
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json)
Hash identifier: X5DDy0lGKtnqiBT0dbuQBq6x0/xFwGvuUWVcR+4NWgE=
Subject key identifier: 0D:C2:8F:D8:12:D0:F8:C3:D3:24:D1:AF:51:8A:0C:07:E9:EC:68:88
Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Certificate serial: 0EE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
Manifest number: 0EDC
Signing time: Sat 28 Feb 2026 17:46:03 +0000
Manifest this update: Sat 28 Feb 2026 17:46:03 +0000
Manifest next update: Sat 07 Mar 2026 17:46:03 +0000
Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: 6hYy03Ciff0H+maSd+bL9yVCE0WoqS294lAKwQB6P6s=)
2: 350711FA881211EE9710F928C4F9AE02.roa (hash: qIQKdkJiQ6vR/a23UDA9XAzbB7yWjWrazranQiTao60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3810 (0xee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Validity
Not Before: Feb 28 17:46:03 2026 GMT
Not After : Mar 7 17:46:03 2026 GMT
Subject: CN=69a329db-3f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:50:62:5d:d3:77:a3:22:32:f1:58:65:c4:
3c:62:3a:d7:3e:15:73:5f:28:b6:ca:46:9e:e9:dd:
90:b5:d3:92:04:52:ad:95:73:6c:22:77:4f:7c:f2:
b6:f8:44:77:a3:9c:9b:4e:2c:fd:b7:c5:1c:16:43:
7f:30:12:f0:7e:cc:89:c8:d9:c5:14:2a:88:a0:d7:
02:ae:37:8d:2b:89:5c:e3:2c:e5:3f:38:1f:96:9d:
eb:51:ea:28:bf:7a:b5:89:9a:73:d1:66:80:8c:2b:
a9:c4:df:e1:1f:cb:52:d2:3d:dc:6b:83:90:ab:89:
32:bd:36:3c:ce:49:98:a0:ac:45:69:59:ce:9a:df:
64:8f:55:91:2d:c2:17:70:a3:7e:9b:83:14:17:cc:
d6:73:67:69:90:a2:07:e6:ea:c9:b7:41:23:14:75:
36:93:3b:23:5f:60:42:ca:99:53:91:1d:da:5c:30:
13:33:b1:20:6d:e9:58:75:5c:89:fe:3f:56:28:3d:
ec:46:17:62:32:10:c5:27:27:d0:50:e3:42:fd:b2:
10:aa:67:44:13:62:e6:fa:45:76:e8:2e:46:64:f2:
7e:35:40:76:bb:88:da:ab:95:41:64:11:78:77:a0:
39:f7:3c:07:63:a8:21:e0:4a:7c:89:8f:91:d5:86:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C2:8F:D8:12:D0:F8:C3:D3:24:D1:AF:51:8A:0C:07:E9:EC:68:88
X509v3 Authority Key Identifier:
keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:40:f9:2f:06:75:de:f2:17:95:f3:aa:b9:d1:ce:83:53:12:
fc:74:bc:1f:14:7f:0f:27:4b:02:b8:71:ac:2c:7a:b5:7d:1c:
61:fa:2f:87:15:12:b7:e2:05:7a:94:8d:d3:64:46:9c:bf:06:
ce:b5:70:b3:6c:7b:7e:56:e2:93:64:e2:ba:30:04:c6:2a:ce:
dc:1d:d7:13:b4:9c:22:23:89:7e:07:09:2a:59:30:a0:d6:74:
8d:5e:cf:a8:0a:b8:31:eb:58:04:b2:77:e5:df:e9:c1:4b:5a:
83:b4:32:5c:45:4d:6c:57:83:15:c9:c5:2d:ae:4f:3c:aa:6d:
76:36:67:04:29:09:d4:7c:a7:e0:5a:10:9c:f9:35:f2:4d:62:
4e:92:8f:5c:59:26:a2:ad:86:00:51:1a:34:b9:c4:75:90:90:
45:e8:85:38:97:2d:f0:80:6b:40:b7:c8:3a:e7:61:a3:42:c3:
cf:f4:6e:d7:4c:24:20:af:22:c0:eb:d3:1a:e1:d1:9f:47:cf:
e1:92:df:b6:9d:73:b8:23:f3:71:0d:06:d0:75:2d:a2:0e:4c:
36:f2:3f:3b:29:8d:29:10:8c:e7:45:2a:10:05:2e:f0:55:e2:
29:24:d2:3d:a0:7d:39:44:0f:76:33:06:ee:56:c7:f7:41:20:
43:66:e6:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2
ODQzMEY5RTQwHhcNMjYwMjI4MTc0NjAzWhcNMjYwMzA3MTc0NjAzWjAYMRYwFAYD
VQQDDA02OWEzMjlkYi0zZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyv9QYl3Td6MiMvFYZcQ8YjrXPhVzXyi2ykae6d2QtdOSBFKtlXNsIndPfPK2
+ER3o5ybTiz9t8UcFkN/MBLwfsyJyNnFFCqIoNcCrjeNK4lc4yzlPzgflp3rUeoo
v3q1iZpz0WaAjCupxN/hH8tS0j3ca4OQq4kyvTY8zkmYoKxFaVnOmt9kj1WRLcIX
cKN+m4MUF8zWc2dpkKIH5urJt0EjFHU2kzsjX2BCyplTkR3aXDATM7EgbelYdVyJ
/j9WKD3sRhdiMhDFJyfQUONC/bIQqmdEE2Lm+kV26C5GZPJ+NUB2u4jaq5VBZBF4
d6A59zwHY6gh4Ep8iY+R1YbzmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3Cj9gS
0PjD0yTRr1GKDAfp7GiIMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF
MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n
LUNodEJsU0NudGRvUXctZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2UD5LwZ13vIXlfOqudHOg1MS/HS8HxR/DydLArhxrCx6tX0cYfovhxUSt+IF
epSN02RGnL8GzrVws2x7flbik2TiujAExirO3B3XE7ScIiOJfgcJKlkwoNZ0jV7P
qAq4MetYBLJ35d/pwUtag7QyXEVNbFeDFcnFLa5PPKptdjZnBCkJ1Hyn4FoQnPk1
8k1iTpKPXFkmoq2GAFEaNLnEdZCQReiFOJct8IBrQLfIOudho0LDz/Ru10wkIK8i
wOvTGuHRn0fP4ZLftp1zuCPzcQ0G0HUtog5MNvI/OymNKRCM50UqEAUu8FXiKSTS
PaB9OUQPdjMG7lbH90EgQ2bm5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:41 2026 by rpki-client