
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File: 0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier: sM3BZ76ApWuQegskkmJCqd+Xmgry+XoLpEBy5XDWsok=
Subject key identifier: 5F:E6:13:A8:5E:A1:20:BF:B0:39:ED:21:DF:8F:AA:E8:C8:56:53:71
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial: 0760
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number: 0730
Signing time: Tue 22 Sep 2026 21:50:40 +0000
Manifest this update: Tue 22 Sep 2026 21:50:40 +0000
Manifest next update: Tue 29 Sep 2026 21:50:40 +0000
Files and hashes: 1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: eV2ZOL5/ccy5IV1aVjN8GqXqNR6PqjCxBSPYKV18pnA=)
2: F32A5AEA9B8611F1B4386D6F4511F970.roa (hash: hC8DUUi3h7ApLUuU4cOKlMcdfzPUe8RieSnJ4Y0WyCc=)
3: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: 211xEjDsnDyQAXNRqQMMENUPbgNnfotqpOqOJlVt87Q=)
4: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: 9gnnOt+KjUGWNs4otjuLVwe8oX6fVgNUzwNG3C1IhnQ=)
5: F4BAE41A9B8611F1B4386D6F4511F970.roa (hash: BWEvHpZlHk2lCPCqxiJZlaQoZxUmZjbC4KZmOcnu+w8=)
6: F28152A69B8611F1B4386D6F4511F970.roa (hash: ubTAyK2cMn31ieelGGRwezGPlj1FMuE8SjyOIKfT1/c=)
7: F5D2F46E9B8611F1B4386D6F4511F970.roa (hash: 0au6Si15nGK7eMBlSyZBhtsSwPZhCvIKY7Aeoqgl6Xc=)
8: F30D41529ABF11F1B22CABD14611F970.roa (hash: 85pNotyjZ8mxuBhPKNSC6QbezOpRGw5rRNH9Oy4noF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Validity
Not Before: Sep 22 21:50:40 2026 GMT
Not After : Sep 29 21:50:40 2026 GMT
Subject: CN=6ab2f830-21f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:e4:cd:ee:36:f4:47:e8:bd:7d:04:a7:99:
8c:b2:38:e5:a8:4f:02:b1:6e:e9:71:07:53:b3:28:
8f:44:c9:1e:3b:c9:3c:19:77:ca:cd:85:5f:0c:a4:
ee:65:e1:60:55:90:f5:e7:6b:dd:b2:8b:65:94:be:
ce:da:99:5d:f6:f9:05:56:0f:43:11:66:01:16:95:
dc:38:e8:90:02:e2:ae:bf:83:4c:6e:af:71:e2:e1:
d8:ae:b3:7f:25:c1:00:22:fe:96:1d:28:28:5c:f8:
99:0a:51:57:a1:98:2f:5b:1f:0a:64:8a:b4:8d:ac:
dd:95:66:38:aa:0d:7d:64:48:53:e4:94:97:48:1c:
b6:f7:94:8f:45:9b:36:95:e6:ef:75:be:1f:80:7c:
e0:21:c5:63:0e:04:21:0e:af:24:30:8a:8a:2a:ac:
18:fb:27:33:ef:ec:e1:74:d2:39:a6:a8:cb:64:6d:
76:10:3f:72:44:b9:39:c6:57:a4:6d:8a:0b:72:78:
96:fd:43:bc:41:74:20:77:59:68:31:96:48:75:6c:
e8:03:1a:c4:65:25:31:6e:34:17:b5:99:96:87:ec:
4f:ed:af:59:02:44:01:ee:c9:69:bc:e9:ac:3e:cb:
61:1c:0e:d8:0a:2e:fc:bd:64:96:f0:17:c7:ce:ad:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E6:13:A8:5E:A1:20:BF:B0:39:ED:21:DF:8F:AA:E8:C8:56:53:71
X509v3 Authority Key Identifier:
keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:a7:ab:30:b9:83:05:3c:25:f6:8d:a4:c6:68:10:40:05:77:
0b:c3:17:b1:09:c7:a7:8c:b9:21:74:6d:7e:9b:b6:ea:23:1d:
7f:ed:72:61:df:bf:f2:b4:63:45:70:18:44:6c:91:fa:33:04:
a5:51:0d:26:23:ab:08:db:36:67:42:ff:ba:99:58:05:44:30:
96:b0:b9:df:ae:81:e9:2c:b9:cd:fe:99:e6:34:cd:6c:c2:e5:
0f:db:88:7f:69:8b:7e:8c:05:2b:6e:37:dc:15:97:83:97:e6:
a4:4d:98:a4:b0:21:96:0e:aa:b0:7d:1c:2e:30:3e:75:ae:c3:
4b:25:69:1d:b4:fd:0d:b0:be:78:fd:ac:09:aa:08:3d:25:de:
88:f4:0b:53:59:5f:9f:1a:ba:d8:5f:4f:0c:c7:7b:ee:f6:11:
b6:86:90:ba:81:91:ea:ad:7b:ff:d6:6e:af:f8:a4:08:0b:04:
ca:14:d1:ac:d7:35:f9:8a:86:8c:cf:08:96:6c:e2:81:31:6b:
6d:c3:f4:b8:a0:3a:36:d5:26:09:d9:e7:6c:82:3c:fb:41:5a:
15:a3:f1:da:76:02:fd:a1:2b:88:7c:0c:b9:73:f5:3f:4e:bb:
d0:83:fe:fb:1f:59:05:82:95:79:f0:b4:93:d7:f6:bd:04:74:
f8:59:04:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjYwOTIyMjE1MDQwWhcNMjYwOTI5MjE1MDQwWjAYMRYwFAYD
VQQDEw02YWIyZjgzMC0yMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Ankze429EfovX0Ep5mMsjjlqE8CsW7pcQdTsyiPRMkeO8k8GXfKzYVfDKTu
ZeFgVZD152vdsotllL7O2pld9vkFVg9DEWYBFpXcOOiQAuKuv4NMbq9x4uHYrrN/
JcEAIv6WHSgoXPiZClFXoZgvWx8KZIq0jazdlWY4qg19ZEhT5JSXSBy295SPRZs2
lebvdb4fgHzgIcVjDgQhDq8kMIqKKqwY+ycz7+zhdNI5pqjLZG12ED9yRLk5xlek
bYoLcniW/UO8QXQgd1loMZZIdWzoAxrEZSUxbjQXtZmWh+xP7a9ZAkQB7slpvOms
PsthHA7YCi78vWSW8BfHzq0snwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/mE6he
oSC/sDntId+PqujIVlNxMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFKerMLmDBTwl9o2kxmgQQAV3C8MXsQnHp4y5IXRtfpu26iMdf+1yYd+/8rRj
RXAYRGyR+jMEpVENJiOrCNs2Z0L/uplYBUQwlrC5366B6Sy5zf6Z5jTNbMLlD9uI
f2mLfowFK2433BWXg5fmpE2YpLAhlg6qsH0cLjA+da7DSyVpHbT9DbC+eP2sCaoI
PSXeiPQLU1lfnxq62F9PDMd77vYRtoaQuoGR6q17/9Zur/ikCAsEyhTRrNc1+YqG
jM8IlmzigTFrbcP0uKA6NtUmCdnnbII8+0FaFaPx2nYC/aEriHwMuXP1P0670IP+
+x9ZBYKVefC0k9f2vQR0+FkEjw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:39:50 2026 by rpki-client