
$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File: U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier: wCbtmeB9ay/g0f+XKePXra7qrx2X49ok/e7KDJ9QGVs=
Subject key identifier: 67:4D:09:A8:8D:D3:0A:1D:CC:59:5F:4C:45:55:C8:6A:E6:DF:DC:29
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number: 01D3
Signing time: Wed 13 May 2026 03:45:38 +0000
Manifest this update: Wed 13 May 2026 03:45:38 +0000
Manifest next update: Wed 20 May 2026 03:45:38 +0000
Files and hashes: 1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: hkQSupA6ZxeHSxOUkniRDTLW3dnlFR14zzbQxfTVbns=)
2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Validity
Not Before: May 13 03:45:38 2026 GMT
Not After : May 20 03:45:38 2026 GMT
Subject: CN=6a03f3e2-b39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:30:22:46:64:9b:46:2d:d9:91:73:9b:79:
e0:a0:b1:f1:7c:dd:99:14:98:2e:fa:01:82:65:13:
85:4e:0b:a3:dc:9a:03:51:8e:83:6d:09:94:a1:44:
40:03:16:99:b8:4e:63:bb:1e:dd:09:1e:05:7b:9d:
d4:85:fe:53:8c:de:c1:8a:ba:2f:40:f3:d5:23:52:
b6:5c:04:12:e2:9a:d8:35:f1:79:02:d1:09:c1:c7:
10:85:bc:67:a1:f2:93:fd:62:9f:59:31:da:12:fc:
95:c4:4c:cb:d7:21:5a:82:0a:6f:10:12:d1:3a:b3:
dc:f6:00:6f:cc:9f:8a:12:96:7e:19:66:d3:9f:fb:
a5:c4:e9:4b:46:58:1d:1c:29:e6:da:bc:a9:81:00:
21:65:d5:0f:94:f3:03:c2:4c:c0:21:ac:fb:22:a1:
af:77:69:b7:83:d1:51:d3:51:3b:de:bd:55:46:31:
cc:f6:67:9b:1f:38:44:aa:5f:f1:1b:e8:23:bd:51:
2b:d0:19:83:20:9c:96:bd:dc:ad:46:5d:8c:9b:f6:
1a:15:6b:10:6f:30:67:49:10:34:c0:74:0d:bb:71:
b2:8f:c5:59:bc:87:98:1c:48:35:86:a7:a7:3f:8c:
4c:ba:58:98:89:d7:f3:ae:3d:21:88:0c:8d:4f:00:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4D:09:A8:8D:D3:0A:1D:CC:59:5F:4C:45:55:C8:6A:E6:DF:DC:29
X509v3 Authority Key Identifier:
keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:36:9f:d8:e8:c2:88:64:9e:b7:f6:3b:61:bd:5d:55:4a:45:
b0:12:2a:73:f3:32:e1:ee:c2:aa:c4:2c:e1:a9:24:b6:d4:b0:
a3:ed:8a:70:d3:4a:b4:50:9e:12:1c:ed:89:9d:5a:72:36:44:
25:ab:9e:f1:3a:71:3b:bc:c0:b7:35:71:8c:7e:34:ef:fa:46:
00:10:38:4f:cc:28:02:b5:40:54:a4:36:0d:0b:28:38:f6:05:
c7:bf:13:24:7f:c0:07:b5:49:20:fc:f4:0e:d0:96:37:79:37:
c9:43:36:05:a0:32:74:fc:bb:3f:43:ea:89:f7:4e:94:b8:73:
9e:02:7a:b4:9c:dc:ad:a5:b1:15:ab:1c:45:a1:ef:c3:6b:f2:
5d:1b:da:40:5c:d7:ae:14:f5:f7:8b:66:d8:05:97:80:e7:ce:
06:a6:6c:94:fc:f1:18:dd:23:2e:2c:28:dc:14:8c:0c:05:a9:
35:3c:7c:3f:a4:4c:35:fa:d8:94:55:0a:c8:de:fc:51:10:e9:
2b:61:59:0c:be:eb:4e:9b:49:4b:24:81:d4:b2:b5:4d:cd:19:
78:62:02:03:13:78:94:1d:e5:b9:00:eb:a4:bf:84:de:b3:93:
62:29:68:34:5d:85:a9:c7:3b:2c:18:e0:c1:2e:cf:1a:ad:2d:
f9:c3:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:01 2026 by rpki-client