
$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier: 08swzON1RR02pGE9DQAtkqtMI1j8jG1ZxHxnm9EIg0o=
Subject key identifier: 61:79:E3:C1:22:A3:B9:03:90:9F:BD:04:59:2E:52:C9:E4:58:59:65
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number: 0265
Signing time: Fri 27 Mar 2026 01:41:29 +0000
Manifest this update: Fri 27 Mar 2026 01:41:29 +0000
Manifest next update: Fri 03 Apr 2026 01:41:29 +0000
Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: rcp1ni1YrHyncowyBTJLySogS2o8J9kuHdefSxijKuU=)
2: F69540BA810811ED9EA03683C4F9AE02.roa (hash: 1ls87L8wFBI3susqrdOibbBBgEFKgSyseB64cHDFqj4=)
3: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: YhFFk2hbxX7ipWmiEtRtt5VM5YND4GHLWqHWN4WPPew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Validity
Not Before: Mar 27 01:41:29 2026 GMT
Not After : Apr 3 01:41:29 2026 GMT
Subject: CN=69c5e049-1cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:4f:d6:f5:3f:49:b6:b5:65:c3:12:c4:fc:
59:d0:d9:fd:d5:45:3e:0f:8d:27:cb:29:a1:e5:91:
a9:d7:6d:88:be:80:04:d6:dc:a5:e7:70:21:ce:fe:
f9:7d:ea:a5:42:f4:93:87:1a:b9:f3:73:4e:db:8f:
c8:d7:f0:15:83:c5:48:3b:15:cf:aa:00:a5:b5:01:
e3:7a:99:ac:82:4f:9c:09:bc:ac:b0:dd:1a:eb:1b:
85:12:9f:e7:9e:e8:e8:49:e2:cd:3b:5a:59:45:d6:
49:34:8b:2f:c5:24:6b:24:59:c8:05:56:a8:78:9b:
dc:8b:63:f0:6f:c9:af:c3:cb:95:47:07:2e:7f:a9:
fe:b4:46:3d:59:75:e1:23:c5:91:83:8c:8e:2a:8e:
0f:14:d7:78:7d:50:bb:bd:66:a7:34:f9:75:be:23:
1e:78:67:95:3a:4b:7e:50:51:64:19:66:8e:54:7d:
61:0e:e9:80:1a:8b:73:9f:9b:e4:99:63:20:12:fd:
34:e7:0d:26:bb:2c:93:83:0f:d5:61:98:80:64:17:
e7:00:2d:9a:e2:4e:65:5c:c4:e6:86:7d:5e:31:34:
94:c0:c3:eb:08:60:1b:4c:91:b5:60:b7:db:ce:cc:
4c:09:31:85:c2:01:fa:7e:94:68:7d:a4:ff:c4:65:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:79:E3:C1:22:A3:B9:03:90:9F:BD:04:59:2E:52:C9:E4:58:59:65
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c8:fe:73:6a:ca:d8:ce:89:5a:03:38:72:42:0b:76:1c:5a:
3f:63:13:44:d5:8f:d5:22:db:85:56:96:76:a4:90:c5:12:23:
85:df:8d:9d:da:0f:b2:06:a2:18:f4:7f:57:1d:51:de:aa:f2:
c3:5d:a8:80:3f:31:05:d1:26:8b:99:f3:7f:c9:23:12:8f:b2:
d7:8a:2c:99:ca:ba:f8:a8:d9:95:77:4f:89:6c:b3:0d:9d:85:
e9:3e:eb:69:0f:24:02:6a:70:07:33:9b:8f:1a:fe:d8:e3:a5:
b1:4f:d8:0f:5e:d8:0a:69:e8:3a:ea:5d:95:9b:47:34:80:26:
e7:77:f1:b7:9a:3c:85:88:a3:dd:7f:9d:ef:f8:b1:9f:1a:bf:
23:35:f5:cb:63:cc:3c:11:a0:c4:56:44:63:f3:8b:21:5f:9b:
a3:85:8a:1d:a3:f4:e9:01:92:41:4a:1f:ba:90:96:45:da:71:
26:a3:4a:a8:3a:87:2e:03:50:5c:06:f6:b2:28:d0:4c:f8:8c:
d2:66:65:77:a0:7b:d3:f7:a5:38:5d:07:7a:f5:eb:e1:df:87:
11:b8:11:c0:0b:e7:64:f4:a6:07:e8:a3:18:83:5a:67:49:f6:
40:0a:be:43:8d:e0:86:2d:5b:c0:45:8b:6f:5f:01:4c:1b:3d:
78:7d:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:04 2026 by rpki-client