
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json)
Hash identifier: 0kBohmOtgJXsKAmdWaayCYykXgQ+50IQ+OhGMQdRGXo=
Subject key identifier: 73:02:D2:67:C0:21:13:5F:19:50:FD:34:28:AA:51:C0:E2:86:53:2D
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 18E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
Manifest number: 18CD
Signing time: Sat 10 Oct 2026 16:28:47 +0000
Manifest this update: Sat 10 Oct 2026 16:28:46 +0000
Manifest next update: Sat 17 Oct 2026 16:28:46 +0000
Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: POhY+jd5NO8Delr4sjgyT5oOAZxzNbsVnvOwmcDhjIM=)
2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: O5kl16a/IQvZUZSbRp/CF0Esm5nNHG9ObVOSJy44fec=)
3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: j7LfW13R3yfiSQpFhurPUr9r5NLSV5kwKxMlGjfdnFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6369 (0x18e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Oct 10 16:28:46 2026 GMT
Not After : Oct 17 16:28:46 2026 GMT
Subject: CN=6aca67bf-07f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:13:88:df:7e:53:28:28:39:2f:f0:6a:bd:
99:67:3a:14:d9:f4:56:dc:1a:8a:b0:89:14:2d:fc:
b2:44:31:69:2b:58:6b:c0:7d:7c:2e:52:ea:db:36:
f6:2c:1b:c5:bc:d1:cb:4d:84:1c:ab:ef:3b:97:6c:
ed:44:71:9c:86:03:ce:c4:6b:fd:28:af:10:62:78:
bd:be:ce:c0:10:0f:85:01:da:84:17:74:f5:f3:a9:
3c:8b:2f:59:3a:71:c0:ae:52:53:f0:11:5d:f4:18:
f4:88:15:20:41:54:fa:66:b7:a9:1b:6a:ad:10:69:
0c:74:b5:dc:2a:01:44:69:a3:5f:95:c0:b6:01:2f:
38:7e:5b:ca:a7:1c:e3:6e:47:33:d3:54:cd:cb:61:
7f:20:d2:1a:bb:00:2e:c9:10:25:5e:d4:17:42:53:
eb:85:47:ec:4f:f7:8c:42:5f:e4:3a:c9:7d:7b:8f:
a4:83:9b:7c:92:79:0c:ba:89:68:9f:66:2e:48:56:
44:3b:ab:ba:24:3b:90:b7:45:a1:d8:49:4b:58:7d:
55:4e:8c:fa:61:ef:cd:6a:89:d4:37:11:ff:97:4e:
82:1f:bf:18:c4:34:5f:75:a2:7f:f3:31:6f:85:5c:
77:67:a2:9f:dd:60:76:a3:f8:e8:77:44:dd:a2:ad:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:D2:67:C0:21:13:5F:19:50:FD:34:28:AA:51:C0:E2:86:53:2D
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:be:8e:20:f0:23:6b:e7:33:c5:ac:70:b0:3c:ab:b7:e5:
b6:2f:36:4b:25:7f:fd:11:20:f2:af:e6:00:91:d1:ee:df:78:
e3:6c:7c:c9:47:d1:04:4e:1a:40:69:ae:d7:92:69:5f:8c:71:
ff:2e:ec:80:b7:2d:a4:bf:7c:40:8b:f4:bc:0a:a1:f5:b6:db:
a6:8e:97:1d:dc:06:65:2c:0f:2d:ac:3b:aa:7c:63:89:4d:b5:
b7:32:33:5e:62:42:2e:fc:c2:92:0f:93:c7:b4:ad:78:ab:b4:
6b:bd:00:d1:51:b2:4d:6d:7b:03:37:a1:5f:cd:db:04:fd:13:
03:6f:42:f7:c2:a9:c4:d2:ff:5c:f6:42:aa:d0:89:70:c9:d8:
07:1c:c1:0d:31:ff:5f:47:34:81:b1:e2:4c:7d:84:98:72:ef:
27:51:88:6f:8f:4c:79:83:05:e2:a5:65:51:28:6b:93:83:ef:
8f:0a:64:e5:ce:6a:ce:11:c6:67:eb:f7:5b:55:0b:f9:d1:87:
fa:cb:06:4a:ea:cb:0d:8f:cc:a4:62:07:66:67:c3:1b:f8:71:
c6:07:14:ca:05:52:03:da:bd:bc:56:dd:66:5c:0f:63:00:18:
2c:5d:f0:28:e3:30:c8:23:c7:5f:1e:e7:ad:08:74:d3:00:bf:
01:57:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 00:37:59 2026 by rpki-client