
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json)
Hash identifier: pA+/EeqIPhhM0i7XQC9AlL7Y6rGczY7Q1wDO5JoFGyg=
Subject key identifier: C5:52:07:B4:9C:E9:D9:15:B4:8D:96:D2:BE:1E:D3:74:CA:C6:96:EC
Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
Manifest number: F7
Signing time: Sat 19 Sep 2026 06:24:48 +0000
Manifest this update: Sat 19 Sep 2026 06:24:48 +0000
Manifest next update: Sat 26 Sep 2026 06:24:48 +0000
Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: qlj9k1nhJhvG3SUuxH6wuCdnexznmHquM2F7wezW1Ys=)
2: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: C4Pv7/ZcXpfnIfO2ZraIiYNBzqr9mEhRQSdvTyPYip4=)
3: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: p+/O/N2cnrVHm7O6YEqosl6vnHVBYYkRwfwZCmypB2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl
rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Validity
Not Before: Sep 19 06:24:48 2026 GMT
Not After : Sep 26 06:24:48 2026 GMT
Subject: CN=6aae2ab0-019d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:e4:04:b3:72:dd:5a:f2:0a:3a:9b:c2:53:
d7:b1:5a:64:2b:9c:5f:22:de:89:76:bf:98:9d:d3:
d2:38:5a:55:a0:af:e8:0f:5b:9d:be:09:29:62:73:
62:ac:91:16:17:66:11:98:7c:35:91:eb:10:39:86:
8d:33:12:17:d1:da:19:b9:e4:47:d3:53:29:be:c7:
71:ef:ba:ec:80:1c:e9:08:9a:77:f1:f2:5a:10:39:
2d:7c:85:ce:ce:3f:55:1e:3e:c7:f5:c9:59:fe:1f:
64:a4:d5:89:bd:ff:f3:43:0b:b9:41:92:ea:79:eb:
eb:0d:c7:95:61:99:03:c2:01:78:7c:47:28:6b:5a:
2b:cd:a9:33:1a:3b:d3:d4:df:63:a5:16:f5:a8:14:
9d:37:09:61:cb:ff:52:2d:56:23:b1:f2:f8:b6:c3:
28:50:42:97:86:aa:09:7f:29:55:8b:26:65:88:5e:
1d:7b:9a:a6:b7:80:a0:e1:9d:4d:da:c8:91:b4:cd:
0f:5d:41:8a:00:ec:48:d3:8c:11:6a:90:bc:73:9d:
b8:c6:52:0d:f5:ef:da:e8:5e:35:5b:7f:e3:85:60:
93:e6:05:1e:36:b2:68:39:04:b8:3b:f2:f4:e8:57:
4b:d1:81:c1:98:58:ef:c7:e0:70:54:f4:f6:2c:76:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:07:B4:9C:E9:D9:15:B4:8D:96:D2:BE:1E:D3:74:CA:C6:96:EC
X509v3 Authority Key Identifier:
keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ca:fd:67:c6:65:00:b4:fe:07:11:92:f3:ef:d6:5c:90:75:
e4:9c:d4:f8:ef:a3:cd:2d:a6:cb:77:7d:2d:74:2a:f3:ef:f8:
d0:b4:e1:56:e8:76:80:98:e5:1d:37:49:9e:3e:68:cd:db:47:
a4:ff:a8:07:1f:f8:ae:19:cb:72:34:9a:4d:40:ad:65:34:a0:
67:4f:2c:63:08:2c:fc:bf:e6:43:cb:fe:f4:43:b1:02:a1:40:
60:c5:cf:d3:92:f6:fc:2f:6f:c1:f9:05:25:e6:ec:6d:a1:18:
cf:c4:2c:95:07:c8:80:a6:a1:3e:12:11:b0:49:c7:77:a5:65:
5f:77:8d:d5:54:eb:22:bf:cd:c4:8e:15:39:67:69:57:61:65:
ef:28:9e:6c:7a:59:dc:1a:0f:d6:35:7a:d8:32:52:5b:25:6c:
38:3e:e7:3b:57:36:01:54:03:b0:70:fb:22:12:12:61:d6:99:
2e:36:ee:c0:6d:a4:a5:65:4f:9e:f3:3f:36:66:83:8e:07:91:
2b:8b:71:97:43:12:53:56:1e:ac:96:49:12:bc:03:6a:83:23:
cd:a4:9d:13:cb:d4:a3:e6:40:f4:2d:60:07:65:8e:31:bb:0d:
be:31:e1:06:d7:83:7e:e6:c5:3d:0f:d3:ff:ac:9a:2c:04:1b:
50:99:b2:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I0RTkxMTAvBgNVBAUTKDUwQUU3MTZGM0QzNkI5QkVFQUUyN0YxMDA2OEY5RTM2
QTIzM0FCOTEwHhcNMjYwOTE5MDYyNDQ4WhcNMjYwOTI2MDYyNDQ4WjAYMRYwFAYD
VQQDEw02YWFlMmFiMC0wMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAycHkBLNy3VryCjqbwlPXsVpkK5xfIt6Jdr+YndPSOFpVoK/oD1udvgkpYnNi
rJEWF2YRmHw1kesQOYaNMxIX0doZueRH01Mpvsdx77rsgBzpCJp38fJaEDktfIXO
zj9VHj7H9clZ/h9kpNWJvf/zQwu5QZLqeevrDceVYZkDwgF4fEcoa1orzakzGjvT
1N9jpRb1qBSdNwlhy/9SLVYjsfL4tsMoUEKXhqoJfylViyZliF4de5qmt4Cg4Z1N
2siRtM0PXUGKAOxI04wRapC8c524xlIN9e/a6F41W3/jhWCT5gUeNrJoOQS4O/L0
6FdL0YHBmFjvx+BwVPT2LHZkqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVSB7Sc
6dkVtI2W0r4e03TKxpbsMB8GA1UdIwQYMBaAFFCucW89Nrm+6uJ/EAaPnjaiM6uR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjRFOS9EMzg2MTM0NDQw
RUUxMUYwOUU5MzM1MUNDNEY5QUUwMi9VSzV4YnowMnViN3E0bjhRQm8tZU5xSXpx
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjRFOS9EMzg2MTM0NDQwRUUxMUYwOUU5MzM1MUNDNEY5QUUwMi9VSzV4YnowMnVi
N3E0bjhRQm8tZU5xSXpxNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF8r9Z8ZlALT+BxGS8+/WXJB15JzU+O+jzS2my3d9LXQq8+/40LThVuh2gJjl
HTdJnj5ozdtHpP+oBx/4rhnLcjSaTUCtZTSgZ08sYwgs/L/mQ8v+9EOxAqFAYMXP
05L2/C9vwfkFJebsbaEYz8QslQfIgKahPhIRsEnHd6VlX3eN1VTrIr/NxI4VOWdp
V2Fl7yiebHpZ3BoP1jV62DJSWyVsOD7nO1c2AVQDsHD7IhISYdaZLjbuwG2kpWVP
nvM/NmaDjgeRK4txl0MSU1YerJZJErwDaoMjzaSdE8vUo+ZA9C1gB2WOMbsNvjHh
BteDfubFPQ/T/6yaLAQbUJmyXA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:04:39 2026 by rpki-client