
$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json)
Hash identifier: tkyuPBoCxEsrudQNdRbOvOoL1+GhNojlvnqStjWngqE=
Subject key identifier: ED:98:A7:BC:C5:CF:00:F8:70:48:34:23:C2:B0:B9:99:07:F9:BA:3D
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
Manifest number: 02A0
Signing time: Thu 23 Jul 2026 02:43:07 +0000
Manifest this update: Thu 23 Jul 2026 02:43:07 +0000
Manifest next update: Thu 30 Jul 2026 02:43:07 +0000
Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: yKvi65W+B1IOQzpNAxi7a5R+rnHAqFlj3+L6HP4w1JY=)
2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: YhFFk2hbxX7ipWmiEtRtt5VM5YND4GHLWqHWN4WPPew=)
3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: 1ls87L8wFBI3susqrdOibbBBgEFKgSyseB64cHDFqj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Validity
Not Before: Jul 23 02:43:07 2026 GMT
Not After : Jul 30 02:43:07 2026 GMT
Subject: CN=6a617fbb-786d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:c4:aa:4f:61:1f:37:0c:c0:e1:10:20:de:
80:32:37:9b:de:a0:e6:2c:9c:73:c1:33:b2:74:72:
a7:c2:2a:5f:c2:a6:24:22:16:6b:cc:c3:28:8e:5d:
f6:d4:e3:9a:40:62:14:6a:db:d7:f6:8a:33:8a:0f:
2f:7d:31:25:d6:93:1b:61:5d:bc:fb:34:dc:83:fc:
b9:60:8c:40:d6:c7:83:6f:03:38:13:22:05:f4:69:
27:ca:db:42:1c:0c:ad:be:aa:ba:3c:02:b3:af:34:
fc:92:17:09:45:90:35:b1:64:8a:b9:9f:40:8e:24:
6f:75:f6:81:e7:3d:31:18:e2:94:1b:47:8d:0a:5b:
ea:ed:13:bf:12:c7:36:d4:02:49:0b:4e:df:d2:95:
e3:95:42:53:d9:87:a3:9a:39:8f:cb:03:03:fa:41:
22:e4:c4:25:bf:9a:80:ee:f6:48:a5:84:21:af:bb:
94:45:f0:e5:b8:c3:6b:4c:1b:49:6b:52:66:ad:53:
25:6e:f8:2d:b5:4c:68:07:56:3f:7d:9a:7e:88:78:
c3:fe:a5:8f:8a:b6:7f:c9:ca:e1:97:78:d0:50:04:
28:51:1e:b5:89:c1:bc:c5:e1:ac:d6:20:7b:1d:62:
97:06:0d:34:8c:c5:b9:58:c2:84:f5:44:1a:1b:be:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:98:A7:BC:C5:CF:00:F8:70:48:34:23:C2:B0:B9:99:07:F9:BA:3D
X509v3 Authority Key Identifier:
keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:10:dc:34:4b:0c:cb:1a:ce:4c:91:48:ed:d7:00:e1:f4:9f:
89:bf:7f:11:dc:95:3a:d0:2e:87:cc:82:1b:62:95:f2:84:fa:
04:b7:01:84:88:c6:0d:93:b3:1b:1f:e3:8b:26:c1:7f:1f:a5:
4d:dc:13:f2:41:e7:5f:d9:7a:3f:df:a8:8e:89:2c:cd:5e:c2:
9d:24:c3:e7:05:12:27:f6:0e:8b:03:73:04:13:51:00:8a:7e:
3c:13:02:bb:67:49:0c:82:eb:ef:76:e5:cc:3e:fe:a5:7f:fe:
33:a4:74:55:67:58:7d:30:a1:af:d3:4f:f1:3c:f3:98:4b:13:
f2:fe:de:bb:41:f4:2e:a5:74:7e:78:c1:8c:b3:b4:80:60:4b:
2f:a8:65:12:46:f2:40:92:e5:a2:2e:d1:cd:eb:cd:0f:56:4d:
d8:3d:3c:da:42:0b:a0:f3:b3:d1:ed:41:f5:a3:7a:f4:23:b0:
7f:10:20:54:74:52:b6:2e:47:bd:18:a4:6b:0f:10:a7:5d:72:
71:bf:17:d7:91:13:89:5d:7c:8d:04:28:da:7c:4b:78:4f:75:
e0:20:6b:61:a8:1f:62:e7:be:79:a2:8f:bc:c0:14:d2:08:dc:
93:cf:be:39:4f:f0:26:5a:f1:60:1a:25:db:88:fb:20:98:e4:
14:c9:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:25 2026 by rpki-client