
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json)
Hash identifier: QSEDtVSEr4o6CuFrkzqHKWmp7mlmaJpp61IaBwP2py0=
Subject key identifier: BC:BF:14:AF:E4:30:5B:BC:BC:77:06:17:DE:6B:49:FE:1E:48:8F:37
Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
Manifest number: 014E
Signing time: Fri 17 Apr 2026 04:53:45 +0000
Manifest this update: Fri 17 Apr 2026 04:53:45 +0000
Manifest next update: Fri 24 Apr 2026 04:53:45 +0000
Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: xCQI1PWzsc4zsirUvwm0hH+nRbdYHNsss1Gp7DdBeg0=)
2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: v94QlaW9ykb22h9/dU1Akauxi32ibsxNe0TAunHo/kA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Validity
Not Before: Apr 17 04:53:45 2026 GMT
Not After : Apr 24 04:53:45 2026 GMT
Subject: CN=69e1bcd9-003c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:e0:00:13:ab:f7:2c:35:8b:37:39:8d:dd:
7b:d5:bb:c3:06:c3:5b:1d:21:2c:99:70:90:de:07:
3e:59:6d:85:34:1a:da:ac:81:e1:ba:52:6a:f3:6a:
2c:ce:39:05:28:df:65:50:c8:54:12:42:08:ae:33:
69:12:7a:e9:fd:c8:dc:64:0d:56:df:ad:18:89:2a:
ed:02:a5:7b:82:ee:f1:7d:72:31:9f:f0:e7:a1:ff:
bf:25:e5:a9:9f:2f:93:0a:fc:28:e9:31:13:7b:a0:
ba:38:9e:8f:36:95:53:bc:96:55:6b:b0:65:df:e9:
05:f6:04:27:f1:7c:86:64:1a:f2:6f:65:a1:3c:50:
66:02:45:87:88:b7:db:3f:c0:d7:58:a3:3b:c9:3c:
f6:c7:df:b8:59:f5:9d:0b:4e:70:d1:01:8f:49:ad:
83:ba:a6:a6:11:89:35:63:84:0c:d4:05:9b:a7:fb:
12:ce:eb:2a:26:68:2d:ee:7a:d4:c4:31:c1:93:60:
eb:e4:8a:5d:0e:75:8f:1c:b1:d9:9c:09:7d:02:22:
52:a2:a1:02:29:c0:e6:a5:b1:7a:86:6b:ef:33:aa:
f7:8b:5b:94:db:c6:43:7a:a6:e1:ba:14:3f:ea:fb:
59:5b:14:23:84:5e:39:2c:85:95:a3:cd:a7:2d:60:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:14:AF:E4:30:5B:BC:BC:77:06:17:DE:6B:49:FE:1E:48:8F:37
X509v3 Authority Key Identifier:
keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:7f:a3:c0:7a:1d:fc:b2:db:2c:07:1f:76:44:13:35:cf:b8:
3f:35:b6:ff:74:2e:77:84:95:0f:e9:93:60:05:cd:e4:bb:98:
fa:a1:16:75:cd:6d:c9:38:ad:bc:88:be:0b:0f:1b:6c:ee:5b:
06:fd:ea:45:1b:79:96:56:cf:6c:8e:52:77:82:6c:65:dd:c0:
4d:be:99:dc:19:a9:0f:df:b8:ae:91:85:87:b5:2d:52:32:94:
f0:24:ad:69:1e:2a:fb:71:70:1e:38:7f:0f:d2:9a:ef:87:e3:
40:74:eb:7c:7e:41:3d:a9:c0:9a:67:29:51:76:25:bf:7b:ba:
27:ad:34:5a:a2:32:46:48:7e:6c:3c:88:ab:75:43:b0:40:67:
4e:88:3c:f4:cb:a4:47:f4:06:f5:71:0f:a5:06:23:9c:70:bc:
4c:7f:e6:b9:6d:5e:82:fb:94:9e:da:0d:9f:42:d2:26:3f:4b:
0d:6a:5e:f3:df:d9:e3:a5:1d:24:38:e5:f2:5f:e3:ce:3c:a4:
d5:0e:77:70:e2:b9:70:68:02:c0:d0:b5:b6:78:94:cd:44:db:
07:5a:7b:33:8f:ad:27:bc:40:a2:7a:b5:cd:43:1d:b7:31:08:
d2:bd:25:63:63:8a:3e:eb:12:1d:3a:51:e4:e6:ac:a9:48:ee:
75:88:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:49 2026 by rpki-client