
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json)
Hash identifier: s2Rmwp722qgD1aRaYGROR8bhckCcwhKfofbZWg9ODM4=
Subject key identifier: E5:CB:11:E6:56:43:78:51:74:77:D8:B2:9A:B6:11:49:EE:4E:B1:B7
Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Certificate serial: 0555
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
Manifest number: 054C
Signing time: Thu 24 Sep 2026 23:18:38 +0000
Manifest this update: Thu 24 Sep 2026 23:18:38 +0000
Manifest next update: Thu 01 Oct 2026 23:18:38 +0000
Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: G7jJ51NVtyBHnDmziuYivsBiMdPSTkcedS1BP6NxVJU=)
2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: eFNp4aobXGIYGnDarPOL+A4RcUOAoScq1t8b/UbPq6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl
rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365 (0x555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Validity
Not Before: Sep 24 23:18:38 2026 GMT
Not After : Oct 1 23:18:38 2026 GMT
Subject: CN=6ab5afce-8423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:40:3b:65:1e:61:6f:d4:1e:0e:81:22:f4:
b2:32:8e:ad:de:65:db:66:ee:fb:e0:af:27:79:d2:
2e:80:eb:03:f9:a7:24:22:cc:71:84:8e:47:46:29:
42:a8:e1:52:55:f1:60:e6:c1:4a:34:f0:3b:8d:a5:
f0:24:0c:a7:00:03:7b:6d:e4:99:3e:9e:7a:5e:52:
14:53:53:bd:e8:38:0a:45:23:5a:ce:3f:0e:80:72:
83:c2:26:ed:e5:26:86:23:bf:f0:5e:01:73:c6:83:
ca:fd:65:47:fb:58:cf:0a:bd:23:dc:bb:a8:c5:bf:
ed:99:3b:6f:63:53:d0:ce:8c:9e:73:19:70:09:da:
9a:47:b0:99:4f:d5:96:97:89:5a:26:f4:e5:97:be:
99:ea:0e:02:34:4c:f4:ca:28:93:bf:d6:b0:3e:a6:
7c:61:5c:1b:0a:24:12:9c:54:30:0c:cb:25:3b:a7:
f8:2f:45:0b:82:24:16:89:2c:2d:08:02:24:a0:16:
0e:b8:df:b6:94:58:ef:1d:a3:c4:e8:e0:43:0a:02:
90:15:a5:2c:79:e8:a0:35:e0:5a:21:4d:d7:bb:96:
bf:54:b1:f4:45:db:5f:ce:fa:a6:c9:79:e7:2d:1c:
05:2c:6a:18:a0:1c:da:46:a7:5d:6d:7d:76:2b:55:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:11:E6:56:43:78:51:74:77:D8:B2:9A:B6:11:49:EE:4E:B1:B7
X509v3 Authority Key Identifier:
keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:57:53:2c:87:b8:8c:be:21:3a:3c:e7:8a:a3:f2:dc:8d:c6:
9b:b8:82:db:67:2b:16:fe:48:eb:fd:8b:4a:82:fb:a7:2b:94:
53:72:6c:ff:46:bb:b8:60:3b:fc:e7:58:77:cd:b2:fc:18:0f:
2c:b7:73:3d:4b:eb:0a:eb:dd:f2:d3:45:d5:f6:50:41:47:3f:
e3:4f:7f:5c:0e:82:15:fb:64:35:52:70:d9:1f:24:c3:53:8d:
56:67:4b:0e:a7:5f:ca:9a:97:2d:f1:80:b9:84:9b:6d:d2:a1:
5b:66:cc:09:61:75:47:9b:69:95:98:b0:18:f5:86:49:14:3e:
85:3d:29:28:a2:59:92:1c:ad:5e:5d:25:56:25:e6:a4:39:d0:
3e:c9:ac:be:cd:87:6a:21:26:02:40:7a:fd:df:61:32:82:1a:
c6:0d:d5:59:9e:56:b8:36:70:a8:20:9e:25:77:ad:5f:11:14:
0b:d5:68:9c:8c:74:b1:3c:3b:f0:3e:22:1b:df:4c:46:1c:95:
ea:03:4e:49:53:f6:f3:33:01:16:b1:b0:67:c0:ba:5f:ae:a3:
44:f7:0d:c3:6e:fb:92:df:25:61:31:2a:22:02:71:31:f3:59:
a3:6c:6d:33:87:95:a8:17:8f:19:34:30:00:31:81:b7:2e:11:
d6:9d:d5:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE
QjY4OEZFNTMwHhcNMjYwOTI0MjMxODM4WhcNMjYxMDAxMjMxODM4WjAYMRYwFAYD
VQQDEw02YWI1YWZjZS04NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSBAO2UeYW/UHg6BIvSyMo6t3mXbZu774K8nedIugOsD+ackIsxxhI5HRilC
qOFSVfFg5sFKNPA7jaXwJAynAAN7beSZPp56XlIUU1O96DgKRSNazj8OgHKDwibt
5SaGI7/wXgFzxoPK/WVH+1jPCr0j3Luoxb/tmTtvY1PQzoyecxlwCdqaR7CZT9WW
l4laJvTll76Z6g4CNEz0yiiTv9awPqZ8YVwbCiQSnFQwDMslO6f4L0ULgiQWiSwt
CAIkoBYOuN+2lFjvHaPE6OBDCgKQFaUseeigNeBaIU3Xu5a/VLH0RdtfzvqmyXnn
LRwFLGoYoBzaRqddbX12K1XqBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXLEeZW
Q3hRdHfYspq2EUnuTrG3MB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2
NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF
b0lrakZwVFBnNG5iYUlfbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOVdTLIe4jL4hOjzniqPy3I3Gm7iC22crFv5I6/2LSoL7pyuUU3Js/0a7uGA7
/OdYd82y/BgPLLdzPUvrCuvd8tNF1fZQQUc/409/XA6CFftkNVJw2R8kw1ONVmdL
DqdfypqXLfGAuYSbbdKhW2bMCWF1R5tplZiwGPWGSRQ+hT0pKKJZkhytXl0lViXm
pDnQPsmsvs2HaiEmAkB6/d9hMoIaxg3VWZ5WuDZwqCCeJXetXxEUC9VonIx0sTw7
8D4iG99MRhyV6gNOSVP28zMBFrGwZ8C6X66jRPcNw277kt8lYTEqIgJxMfNZo2xt
M4eVqBePGTQwADGBty4R1p3Vmg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:02:16 2026 by rpki-client