
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json)
Hash identifier: u1eh43RiRR6OzjWWdLAT5mL2Xd9g79faEvb2sUuhgg0=
Subject key identifier: 5A:DD:B5:A0:D1:A1:2A:74:43:1A:25:4A:CB:12:0F:97:90:08:6A:13
Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0
Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
Manifest number: 016D
Signing time: Sat 13 Jun 2026 04:52:01 +0000
Manifest this update: Sat 13 Jun 2026 04:52:00 +0000
Manifest next update: Sat 20 Jun 2026 04:52:00 +0000
Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: C3oshA0P+KpPyP8WWX1fzZOxW4OBRtpouNyyZS4SLns=)
2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: m3Jo8FCeaELT1I3nJBgJYkzF+itVMTxAlpjgG+4EtAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl
rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
Validity
Not Before: Jun 13 04:52:00 2026 GMT
Not After : Jun 20 04:52:00 2026 GMT
Subject: CN=6a2ce1f0-58fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:0a:15:06:c2:02:36:17:d2:ba:c3:fa:35:
a5:1d:c2:de:e7:bb:f3:aa:51:06:3f:1e:ee:5c:17:
27:ec:da:d5:b2:73:2b:40:b7:0e:4b:df:a0:f5:72:
44:33:13:4b:21:42:93:ed:be:1a:f5:1e:23:d9:df:
76:da:fe:61:bf:53:f9:0b:44:f1:5c:fd:06:b2:ed:
c0:c1:3d:ef:87:98:54:05:ea:8f:da:f2:3b:f5:48:
d6:98:21:94:f3:35:1e:c2:98:ce:f8:a3:15:60:d9:
60:a9:e5:fd:df:83:e4:9c:7f:70:83:8a:13:56:29:
3c:c4:ce:63:ff:6d:96:a7:5c:53:70:f0:36:3e:cd:
84:d0:f8:e4:d6:47:66:7c:ff:2a:51:73:26:cd:e6:
79:42:41:13:8c:ca:89:7b:80:1a:da:49:14:b4:a8:
15:8f:67:d9:97:ad:b1:45:43:d6:2d:94:60:a8:cb:
4f:4a:77:7d:88:51:58:9e:50:c4:0d:4f:17:19:46:
77:4e:0a:b0:32:91:e4:eb:3b:4c:27:44:86:41:50:
a3:e6:08:05:2e:aa:e5:80:2c:29:1d:aa:f4:78:f0:
3a:8d:50:83:5b:bf:f1:a7:f0:af:24:40:e6:19:34:
c8:7d:86:54:e3:49:66:2e:51:2f:df:58:64:96:c2:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:B5:A0:D1:A1:2A:74:43:1A:25:4A:CB:12:0F:97:90:08:6A:13
X509v3 Authority Key Identifier:
keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d9:13:bb:5c:6e:b1:96:56:e2:f4:ca:8f:b6:9c:14:b6:7d:
69:c5:80:46:37:ee:77:ea:84:42:8d:33:4e:3d:dc:be:83:4e:
c7:22:01:ff:c2:bb:97:1a:62:6d:92:e9:37:b6:d4:a7:dd:df:
9c:f3:66:60:32:7f:bc:d8:75:97:3c:f7:34:9a:b2:8d:1f:85:
b3:76:c8:76:6c:f1:a3:77:91:28:40:06:9f:0b:48:ad:bd:41:
25:a5:7e:78:53:c8:10:d8:79:74:79:53:dc:ac:60:ef:c1:62:
16:75:31:f2:8c:34:dc:e1:28:a7:98:f7:cb:8c:b4:58:78:00:
ec:45:7a:7b:52:b1:c3:6c:61:1b:40:b0:a9:ef:23:dd:c0:e9:
32:66:5e:24:ae:bd:ef:23:db:6c:58:c3:5d:28:3b:04:1b:da:
01:d2:01:85:e5:2f:06:dc:2b:b6:86:d5:55:07:c9:14:36:12:
dd:b2:ff:29:fc:5f:aa:c0:db:f7:90:28:cb:1b:c4:fc:f8:53:
f6:f6:90:5a:17:6b:c5:9e:cf:c2:6c:7f:30:f7:7f:45:d3:00:
63:a0:c4:40:90:cc:97:bc:99:11:2b:83:c2:57:20:f0:1c:01:
0f:90:2c:13:c8:65:8a:c8:41:ab:16:31:e6:c3:a2:e5:af:2a:
99:2e:be:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:19 2026 by rpki-client