:9c:20:
3a:51:9f:44:07:a4:db:52:01:31:65:49:87:4a:96:80:d6:77:
c6:39:18:3c:b1:ff:7e:64:70:a6:00:71:dc:37:c4:80:85:64:
d7:49:ca:4d:cd:5b:ef:f4:67:0b:c2:ce:6f:c3:3a:5a:01:51:
36:3a:32:06:12:85:28:75:d5:82:0e:0b:b5:28:fe:e9:19:7b:
a9:80:75:58:9a:07:c6:84:3f:77:46:cd:53:57:84:6c:53:80:
31:a2:ee:0b:1e:28:0f:30:f3:d0:97:52:07:dc:c6:4a:a1:6c:
70:b1:85:d0:d9:5a:f7:e4:78:a6:40:85:a5:a5:5e:61:37:38:
38:5d:3d:00:50:5f:a8:80:48:c1:34:a2:8c:94:37:2f:c2:d3:
1a:62:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:16 2026 by rpki-client