
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier: 7nNJNm/AG3BR2bfTW/AMZ238haVqIRt2PRD3k+WxZbs=
Subject key identifier: 92:17:5F:07:C8:5A:66:DE:29:9A:32:9B:04:DD:8A:FC:6C:35:81:66
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 02EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number: 02DD
Signing time: Sun 15 Nov 2026 01:14:59 +0000
Manifest this update: Sun 15 Nov 2026 01:14:58 +0000
Manifest next update: Sun 22 Nov 2026 01:14:58 +0000
Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: iY8K2sTZX+zc/UdUdHs+pbzcXjiEbdTndo1N+CwZtac=)
2: F69540BA810811ED9EA03683C4F9AE02.roa (hash: kjANU+m8NGi3/h3kcs2+JMjQaSUpPN4ROitBH9ohYXU=)
3: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: jXby300bLqk6OmsYVLmwjByJkTyNtDhvbMpxkEk+1XE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Validity
Not Before: Nov 15 01:14:58 2026 GMT
Not After : Nov 22 01:14:58 2026 GMT
Subject: CN=6af90793-07b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:23:d7:93:58:23:84:2e:96:da:2a:de:1d:
55:b8:8a:2e:cd:d2:b5:31:dc:f9:26:9a:ff:22:ed:
34:a4:8c:e6:bb:aa:24:bd:f5:7d:42:57:4e:17:d9:
31:38:79:70:e9:60:75:30:8f:47:f5:c5:f1:ec:d0:
13:91:11:fa:2d:23:60:13:8e:a2:04:34:2f:72:91:
40:52:3e:39:11:f2:42:11:bc:d0:1b:63:86:e5:3a:
f5:d5:5b:01:0a:70:cc:25:e8:12:0b:8a:95:5c:e4:
dd:69:16:4e:54:29:67:01:29:b2:ad:ac:4d:eb:18:
97:eb:c2:64:68:3b:7c:81:25:b7:d5:e8:67:8e:b8:
c4:1c:0d:1f:7c:80:7a:4c:89:15:b4:53:bf:2a:89:
a3:be:34:1b:23:10:68:fd:03:95:78:ad:14:dd:f4:
51:0c:ba:2c:92:6b:4a:54:13:48:a9:4d:9d:96:4d:
81:19:31:61:64:50:b6:3c:f3:3c:fe:ca:d3:12:1f:
22:75:f5:06:af:e7:0a:99:13:ed:27:01:1f:49:67:
e8:73:a4:44:74:fb:49:73:67:95:45:e7:08:b4:05:
e7:a1:d9:b8:8e:4a:5b:6c:e3:68:50:9b:8d:a6:49:
38:59:a2:7c:0e:ca:54:19:d1:95:1a:ab:46:73:9d:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:5F:07:C8:5A:66:DE:29:9A:32:9B:04:DD:8A:FC:6C:35:81:66
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:a1:d2:99:e8:8e:f5:2c:83:47:18:76:8a:4e:b5:cf:d7:
73:db:4d:4a:8e:e1:56:22:96:0b:0e:18:ac:4c:f7:ef:19:fb:
49:87:8a:5d:a1:82:99:97:1b:26:0d:08:10:7b:9d:02:0c:e8:
86:1c:aa:3f:65:26:b1:d4:a1:6b:bd:c6:63:98:42:ac:9d:f1:
8b:42:71:c0:cb:97:ca:4e:0f:6d:8c:4f:07:6e:5e:94:a0:54:
36:fc:d0:fb:7b:14:ac:f6:13:60:cc:de:cc:55:37:96:04:4e:
00:af:b8:37:e3:0b:de:02:98:a4:84:ae:31:a2:d9:5f:a0:7e:
48:a1:15:85:44:a4:8c:ab:74:5d:42:d5:7c:ed:89:fe:7f:9b:
57:c9:34:d6:dd:ea:3c:da:10:dd:ba:53:15:55:07:67:ea:6f:
15:ae:23:0e:4c:a6:58:a0:63:63:86:f6:0d:50:14:ae:92:37:
8b:25:6e:3d:fa:80:59:f8:b8:7d:51:1f:fa:40:d1:47:04:b2:
bb:1e:5a:93:80:b4:22:34:df:39:63:18:3b:d1:4c:3b:f5:fc:
c2:d9:00:5b:67:01:68:fc:9f:81:d6:5c:7d:41:7e:5c:c6:fc:
07:80:97:dc:8d:9f:1e:9c:f8:2f:f3:07:20:1c:78:4c:3c:2a:
55:0a:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:50:27 2026 by rpki-client