
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json)
Hash identifier: gDnZdy0xeXBT4yYya8fsZObqnhv0aUF2p5LIm5+2Z40=
Subject key identifier: BD:A1:B0:56:4A:0F:EE:B7:5E:30:C1:5A:22:F7:96:74:66:ED:10:52
Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Certificate serial: 0F55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
Manifest number: 0F49
Signing time: Fri 18 Sep 2026 17:32:27 +0000
Manifest this update: Fri 18 Sep 2026 17:32:26 +0000
Manifest next update: Fri 25 Sep 2026 17:32:26 +0000
Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: cG4JjByr5SPVlDhn05VVSycJ48a1My+uq8Qf1ZVNQ6M=)
2: 350711FA881211EE9710F928C4F9AE02.roa (hash: g5Jn/4mYG+O+uANS2Gq3ehc2407nXRKNECbsAhZFdHM=)
3: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: dCbH4NL/l/xMZfu4F928E1bAEdQVgxFt32pJoJ1YYyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3925 (0xf55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Validity
Not Before: Sep 18 17:32:26 2026 GMT
Not After : Sep 25 17:32:26 2026 GMT
Subject: CN=6aad75aa-a345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:37:55:b9:67:7d:5d:d2:12:1e:44:69:a9:
66:82:74:09:0e:c7:47:1d:c8:b6:80:95:d8:99:ff:
a9:e1:c1:20:eb:06:f4:e6:35:a4:58:fe:61:4a:40:
74:87:3c:e1:4a:85:2d:7f:2e:29:7a:ae:3c:6b:e9:
98:2a:e5:b1:c9:ab:73:ab:89:ae:b6:ff:0e:92:30:
dd:fe:31:9c:fc:f2:77:63:39:e3:a6:be:4e:9e:b7:
85:16:aa:43:1c:09:90:03:d6:86:ce:ec:49:9e:9f:
e6:71:59:50:ac:ac:00:a1:cd:e7:fc:ef:d8:72:74:
7c:90:dd:21:2d:38:b4:94:1a:30:80:1a:c2:e1:97:
f8:10:cb:38:d2:e1:da:df:fd:ed:e3:ef:93:60:93:
df:99:13:18:f9:dc:6e:ac:9d:30:1b:bc:88:12:aa:
47:8a:21:56:80:74:06:5a:95:92:19:7e:7b:cf:41:
19:6d:1f:c4:f9:87:11:e1:89:09:82:ec:51:2a:15:
8d:e8:3e:26:f8:1d:98:0d:70:12:28:81:74:33:b5:
5d:54:be:b5:3a:30:5c:6d:1d:e1:45:07:30:aa:87:
a4:24:ad:1c:f6:08:d3:3a:63:38:0e:58:06:90:7f:
9a:ab:e5:f5:85:32:f1:e6:a9:50:ec:81:64:17:6e:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A1:B0:56:4A:0F:EE:B7:5E:30:C1:5A:22:F7:96:74:66:ED:10:52
X509v3 Authority Key Identifier:
keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:15:f0:50:ca:0b:d5:ae:87:1b:32:1b:4e:fa:f2:d6:b7:7d:
e3:81:ba:d2:a0:e2:d2:f8:ab:fa:7e:3d:72:6d:64:99:e0:02:
c4:78:76:a9:fb:78:16:cf:cf:35:9f:80:18:fc:3b:54:2a:f2:
a1:a5:a1:63:93:bd:64:80:6d:a5:ba:04:5e:52:66:68:ea:55:
08:61:77:d2:08:ff:f9:36:fc:56:62:bd:85:8f:56:bb:c8:95:
b1:25:fb:02:ee:7f:10:b3:39:ca:34:8d:bd:e1:4e:00:8d:47:
d1:b1:d7:4d:d3:1a:c9:48:4b:4c:7b:aa:61:25:c8:35:b9:56:
ba:c6:4f:84:e3:4f:09:a0:3f:8f:0c:3d:61:0e:c7:e8:bc:73:
63:9f:49:36:6c:8e:f2:a8:eb:ef:4c:d2:ad:a8:64:8a:e5:ad:
e0:45:10:41:73:f2:39:a0:8a:ca:75:c5:14:98:17:b1:70:69:
c3:a3:eb:85:a6:df:20:34:a4:f4:31:a4:88:33:b4:10:07:16:
ce:f9:95:27:8c:3b:53:02:c4:ff:76:db:1b:84:4b:be:6c:71:
2a:83:cc:8d:04:20:d0:a5:53:ed:ea:09:4f:6d:bf:52:44:a1:
03:bf:e9:7d:05:39:da:e9:b2:6d:c3:a5:bf:38:0f:9d:27:4e:
63:23:ed:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:33:46 2026 by rpki-client