
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier: KViGFCOAoQ0BVbaBX4+RLqpYj8tY6UZ8UAkfd9dKezk=
Subject key identifier: A1:06:C7:07:68:0C:F4:48:30:C7:12:5F:A5:D6:01:D8:92:D8:FF:3D
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial: 0C5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number: 0C56
Signing time: Thu 16 Apr 2026 18:37:14 +0000
Manifest this update: Thu 16 Apr 2026 18:37:14 +0000
Manifest next update: Thu 23 Apr 2026 18:37:14 +0000
Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: vteOZ0yqB6mERvr02RWsOqQtxEskMqiXb5qoeWCwssk=)
2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: zVKPBOvgf5ZBPV/BL1nd0Q/b/L3Ds0nzM2EgbZq2Spo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Validity
Not Before: Apr 16 18:37:14 2026 GMT
Not After : Apr 23 18:37:14 2026 GMT
Subject: CN=69e12c5a-ffcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:04:b9:49:59:d1:73:31:c9:53:13:3f:34:
9c:aa:98:c4:17:59:26:6e:25:a4:5e:ee:97:d6:5c:
dc:48:8e:96:98:02:ed:a8:d4:61:f7:4e:80:67:22:
23:46:10:b4:ce:3d:ce:cd:5f:32:f3:a2:f1:86:86:
80:87:2c:25:52:42:96:f2:40:e5:54:df:24:5a:58:
29:54:69:44:4d:32:89:43:90:7a:fc:4c:d2:d2:b6:
08:59:d6:40:10:75:ae:ea:24:f6:a0:36:1f:8e:a0:
9b:e4:89:e5:cd:96:58:6a:e0:c7:34:21:19:e1:7d:
87:db:84:8f:c4:4a:fa:b4:fe:29:2b:31:4d:8c:71:
6d:70:13:c7:12:b9:3b:40:65:ea:0a:47:80:fa:26:
e0:0a:71:e4:c3:b5:90:77:b3:29:bd:76:f9:67:5d:
77:5f:47:93:eb:ce:3d:ac:d7:6b:09:76:37:c2:62:
ed:0d:55:3e:19:ba:f4:b6:38:53:8c:c9:18:f6:96:
27:36:df:cd:46:39:f6:cb:a9:91:65:84:8e:bb:c0:
28:1a:76:c9:ad:2b:de:ef:f1:aa:87:fa:38:35:41:
bb:fb:6e:e1:06:d1:42:f6:f7:51:35:ca:88:9d:37:
b9:a0:ae:c4:a6:88:76:f0:9d:b1:1d:e2:30:48:00:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:06:C7:07:68:0C:F4:48:30:C7:12:5F:A5:D6:01:D8:92:D8:FF:3D
X509v3 Authority Key Identifier:
keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:03:8a:a7:c8:2e:9e:07:7b:31:ab:cf:4b:72:c2:b5:0f:d7:
90:e1:bc:4c:a4:79:71:33:33:e7:10:93:76:a8:b3:04:de:5b:
5e:a0:86:84:2f:64:68:84:05:d2:3f:cd:43:cd:d3:6b:b6:40:
b5:da:9f:a0:4d:56:bd:b4:69:20:e5:ef:1f:2b:99:af:9b:d1:
07:3c:56:e4:cf:b9:5b:cf:6a:86:54:34:13:d2:29:2a:23:f1:
29:d7:83:42:a7:2d:23:d7:a2:c8:8d:5b:c7:a9:92:2c:7c:1e:
80:5d:44:ba:58:fb:ff:c9:84:e0:11:78:e8:fb:02:c3:8b:15:
15:b9:fc:a0:10:73:d3:67:51:ec:64:af:2b:98:02:59:fb:42:
b4:11:c7:31:28:37:5c:6d:94:35:70:fe:ce:17:c4:80:fa:cc:
ef:4a:ce:13:a7:a7:38:f4:37:2d:32:c6:96:48:14:3d:73:11:
6e:51:f9:99:e0:df:fb:14:3a:08:5f:90:56:85:38:8c:27:4d:
05:8b:92:e6:20:98:bd:da:35:ca:ab:c6:f0:9f:a0:84:bf:6f:
34:01:db:ee:43:35:fe:98:44:85:b9:9d:cd:4f:34:be:3e:71:
41:42:da:18:76:1f:3d:3d:82:53:a5:fe:c2:21:8d:20:3f:2a:
ef:f7:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:38 2026 by rpki-client