
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
File: U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft (raw, json)
Hash identifier: wu090kjK3HCxQ7/KCfw7qxu+u+2MGfYUVFaQ8Ytu0Ps=
Subject key identifier: 3D:37:11:5F:7D:C3:C7:BF:53:6D:4D:AE:10:C1:59:03:82:F3:F9:91
Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
Certificate issuer: /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
Manifest number: 01D8
Signing time: Thu 23 Jul 2026 05:00:27 +0000
Manifest this update: Thu 23 Jul 2026 05:00:26 +0000
Manifest next update: Thu 30 Jul 2026 05:00:26 +0000
Files and hashes: 1: U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl (hash: T0slRVky3NBdMyFuxfqxZHlZpQwuuQyOiadpz5/NHH0=)
2: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (hash: 0+cim1nNJ/HzloRjHXoa1S1TFcu0JHUvJvdwHP5Hs9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Validity
Not Before: Jul 23 05:00:26 2026 GMT
Not After : Jul 30 05:00:26 2026 GMT
Subject: CN=6a619fea-29e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:81:65:ee:7c:3b:1e:f4:62:6e:c7:e2:a8:
4e:82:4a:03:19:a0:ce:1c:5e:35:96:48:f9:e1:d9:
6e:e8:cd:50:93:97:2e:62:79:59:1e:ba:48:91:b3:
de:e8:6e:4b:f7:7e:06:28:fb:ae:16:58:17:2f:33:
88:16:93:b0:de:8c:5f:b2:71:f9:d8:b3:3a:06:7e:
c5:bd:e2:eb:d9:49:9e:87:c3:73:d2:5c:97:e1:cd:
7f:59:bb:cd:d5:88:42:9a:9b:6a:7f:04:ca:89:c9:
13:ac:b4:4e:0c:77:81:84:b4:27:c6:06:6c:c7:3a:
48:0f:e9:2f:63:9c:56:8a:7e:7a:05:5a:b1:c9:72:
ce:3a:11:4a:0a:9a:bf:37:1a:fd:aa:18:79:c9:9c:
39:61:8d:a0:01:f2:c8:5f:1e:b9:5d:89:2e:c1:0b:
54:2f:8a:96:a5:c7:b4:6c:09:e1:a8:99:cc:85:7a:
75:d7:85:b0:3d:be:d7:f2:02:a5:5c:a1:f7:c8:43:
71:b0:8d:a0:82:60:b5:43:a6:f2:42:f1:65:56:2d:
ae:d8:ec:9c:62:c3:c1:26:0d:f9:94:ac:f8:27:54:
8a:47:a1:4b:ce:ee:a7:d9:ac:0c:0a:5e:59:80:c0:
66:f6:c3:7d:7d:15:31:3a:da:d8:c4:86:c4:e5:32:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:11:5F:7D:C3:C7:BF:53:6D:4D:AE:10:C1:59:03:82:F3:F9:91
X509v3 Authority Key Identifier:
keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:00:13:a9:43:b6:07:05:9e:9e:8b:97:69:d3:3a:a3:da:a2:
b7:21:59:e0:0f:9b:df:3d:c6:de:07:88:1a:7a:3f:59:c9:18:
51:31:ad:c4:66:50:94:f9:ec:84:76:cf:f6:c1:d9:1d:64:fc:
27:80:05:09:48:07:e1:b3:6d:dd:65:e8:75:74:e0:f4:9e:34:
ad:b6:1f:5e:cd:0b:6f:1a:b6:28:5f:9c:eb:33:e7:02:01:a5:
77:ef:ab:47:ff:68:d8:65:13:64:8b:d3:40:ca:26:64:06:88:
bf:6d:6b:f8:64:50:70:80:70:75:bd:86:8e:98:91:98:f5:16:
22:c6:1d:d8:87:e4:0e:04:3d:14:0a:89:ca:23:cf:9f:76:10:
0e:42:2d:d6:ec:65:9d:c8:31:21:28:df:3a:b6:01:17:5f:1a:
92:b5:b7:1f:3b:b3:f9:70:6c:f1:63:43:7a:69:3b:2e:a0:55:
67:e2:af:d7:c8:56:02:b7:6c:33:67:a8:0f:9d:c8:e8:bf:51:
d9:27:2c:f1:26:89:e2:17:81:16:ec:f8:ff:16:4e:5a:ca:5e:
ce:70:60:44:8b:e7:20:b2:63:07:f6:88:f5:12:2a:2c:3e:0a:
5f:c2:35:84:a9:c2:de:1a:d5:35:f7:a2:03:a3:dd:2a:42:87:
de:4d:f4:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwNzAxMTAvBgNVBAUTKDUzOUJCNzZDOEE0Mzc5QTRERTM5OUMwNTJEMzhDMUI0
NTNBNjZGMUIwHhcNMjYwNzIzMDUwMDI2WhcNMjYwNzMwMDUwMDI2WjAYMRYwFAYD
VQQDEw02YTYxOWZlYS0yOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn56BZe58Ox70Ym7H4qhOgkoDGaDOHF41lkj54dlu6M1Qk5cuYnlZHrpIkbPe
6G5L934GKPuuFlgXLzOIFpOw3oxfsnH52LM6Bn7FveLr2Umeh8Nz0lyX4c1/WbvN
1YhCmptqfwTKickTrLRODHeBhLQnxgZsxzpID+kvY5xWin56BVqxyXLOOhFKCpq/
Nxr9qhh5yZw5YY2gAfLIXx65XYkuwQtUL4qWpce0bAnhqJnMhXp114WwPb7X8gKl
XKH3yENxsI2ggmC1Q6byQvFlVi2u2OycYsPBJg35lKz4J1SKR6FLzu6n2awMCl5Z
gMBm9sN9fRUxOtrYxIbE5TKvLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD03EV99
w8e/U21NrhDBWQOC8/mRMB8GA1UdIwQYMBaAFFObt2yKQ3mk3jmcBS04wbRTpm8b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84OUM1NTk3Q0JD
MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi9VNXUzYklwRGVhVGVPWndGTFRqQnRGT21i
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U1dTNiSXBEZWFUZU9ad0ZMVGpCdEZPbWJ4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTA3MC84OUM1NTk3Q0JDMTAxMUVFOEJFQjEzN0FDNEY5QUUwMi9VNXUzYklwRGVh
VGVPWndGTFRqQnRGT21ieHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApQATqUO2BwWenouXadM6o9qityFZ4A+b3z3G3geIGno/WckYUTGtxGZQlPns
hHbP9sHZHWT8J4AFCUgH4bNt3WXodXTg9J40rbYfXs0Lbxq2KF+c6zPnAgGld++r
R/9o2GUTZIvTQMomZAaIv21r+GRQcIBwdb2GjpiRmPUWIsYd2IfkDgQ9FAqJyiPP
n3YQDkIt1uxlncgxISjfOrYBF18akrW3Hzuz+XBs8WNDemk7LqBVZ+Kv18hWArds
M2eoD53I6L9R2Scs8SaJ4heBFuz4/xZOWspeznBgRIvnILJjB/aI9RIqLD4KX8I1
hKnC3hrVNfeiA6PdKkKH3k30Yw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:30 2026 by rpki-client