
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
File: U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json)
Hash identifier: HGZ2BH0v/S9HJFRRSAnjAEUyezvtPu8bnfYnC4DkvFo=
Subject key identifier: CA:D8:8D:87:60:AB:5C:C6:80:3F:CD:5D:95:17:EC:DD:6B:3B:ED:7B
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
Manifest number: 05FA
Signing time: Fri 12 Jun 2026 22:58:06 +0000
Manifest this update: Fri 12 Jun 2026 22:58:05 +0000
Manifest next update: Fri 19 Jun 2026 22:58:05 +0000
Files and hashes: 1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: TuV7G15eTaYFCyuUG3e03Az1EuCmOFcSKN8+ByYmMHg=)
2: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: NXzX7R7NLEazsVeUoaLWbp54rjvi9QQud2skYKW4OZQ=)
3: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: +8k4rfDonzqcIXzrPnc9G+NWKEIwjetXPPpI12xDWO0=)
4: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: O5HnlLR1hWWyTNRUt4LdbaUFp1yGwksal5ksV0pwNV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Jun 12 22:58:05 2026 GMT
Not After : Jun 19 22:58:05 2026 GMT
Subject: CN=6a2c8efe-a70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:69:51:83:6a:fb:d8:b8:38:b0:64:ca:54:
d4:be:77:68:f9:32:89:5d:d8:00:9f:09:7b:dd:c8:
a9:09:1e:80:f3:30:d2:07:aa:bc:0c:92:44:a9:c1:
57:8b:9f:96:bf:12:e7:e1:f7:b8:7e:0e:6b:f5:f0:
c1:23:bc:9e:91:85:b0:04:40:d1:02:af:94:2e:27:
df:ef:ee:3d:b8:7a:58:f6:55:e5:ab:ef:68:b8:e6:
f4:6f:65:f8:9c:95:97:4e:4f:7b:09:cc:a5:39:df:
61:a2:00:f0:36:10:bd:23:00:d7:b8:34:07:5a:b5:
89:f8:09:54:dd:e5:ff:db:44:1c:02:7f:dd:dd:8d:
78:29:9e:18:c9:8f:63:56:13:7f:6e:9e:9b:2e:9c:
72:b5:64:86:00:12:83:34:09:72:cb:08:a1:d2:c8:
e5:21:8b:d6:d5:d8:22:9b:17:42:ac:5e:51:15:b8:
a2:1e:43:92:5a:2e:8c:98:33:45:e0:3f:dd:9c:0c:
20:9c:4f:0e:17:e5:11:31:f0:6e:76:74:00:69:ba:
9f:17:92:3f:8d:bb:e9:b7:12:fa:10:b4:62:05:92:
ad:3f:8f:61:24:29:c8:46:95:b8:fa:2a:81:d5:35:
dd:0f:90:23:cc:39:6a:73:09:f7:0a:30:59:45:63:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D8:8D:87:60:AB:5C:C6:80:3F:CD:5D:95:17:EC:DD:6B:3B:ED:7B
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:52:7a:04:b3:04:91:2f:8b:bf:93:d9:37:38:c2:df:5d:b3:
c8:d3:85:05:ec:a6:09:1b:8d:78:37:9b:88:5f:35:3d:c2:12:
44:e1:17:24:27:db:47:b7:36:04:20:9d:65:67:11:ff:d8:31:
06:c2:f1:78:71:a8:97:cc:ab:be:28:e3:6e:10:d0:63:c8:28:
bd:b5:70:12:b6:d0:5b:0b:a3:8f:00:63:0f:34:db:ab:47:37:
da:12:36:f2:74:a5:ea:c1:d8:36:ef:7f:63:a7:34:c6:a9:8c:
49:01:35:9b:2d:23:5e:62:86:7c:72:bc:06:cb:f2:c5:9a:7c:
bd:2e:23:2b:e1:b5:2c:85:98:45:df:ce:20:66:ac:74:7f:89:
9d:0b:e6:8d:e0:89:c7:80:81:91:34:08:7c:02:80:00:7a:f3:
d9:e0:8b:91:aa:55:66:d4:e3:ed:af:c3:9b:74:78:ca:52:b3:
b5:b0:aa:c5:17:12:4d:da:45:c3:83:3e:3b:a9:35:de:97:3f:
78:27:b6:40:3a:34:68:e2:fb:1d:1b:92:a3:39:b2:24:7a:eb:
df:23:af:60:8b:a6:b7:59:c4:0e:e2:b0:d1:16:6c:b7:2a:6a:
fe:7b:8f:30:77:e9:01:ec:b0:4c:3c:5e:c6:86:83:e3:24:35:
d3:87:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:31 2026 by rpki-client