
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json)
Hash identifier: j1iQNKHw7bSz1v1fdsktzB5ODlNhU4fOCQKSZJIE5xo=
Subject key identifier: 3D:60:DF:4E:05:F7:2E:C4:72:AD:DD:9B:E7:72:28:63:93:5F:7D:AC
Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Certificate serial: 05BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
Manifest number: 0585
Signing time: Fri 18 Sep 2026 23:19:54 +0000
Manifest this update: Fri 18 Sep 2026 23:19:54 +0000
Manifest next update: Fri 25 Sep 2026 23:19:54 +0000
Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: 1aVO2jRzi5LmR2nOBFj1TVV9i5yYJn8lIT/Gmhr5h0M=)
2: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: 4s7irTp5YZt4t4JUuvpt1hajQ6RV33feyUo5ylQX8mc=)
3: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: UtLN9LK6PXWEEFxc1KoSs2w5t7H8ccMsoGEgQElh3YE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1467 (0x5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845
Validity
Not Before: Sep 18 23:19:54 2026 GMT
Not After : Sep 25 23:19:54 2026 GMT
Subject: CN=6aadc71a-6600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:88:cb:9c:83:f8:fd:6a:b5:b3:83:5b:78:
00:6b:68:3e:ec:cd:ab:a2:c1:b0:2f:7b:97:5c:4e:
73:23:06:13:95:94:7b:1d:2b:a9:ae:dc:93:a6:6b:
6f:1d:b9:9b:23:40:cd:dc:61:b5:6b:5b:ac:2d:f9:
5d:7b:ca:f0:0a:78:19:e3:7c:e5:f0:70:e0:79:8a:
79:c5:0a:e2:20:ac:eb:21:10:c8:e2:62:dc:4f:f6:
de:a5:e7:05:2e:ff:2b:39:bc:71:9c:5e:1b:33:79:
08:30:45:eb:dd:1c:bc:31:7e:4a:76:7c:e1:36:ce:
1c:bc:39:6b:9d:25:3e:ab:0c:19:5c:bd:c5:64:f5:
5a:c6:75:fc:da:c5:88:3c:b9:7a:c8:ad:e9:ba:e5:
3c:8b:31:73:0d:71:69:57:3a:b3:62:00:fe:fe:26:
04:40:1a:b2:01:47:85:0f:aa:dc:6b:08:95:da:ba:
c6:04:11:b8:c4:a0:5f:bc:6f:b2:03:38:7d:de:ca:
bf:28:67:c2:f0:cc:47:ca:29:d9:fa:59:f7:04:26:
81:04:63:42:5e:33:66:1a:c1:48:a3:6c:18:e0:a1:
df:bb:6f:a9:f5:6e:42:0e:05:6e:c9:57:ea:2d:24:
76:19:7d:1b:0b:1c:83:3c:38:3c:c1:16:49:11:b2:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:DF:4E:05:F7:2E:C4:72:AD:DD:9B:E7:72:28:63:93:5F:7D:AC
X509v3 Authority Key Identifier:
keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:70:04:49:06:90:c5:ad:47:2a:2c:64:1e:ee:a0:32:97:c1:
ce:4a:82:a9:de:a5:a2:66:8e:48:04:90:f6:d2:78:b0:38:15:
fd:9a:77:a7:87:1e:75:9b:9f:6b:7a:5a:14:6f:bc:7c:13:60:
53:a6:7e:af:f6:5f:71:e6:39:cc:b0:6d:19:53:42:77:ad:cb:
2e:b0:60:3a:e1:d4:b0:6b:9c:45:99:7e:7d:28:c5:a0:d6:70:
4e:dd:b1:dd:4f:e7:24:e2:af:de:45:57:24:91:53:7c:81:9c:
c9:76:c2:9e:91:0e:c4:f2:ea:90:14:7b:0d:d7:03:a3:c4:9f:
b3:27:8f:a0:65:37:16:74:19:b3:b9:8f:bd:4b:9e:04:ec:64:
84:b7:23:3e:d6:fc:17:78:a1:b3:33:1d:7a:e4:8a:91:04:e8:
de:34:d5:45:6d:7a:a8:18:f1:85:76:09:d1:4f:9c:f7:02:d5:
18:c2:58:72:33:81:9a:0b:3b:46:9a:e1:7c:6c:8c:89:82:84:
6e:0d:c0:13:d9:65:8a:ce:f8:89:67:61:e8:e8:cb:5e:dd:66:
f3:74:06:88:a1:15:57:c3:40:e0:9c:b9:23:36:91:53:80:99:
15:ba:e2:03:60:5c:84:30:85:d5:c9:c9:75:2e:b6:7a:2c:1c:
82:a0:6e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:51:17 2026 by rpki-client