
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json)
Hash identifier: QwrGgstt4fm3nbs8qWmJcsCHdUCSjnFNDtHlxiZXJdw=
Subject key identifier: 10:1A:BB:49:FA:11:6D:19:B8:63:FE:91:F3:2E:B1:85:B0:BC:28:56
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial: 1A12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
Manifest number: 19CF
Signing time: Tue 06 Oct 2026 16:26:23 +0000
Manifest this update: Tue 06 Oct 2026 16:26:22 +0000
Manifest next update: Tue 13 Oct 2026 16:26:22 +0000
Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: 6rTYwQ+GYxLEL4YI9pmlHDALwfCMZJNjVeVFvPvViz0=)
2: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: +QPaOTzsYcDUAUvNxpTVcXHZWmUjQuxmYgXKopDnz4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6674 (0x1a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Validity
Not Before: Oct 6 16:26:22 2026 GMT
Not After : Oct 13 16:26:22 2026 GMT
Subject: CN=6ac5212f-85fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:89:bd:d1:98:01:d9:c7:f9:c4:07:41:f5:
68:a3:b0:fb:be:5b:98:8e:c4:f3:b4:48:33:3f:d1:
d7:f9:9b:5e:ad:c9:ac:fb:f7:e4:06:b1:29:f4:6b:
d5:fc:87:60:91:a8:7c:b2:ac:1d:4e:95:6e:fe:9f:
c0:63:de:92:7d:46:26:d8:04:9c:d1:bb:e3:cc:3b:
f8:9c:df:a0:8f:eb:18:af:11:97:88:ad:76:79:ed:
98:50:2d:6f:ad:06:75:70:34:5d:22:5d:6c:7a:d2:
d5:85:00:c2:bd:54:2d:16:24:94:36:83:a5:5a:f2:
0e:0f:45:db:ac:7c:b8:d7:3b:6a:50:5a:12:20:98:
40:99:66:0e:8d:01:f9:54:c5:77:0b:f4:5b:64:0c:
0f:d9:3f:07:cd:de:70:d3:be:f4:49:32:d4:fc:ed:
47:4b:a4:2e:2b:db:73:53:fa:50:b8:fe:38:22:a7:
39:63:38:46:12:9a:35:a9:a3:70:6d:b5:12:9a:dd:
1e:f4:b5:88:12:08:f3:6d:23:06:b3:69:fc:82:8b:
f5:84:4c:49:9e:62:00:98:51:69:33:89:0e:da:b4:
ee:92:a8:3a:77:0a:77:53:02:fe:e9:e6:af:75:33:
5f:d5:89:bc:8c:08:81:81:fe:13:ec:d7:40:b8:b7:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1A:BB:49:FA:11:6D:19:B8:63:FE:91:F3:2E:B1:85:B0:BC:28:56
X509v3 Authority Key Identifier:
keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ea:ed:12:e1:be:6f:51:de:01:33:16:00:35:d5:7a:96:a1:
e1:8d:1e:e2:31:e3:3c:df:2e:8a:d6:04:af:84:b4:ac:f8:c9:
f8:e5:c3:e3:cf:03:8a:91:f6:8a:f9:f6:ff:7b:34:5d:fc:e1:
bc:d6:65:82:a5:05:b9:9d:fb:40:fa:aa:f6:86:80:cc:0b:9e:
d3:59:ab:0b:67:7a:d1:30:6e:d1:5a:04:3c:60:45:32:7f:3e:
b1:0e:8d:3a:d2:1e:c3:21:96:f3:88:2b:2f:58:4f:cd:4c:7e:
4f:f8:f2:ca:54:44:99:30:d2:10:7b:38:6f:89:f5:91:48:8d:
b9:69:fb:87:6d:34:22:d2:06:a8:3d:50:8d:f0:4c:10:04:f5:
22:fe:fa:5b:56:d5:0c:31:52:97:b0:1d:04:c2:fb:d1:d9:2a:
c6:88:6a:25:95:b0:71:c2:24:89:cc:e2:ac:14:10:73:fb:1c:
e0:ad:0c:c0:19:5a:18:a5:07:0f:f0:3e:e8:3c:d1:d9:27:9d:
b3:49:52:d0:01:52:1a:9c:a8:48:dc:d4:fa:a8:9a:69:dc:dc:
0b:a7:16:67:5a:f0:b5:a4:ff:0f:df:3e:ce:02:6c:e1:41:e7:
82:93:59:82:cc:68:d0:ce:f7:77:0b:42:cd:97:19:e1:22:0d:
f9:69:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:26:01 2026 by rpki-client