
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier: 9wyvNVDPKct8NZogcinUfV+mn2/CF7XbOnriuxg2o+k=
Subject key identifier: 36:7E:A7:82:BD:33:1B:60:C4:6E:8C:A4:A3:46:CD:14:13:C6:36:89
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial: 05EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number: 05E0
Signing time: Thu 16 Apr 2026 22:53:27 +0000
Manifest this update: Thu 16 Apr 2026 22:53:27 +0000
Manifest next update: Thu 23 Apr 2026 22:53:27 +0000
Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: tskIeWfqo+Y2zbg3EPtZywsMQ7hr/O0kw9xJuDoQpYM=)
2: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: n7blhtr8CeB1GQILH2tbTNGZrE0mtz4/kPdd9dFJxPM=)
3: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: 3Myni48C8MqbnkMOucThNgI8mHbpIgv3RcenlXVut6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1518 (0x5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Validity
Not Before: Apr 16 22:53:27 2026 GMT
Not After : Apr 23 22:53:27 2026 GMT
Subject: CN=69e16867-5193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:9c:23:c0:73:2e:2d:e3:fa:75:a4:a8:c4:
2e:9e:b3:dc:10:9f:2f:0e:eb:5d:48:08:90:83:d4:
47:a2:09:48:00:14:d3:8b:c1:a5:89:7d:1d:8d:78:
43:15:70:06:2e:32:6a:fd:0f:18:02:5d:22:44:03:
45:97:52:67:a8:94:29:d5:1d:8d:17:23:c6:6b:42:
d2:79:b8:1e:54:71:3c:1e:ef:ff:86:49:ed:36:93:
54:7f:85:ab:c8:1b:82:d0:46:70:5e:49:aa:a4:bb:
f0:cd:40:aa:59:c9:64:fa:a5:82:e3:a0:bb:52:25:
72:39:fa:22:27:6e:7a:69:75:d9:a0:6d:df:14:2d:
a8:04:ef:1b:86:3e:19:55:50:7d:bb:92:a8:09:ba:
2f:81:34:95:ae:18:16:12:fb:34:fc:bd:24:ff:bb:
2c:c3:9d:d4:04:64:e7:49:18:fe:38:ff:cd:95:31:
1e:66:fa:c6:b5:4f:6e:09:36:62:3d:58:f5:01:62:
2c:40:83:9c:b3:bf:06:ef:4e:1d:99:70:40:e1:d5:
97:31:2f:27:18:41:1c:52:a2:8e:35:6f:28:ec:39:
c1:73:68:f4:5e:78:a7:13:1a:bd:80:05:d9:dd:13:
ba:b4:a7:55:3a:45:89:51:8a:ce:21:2d:d8:a6:4f:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7E:A7:82:BD:33:1B:60:C4:6E:8C:A4:A3:46:CD:14:13:C6:36:89
X509v3 Authority Key Identifier:
keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:19:c2:1f:08:88:f5:c0:f1:86:74:25:5b:e0:9e:73:e8:bc:
66:da:5c:f0:49:f9:af:a8:cc:b2:65:4a:be:03:0b:b8:59:20:
f8:d8:24:45:09:07:50:4e:5f:86:6d:01:cd:ed:72:73:a5:6b:
66:d7:ad:8b:d6:8a:02:77:ff:07:a7:fa:62:35:ac:b8:53:bf:
4f:fc:11:24:99:1e:4e:9b:cf:16:ba:fd:9c:b9:d0:ea:00:d6:
8e:26:15:28:8f:71:a3:0a:c8:5d:e6:0b:ca:be:31:f9:c7:52:
9a:74:df:f4:9f:cc:2c:10:e7:2a:ca:3b:bf:c8:9b:eb:d5:d7:
61:8e:df:3c:6d:fb:1d:31:6a:2d:9a:c5:a0:1f:7c:b7:c7:03:
4d:de:87:91:58:e5:78:c7:df:87:7a:e1:5c:10:a4:4e:2b:7a:
ec:7f:6a:6d:48:e6:3e:fe:24:d5:24:d3:33:da:94:41:77:45:
99:d0:88:06:ff:5b:03:d3:d2:ac:b5:9c:f7:bb:7c:53:e4:ca:
4b:d8:95:eb:d3:07:67:89:26:48:0e:dd:e4:7f:20:b2:17:b9:
ed:e4:c4:0c:1f:65:86:a7:f5:32:92:88:8b:ba:0c:4b:62:2d:
55:15:04:ea:fc:fd:71:ac:f9:7b:32:40:1d:7a:bf:7c:6f:06:
fa:d4:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:58 2026 by rpki-client