
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
File: U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft (raw, json)
Hash identifier: qBgs265fitf1L35kDYt5f3dSCZ8a4CTIzdSOVRi2g4g=
Subject key identifier: A3:35:13:45:68:5B:2D:22:3C:5D:B3:4B:4A:B6:21:30:DB:69:EE:4B
Authority key identifier: 53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
Certificate issuer: /CN=A9130837/serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Certificate serial: 05A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
Manifest number: 059B
Signing time: Thu 24 Sep 2026 23:04:51 +0000
Manifest this update: Thu 24 Sep 2026 23:04:50 +0000
Manifest next update: Thu 01 Oct 2026 23:04:50 +0000
Files and hashes: 1: U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl (hash: 1QFiYjH/lvSYcJYn71ZRcjfj7vpwYC79GipVGKN9rYw=)
2: 1C032F5A36E711EC9581EC54C4F9AE02.roa (hash: bR2E+gd+wrOJUwU1dHm00di9g4h4d99vt7PxzQB7b14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl
rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130837, serialNumber=5368B8C8D6963EAD839905A486F53C44B041A5EF
Validity
Not Before: Sep 24 23:04:50 2026 GMT
Not After : Oct 1 23:04:50 2026 GMT
Subject: CN=6ab5ac93-adba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:b7:e4:23:92:53:a6:14:d6:cd:61:25:c5:
1d:58:0c:0a:85:90:2f:5c:b3:34:50:f3:7a:d4:50:
c0:7b:ad:18:8f:97:16:bb:b8:55:68:19:fa:36:18:
0d:0d:83:fd:51:e6:c3:f8:64:39:6f:93:08:a8:9d:
ba:14:68:c0:61:30:d2:2d:50:60:ef:ed:01:dc:18:
b0:dc:b3:71:63:6c:04:f9:69:7c:eb:c9:35:23:6a:
0d:48:39:65:03:91:e0:df:60:2a:2d:bc:83:23:ae:
d6:10:bf:1c:0f:d6:9c:19:0c:66:52:65:e0:4a:75:
c5:bf:43:3c:29:fb:46:0c:3d:30:89:2c:9d:23:a8:
c5:a2:86:16:4a:10:55:6e:80:45:7b:42:3d:d3:ea:
12:a9:4d:1d:3e:58:be:8f:4c:53:36:f9:19:3a:37:
7e:f0:22:aa:ba:59:34:52:e5:b9:b7:77:3c:f6:b8:
1b:c1:d7:c2:05:31:4a:59:da:f5:34:b7:c8:7a:16:
73:33:6b:aa:47:ac:48:79:81:b5:fd:ca:21:da:11:
57:8f:2b:35:c9:e7:b9:fb:ee:42:9d:6c:f3:76:fd:
2d:5a:59:5e:2d:6b:03:0d:f4:4f:3e:1f:9b:ad:8f:
5f:a7:25:ba:72:34:a3:1f:42:3b:a0:8a:e2:07:19:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:35:13:45:68:5B:2D:22:3C:5D:B3:4B:4A:B6:21:30:DB:69:EE:4B
X509v3 Authority Key Identifier:
keyid:53:68:B8:C8:D6:96:3E:AD:83:99:05:A4:86:F5:3C:44:B0:41:A5:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2i4yNaWPq2DmQWkhvU8RLBBpe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130837/E3F87CB236E311ECBC8CC250C4F9AE02/U2i4yNaWPq2DmQWkhvU8RLBBpe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:be:67:28:4b:d3:d0:f6:da:f5:12:8d:09:5f:3e:e2:a0:
f6:f4:05:c4:ad:eb:7a:d3:e4:11:88:ac:f5:06:b5:88:e7:45:
04:b6:a0:0e:e1:70:ce:c1:7a:84:08:9a:73:60:9c:b9:87:7a:
04:5e:74:4e:6d:06:17:65:5e:69:71:87:bf:da:42:34:ba:93:
f0:59:95:88:46:6a:ad:3e:8a:10:26:83:25:42:c8:0c:fb:77:
7f:7f:be:8d:56:f2:ba:6c:4f:85:49:0e:19:aa:3f:62:3d:02:
c8:a3:fc:ba:cf:a6:69:84:d3:86:77:ff:77:41:58:dc:b1:15:
99:c9:47:df:92:c7:7f:44:13:5a:d2:7d:0e:a8:b6:52:5f:6a:
63:70:97:f3:7b:7b:9f:d4:60:03:2a:f0:30:ef:0a:8f:74:fb:
ad:a6:a1:6d:fb:99:6e:e2:cc:d3:fc:f8:a6:cf:29:1b:ff:04:
9e:ea:ac:da:1b:23:af:68:70:14:86:5d:46:c7:99:60:98:83:
c4:68:f2:87:04:6c:15:22:32:5d:c6:86:48:9d:f0:51:e8:2d:
f5:ab:61:d1:ea:c9:52:75:e0:6f:81:dc:d4:83:b4:56:52:0d:
57:ac:98:21:0e:44:71:80:c6:bd:b5:b3:ec:14:ff:d5:c1:72:
90:de:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:23:56 2026 by rpki-client