
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json)
Hash identifier: y97BiRaDyq34MzsLoCmNvxbllK79NMK4G0wbiWqIs1k=
Subject key identifier: DE:6C:93:AB:EC:41:EE:C0:D0:AE:EA:40:38:54:3C:00:1D:0A:19:DB
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 18B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
Manifest number: 18A5
Signing time: Tue 28 Jul 2026 16:34:30 +0000
Manifest this update: Tue 28 Jul 2026 16:34:29 +0000
Manifest next update: Tue 04 Aug 2026 16:34:29 +0000
Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: 2iTfOg6s9mAFvb/k0dbXww0kf1SCT0fKDpvFrAlA95M=)
2: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zSG0LGFJE7WuZbbBJfnMq6hMoXOF+N0WFOj4d7BqNDI=)
3: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: Ab1is/evOLhc3g4DpSbGl1Q9LWF8CNxrAAAtmCT5wDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6327 (0x18b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Jul 28 16:34:29 2026 GMT
Not After : Aug 4 16:34:29 2026 GMT
Subject: CN=6a68da16-f817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:47:1e:ef:b4:90:1d:aa:c9:9a:30:7d:df:
7f:ee:e6:0e:55:96:c1:38:2f:2f:ea:f8:64:e7:5f:
15:34:b7:90:bf:f5:0c:ca:db:28:e0:88:c9:ea:95:
20:15:c2:03:4d:76:f6:e3:49:c1:aa:0e:10:9d:fc:
61:ff:e9:42:f3:e4:e2:ec:ba:76:7f:93:d2:c6:0b:
21:64:f5:11:98:47:c1:02:b3:43:dd:16:fa:9d:1d:
53:db:18:91:d6:eb:8c:4b:31:a9:5f:d8:98:41:d6:
88:35:15:90:7e:c1:af:5b:6d:a9:69:e3:67:ac:ca:
fa:78:a3:2e:f5:c7:95:8c:f0:2f:71:46:ad:88:9c:
90:ee:46:cc:a8:ca:8e:58:a4:55:d0:c0:ad:28:70:
71:7e:fb:ca:c6:84:43:2b:f3:d3:18:1a:63:fe:07:
d0:5d:86:6a:1e:40:e2:e3:cd:74:86:b9:0a:1f:f8:
48:65:19:9b:78:21:66:51:a9:bc:77:1b:cf:13:17:
d6:f0:69:4c:56:e0:c2:a7:ce:8b:e1:d0:b3:ba:b9:
05:d9:f7:76:7e:ee:a0:9b:ab:66:8b:a1:49:9e:c4:
b2:5a:a1:54:6e:d5:8e:94:1e:88:0a:38:56:a5:9e:
02:2b:7b:25:21:41:e4:87:74:d8:04:47:c4:f1:cf:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6C:93:AB:EC:41:EE:C0:D0:AE:EA:40:38:54:3C:00:1D:0A:19:DB
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:03:27:7f:df:4b:87:31:26:d2:be:5f:03:10:53:13:78:e7:
9e:27:ef:3d:bd:67:07:ca:c5:d0:bb:0c:33:43:c6:7c:83:69:
ca:32:53:c6:3b:c1:0f:b5:35:3f:38:d5:57:b3:96:29:91:d6:
36:5c:bb:e3:9e:b7:10:c1:c3:c7:e6:e5:c1:84:a8:78:2e:89:
21:c7:b0:38:82:4d:06:ba:16:a3:c8:2d:64:3c:9c:ba:1c:84:
93:5a:2e:ff:3e:71:4e:cd:f5:dc:4d:46:45:ab:1f:0f:57:bb:
97:3d:6d:30:4c:35:85:d5:28:8e:48:5c:e2:f6:5f:1b:5e:54:
0a:93:b8:98:24:28:af:97:fe:18:5c:32:1b:ee:e3:01:dc:77:
65:a1:b0:28:87:e6:72:1d:5e:a4:fc:4a:52:14:00:54:b6:3e:
3a:36:b5:d5:a3:20:95:b8:97:56:06:a5:55:9c:3c:92:ac:65:
20:d8:6b:0a:16:09:61:ad:1c:65:26:a0:1d:34:fb:d7:16:48:
22:bd:c3:a4:7d:56:31:21:22:0e:41:f0:fa:95:7e:bb:d7:7f:
e8:88:be:12:66:fb:53:67:4e:5a:73:8e:0c:13:ac:b3:72:11:
09:a5:7d:42:b3:0f:fa:4b:4f:a8:1a:2f:61:64:87:53:fd:ec:
1d:53:ef:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw
Qjg0RDBDOEEwHhcNMjYwNzI4MTYzNDI5WhcNMjYwODA0MTYzNDI5WjAYMRYwFAYD
VQQDEw02YTY4ZGExNi1mODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjplHHu+0kB2qyZowfd9/7uYOVZbBOC8v6vhk518VNLeQv/UMytso4IjJ6pUg
FcIDTXb240nBqg4Qnfxh/+lC8+Ti7Lp2f5PSxgshZPURmEfBArND3Rb6nR1T2xiR
1uuMSzGpX9iYQdaINRWQfsGvW22paeNnrMr6eKMu9ceVjPAvcUatiJyQ7kbMqMqO
WKRV0MCtKHBxfvvKxoRDK/PTGBpj/gfQXYZqHkDi4810hrkKH/hIZRmbeCFmUam8
dxvPExfW8GlMVuDCp86L4dCzurkF2fd2fu6gm6tmi6FJnsSyWqFUbtWOlB6ICjhW
pZ4CK3slIUHkh3TYBEfE8c9DfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5sk6vs
Qe7A0K7qQDhUPAAdChnbMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz
QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1
dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANwMnf99LhzEm0r5fAxBTE3jnnifvPb1nB8rF0LsMM0PGfINpyjJTxjvBD7U1
PzjVV7OWKZHWNly74563EMHDx+blwYSoeC6JIcewOIJNBroWo8gtZDycuhyEk1ou
/z5xTs313E1GRasfD1e7lz1tMEw1hdUojkhc4vZfG15UCpO4mCQor5f+GFwyG+7j
Adx3ZaGwKIfmch1epPxKUhQAVLY+Oja11aMglbiXVgalVZw8kqxlINhrChYJYa0c
ZSagHTT71xZIIr3DpH1WMSEiDkHw+pV+u9d/6Ii+Emb7U2dOWnOODBOss3IRCaV9
QrMP+ktPqBovYWSHU/3sHVPvWw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:51 2026 by rpki-client