
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File: 0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier: vVnJiTEPemjjqbe2NC33LQ3ueGr+eIuEWtXqVCaJAuA=
Subject key identifier: 22:A9:F1:F7:39:1A:C5:EF:B2:52:9C:D6:AA:4F:F7:CF:89:11:B0:20
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number: 0707
Signing time: Wed 22 Jul 2026 22:53:34 +0000
Manifest this update: Wed 22 Jul 2026 22:53:33 +0000
Manifest next update: Wed 29 Jul 2026 22:53:33 +0000
Files and hashes: 1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: A2bULE2/WUqpdikpy6fvoL1Pqfw7h3KP2sVLOLtUKco=)
2: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: 211xEjDsnDyQAXNRqQMMENUPbgNnfotqpOqOJlVt87Q=)
3: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 9gnnOt+KjUGWNs4otjuLVwe8oX6fVgNUzwNG3C1IhnQ=)
4: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: CzrJ5PoscnPJXcdPQru0LSL38khcMwxqYo2Sgh7sIpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Validity
Not Before: Jul 22 22:53:33 2026 GMT
Not After : Jul 29 22:53:33 2026 GMT
Subject: CN=6a6149ed-56b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:f9:8d:1f:4d:3a:3b:ce:b4:5a:d9:99:d6:
83:32:10:f2:53:b8:28:5b:2f:b7:bd:af:95:1f:9e:
1f:0f:3d:66:02:c4:1c:96:24:94:ab:08:71:fd:1c:
df:e0:96:77:51:ff:a7:e9:87:27:15:6b:0d:61:23:
fa:ae:0a:1b:78:5e:27:13:90:b0:1b:a3:35:b6:2c:
e0:55:c7:f1:46:34:6e:db:ef:0d:f8:65:15:66:7d:
b0:85:31:91:63:ba:7d:36:60:a7:a6:c3:c7:60:13:
45:2a:1c:ba:1c:da:e3:74:bd:b9:4b:be:56:06:53:
78:70:53:9c:d9:7b:7e:c0:f1:9a:a0:20:75:ba:a4:
42:49:d9:cd:e1:08:fe:48:33:5f:f6:89:3f:80:dc:
f9:6a:60:85:af:83:7c:ad:61:6a:b1:aa:52:73:f1:
70:41:65:b1:17:5c:e6:cc:8b:2d:60:0c:07:e0:15:
9d:f0:6b:bd:74:2d:84:99:34:be:66:98:b3:97:f2:
bb:3a:c2:6e:41:a0:db:00:11:c9:a3:0b:5c:51:22:
da:38:01:c0:f9:72:bf:48:de:1d:fe:f1:f8:31:02:
b5:b4:9a:94:de:2b:20:2c:5d:b3:ba:f3:8a:70:b7:
8e:6f:00:6d:15:11:89:ad:ef:90:36:50:bc:8f:2e:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A9:F1:F7:39:1A:C5:EF:B2:52:9C:D6:AA:4F:F7:CF:89:11:B0:20
X509v3 Authority Key Identifier:
keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:45:5d:0d:a7:ad:f9:57:1a:89:2e:ab:63:ad:52:1a:19:c4:
06:b4:e8:df:6f:5a:9e:18:6e:5b:77:ce:55:e7:98:90:8b:72:
de:67:17:9a:c0:3e:d7:c7:c0:98:d9:c4:2c:f1:f1:fd:97:5b:
a2:b2:0c:a8:1a:aa:88:5a:0b:2d:46:57:a6:96:dc:22:fd:69:
45:8f:9a:14:c2:66:2a:f3:47:47:e1:22:e3:7b:66:88:3a:f8:
33:93:1f:45:44:1d:5b:bf:c5:52:b8:56:7b:56:ff:c1:56:a6:
88:1f:8f:8f:b8:da:b6:8d:d3:03:9f:e1:1c:a1:81:ad:fe:d3:
fc:76:67:0d:80:a1:65:4e:6e:bf:68:00:60:4f:8a:82:9e:1a:
41:dc:b3:fa:6b:f5:af:d4:e5:73:db:dc:a7:4f:ac:8c:85:70:
3d:8a:e6:ae:9d:89:79:01:83:d5:7a:69:11:88:cb:44:60:8f:
6c:f5:f1:42:43:51:ac:ef:7d:31:5d:dd:15:97:5d:00:04:05:
29:5c:26:0f:67:81:2b:18:cb:b7:36:03:85:45:0c:50:9a:0b:
a9:4d:b5:78:78:66:9a:13:e7:4a:8d:dd:9d:75:74:fe:2a:35:
97:35:dc:ac:9d:19:98:a7:ac:6c:3a:19:99:90:8a:85:97:26:
ff:ad:36:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjYwNzIyMjI1MzMzWhcNMjYwNzI5MjI1MzMzWjAYMRYwFAYD
VQQDEw02YTYxNDllZC01NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyKP5jR9NOjvOtFrZmdaDMhDyU7goWy+3va+VH54fDz1mAsQcliSUqwhx/Rzf
4JZ3Uf+n6YcnFWsNYSP6rgobeF4nE5CwG6M1tizgVcfxRjRu2+8N+GUVZn2whTGR
Y7p9NmCnpsPHYBNFKhy6HNrjdL25S75WBlN4cFOc2Xt+wPGaoCB1uqRCSdnN4Qj+
SDNf9ok/gNz5amCFr4N8rWFqsapSc/FwQWWxF1zmzIstYAwH4BWd8Gu9dC2EmTS+
Zpizl/K7OsJuQaDbABHJowtcUSLaOAHA+XK/SN4d/vH4MQK1tJqU3isgLF2zuvOK
cLeObwBtFRGJre+QNlC8jy6i1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKp8fc5
GsXvslKc1qpP98+JEbAgMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXEVdDaet+VcaiS6rY61SGhnEBrTo329anhhuW3fOVeeYkIty3mcXmsA+18fA
mNnELPHx/ZdborIMqBqqiFoLLUZXppbcIv1pRY+aFMJmKvNHR+Ei43tmiDr4M5Mf
RUQdW7/FUrhWe1b/wVamiB+Pj7jato3TA5/hHKGBrf7T/HZnDYChZU5uv2gAYE+K
gp4aQdyz+mv1r9Tlc9vcp0+sjIVwPYrmrp2JeQGD1XppEYjLRGCPbPXxQkNRrO99
MV3dFZddAAQFKVwmD2eBKxjLtzYDhUUMUJoLqU21eHhmmhPnSo3dnXV0/io1lzXc
rJ0ZmKesbDoZmZCKhZcm/602ZQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:47 2026 by rpki-client