
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier: +cZiydLqG2fOkdY5BpXhBlbnYA/wC4Y4hv9OM0VCvpc=
Subject key identifier: 7C:28:FB:17:35:F4:7A:00:42:FF:D9:D7:22:77:6D:29:D6:F2:D7:2D
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial: 089E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number: 088D
Signing time: Fri 12 Jun 2026 20:42:05 +0000
Manifest this update: Fri 12 Jun 2026 20:42:04 +0000
Manifest next update: Fri 19 Jun 2026 20:42:04 +0000
Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: mfA5iCBR0X32B7VBruHx1ar/YS6xW5MZoA+J/pV7KoI=)
2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 99jEiPZckviVtuXJZrsVhVTNS0+5/ramRtJfm1GkHO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206 (0x89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Validity
Not Before: Jun 12 20:42:04 2026 GMT
Not After : Jun 19 20:42:04 2026 GMT
Subject: CN=6a2c6f1d-166c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:e8:87:b1:7e:eb:4d:be:ba:10:d8:de:86:
81:c9:15:47:2f:d6:65:36:01:64:f8:24:9e:3a:c5:
3a:71:d6:cb:b1:57:51:4e:77:61:bd:bf:e4:1d:b1:
8d:c0:de:04:90:9b:3c:a6:81:e1:43:cf:ee:f0:89:
23:88:57:17:10:89:7e:fa:60:d7:01:41:4e:0e:4c:
3a:14:a0:36:dd:86:de:78:38:ca:05:c7:e6:73:ee:
6a:61:ff:91:ce:57:43:4a:17:fd:37:54:8e:0d:87:
d8:e3:ea:bd:62:8b:53:60:06:12:f3:fa:10:be:8e:
6b:be:8c:ae:63:58:18:5a:4d:70:f8:de:31:63:69:
aa:c3:0d:40:be:5e:89:ff:41:19:12:b3:2f:ba:76:
a5:cd:47:f1:01:15:c8:d9:31:b6:11:52:9c:f1:04:
4b:25:53:87:7b:7d:8c:7f:4d:7f:23:36:2c:04:8c:
9e:df:80:6a:71:6b:8f:9e:25:42:f7:15:8d:ba:48:
aa:85:69:c4:ff:b2:66:74:9d:f4:5d:74:10:52:fb:
9c:62:63:b7:6d:3b:82:02:45:47:da:7a:37:c7:04:
0b:b6:32:ac:a6:ce:3e:68:50:e2:0f:c0:0e:2e:93:
a5:ec:5a:7e:4f:26:32:86:35:44:0c:a0:63:51:08:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:FB:17:35:F4:7A:00:42:FF:D9:D7:22:77:6D:29:D6:F2:D7:2D
X509v3 Authority Key Identifier:
keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:29:50:43:12:5b:08:62:f4:52:02:6c:29:ec:3b:e9:83:94:
d3:21:1e:9b:5f:d0:f7:d7:be:b9:bb:cb:e1:b0:3a:82:4b:b9:
85:d4:74:5c:f7:58:7e:b9:4d:6e:be:52:d7:e1:5d:75:fa:b1:
d0:e9:ff:bb:36:45:2a:28:dc:85:83:07:6d:22:a1:7c:79:fd:
01:a6:e8:9a:08:88:73:d9:00:5e:ad:44:67:96:59:a3:a2:1a:
88:1d:85:a4:31:82:a9:36:37:29:11:b9:ad:91:f1:57:dc:ac:
10:d7:9d:bf:df:cf:78:1e:9a:a7:1c:02:90:e8:a6:cd:44:e5:
e2:ca:c8:5a:a1:d9:b7:d1:b9:26:9a:30:58:6e:84:5d:fa:69:
6a:2f:dd:f0:a2:a8:c4:cd:91:ca:44:20:28:31:84:e3:ce:70:
a8:21:59:ab:e9:1c:96:92:9e:d4:4b:54:11:7b:51:8b:93:53:
53:89:ae:a8:5f:8b:95:ea:07:8b:b9:3a:a5:d9:3a:a2:94:8c:
52:4c:6e:0d:bc:f4:41:e8:d5:69:53:01:a6:b4:90:c1:bb:e1:
68:28:fd:1f:fe:75:00:89:e0:98:98:26:9e:7a:d2:85:4c:eb:
f2:2a:dd:84:85:08:ad:c3:3f:61:35:87:b4:68:6f:a9:e5:2c:
02:45:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:26 2026 by rpki-client