
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json)
Hash identifier: DRmc/dktfuL2qu914Ogn7+SOkRTcq3tfHmqhGKXNwrE=
Subject key identifier: D4:9D:23:F6:B8:87:EE:03:6C:FC:8C:03:CF:29:FD:AD:EF:FE:8F:F7
Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B
Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
Certificate serial: 066A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
Manifest number: 0663
Signing time: Sun 10 May 2026 22:40:00 +0000
Manifest this update: Sun 10 May 2026 22:39:59 +0000
Manifest next update: Sun 17 May 2026 22:39:59 +0000
Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: i0ci1k3Dsl6WO0MzbW7GFCJaV3TAiM4IBm2bGFHS8mI=)
2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: XRS9X+c5H6+PF5E3AA5+5JCGv1T1c0IZvsE7D/UMy8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl
rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 22:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B
Validity
Not Before: May 10 22:39:59 2026 GMT
Not After : May 17 22:39:59 2026 GMT
Subject: CN=6a010940-df5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:9f:2c:31:05:04:46:ee:69:f5:38:1d:27:
c8:b2:86:a3:2a:cd:92:06:87:da:49:4d:1d:46:27:
ea:58:d4:72:0f:28:a2:46:36:a3:70:b9:9b:d2:2f:
a2:43:ea:bb:a2:54:28:45:1d:80:ac:cf:d6:f5:9c:
5f:6b:b2:e1:d7:f7:bc:f8:28:07:08:a1:2c:76:58:
12:8b:ba:da:e2:9f:b2:07:2e:d9:64:a7:dd:88:e9:
74:0a:8e:21:0e:fd:b5:24:a3:42:ac:0c:e2:a5:c8:
8d:02:da:b4:41:66:dc:82:43:11:16:c4:b7:19:fb:
82:f8:09:ae:fd:6c:d5:06:50:01:22:00:6d:7f:84:
d6:08:d9:4a:00:b7:1c:18:e1:2a:34:69:eb:69:e1:
9a:d9:66:06:32:7d:53:70:42:c1:df:61:c4:c3:a8:
bc:1a:f3:2d:b3:22:98:55:20:d2:03:27:0a:4a:b4:
82:f5:db:24:95:fe:c3:f3:8c:72:44:70:d4:30:57:
95:24:c5:ea:cc:eb:f2:c3:6b:62:45:51:9d:52:95:
cb:5c:6b:e0:6d:c6:c1:db:6f:88:18:df:e3:fc:57:
93:4e:d8:a8:df:f9:5f:99:57:75:57:c5:d5:36:3c:
53:d7:f2:a0:5f:73:20:aa:a3:84:11:63:7f:4f:ea:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9D:23:F6:B8:87:EE:03:6C:FC:8C:03:CF:29:FD:AD:EF:FE:8F:F7
X509v3 Authority Key Identifier:
keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9f:d2:9b:be:01:05:87:e3:4e:b7:5a:e1:9a:a4:4b:06:30:
62:30:54:06:ee:a9:7f:84:98:2c:29:43:f2:a8:d6:0e:09:b3:
44:f8:89:8f:1f:3d:19:77:97:26:99:d9:33:8a:7d:33:95:01:
37:02:29:7e:ae:7b:83:2f:e2:22:dd:01:3a:f7:15:24:2d:40:
72:ee:ca:9f:de:d3:8f:5e:dd:21:21:65:51:bf:78:fa:6f:e0:
62:cc:80:b9:4d:20:b6:30:64:70:fb:5d:bf:82:5e:6a:ec:f2:
01:ff:80:20:c0:7b:63:b7:1d:96:2f:5c:15:e1:14:56:b7:aa:
57:7c:38:1a:02:36:f3:ee:14:4a:9c:c4:b7:ee:84:da:d6:c0:
96:de:9c:3a:90:7c:83:62:27:cd:66:0b:60:8f:ab:a2:44:62:
d0:c4:03:3d:a6:38:97:50:88:f7:77:03:d8:cb:df:66:77:9e:
6c:2c:59:d4:22:05:a7:02:34:f0:46:8d:59:1e:b2:50:82:ad:
6d:ed:95:c4:19:89:22:06:cc:2b:22:82:82:a7:2b:9b:dc:7e:
a0:e7:89:58:51:df:af:b5:fa:5f:8c:b2:46:2a:e0:a1:a5:b3:
19:74:07:56:ea:e0:92:35:99:f8:8b:82:36:01:20:a5:d8:75:
42:af:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:06:59 2026 by rpki-client