
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File: u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier: fZNE+ko7yTwbEbRxlgpUSZsplVBgi3gE2XbBtladWl4=
Subject key identifier: 1A:43:40:52:9B:7C:61:F2:E3:0B:1B:32:A9:0F:6C:B8:0D:D0:10:DB
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial: 0299
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number: 028D
Signing time: Wed 13 May 2026 01:47:57 +0000
Manifest this update: Wed 13 May 2026 01:47:57 +0000
Manifest next update: Wed 20 May 2026 01:47:57 +0000
Files and hashes: 1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: itT6UyCJqCsuOhaU6e4mlpvNOirdKYd5H95HC8OnKa8=)
2: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: onPZDg24JU1SAnJ+1qdctr4Q+6RG244WKpPI60NUB8Y=)
3: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: AF+OSPPeJ/k4cpuI6pm2/IpiY0n6OFKaOYlrZAsamTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Validity
Not Before: May 13 01:47:57 2026 GMT
Not After : May 20 01:47:57 2026 GMT
Subject: CN=6a03d84d-02aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:f2:a1:50:c1:e5:c3:c9:3b:a0:46:c7:78:
3b:57:92:78:7b:7a:da:25:08:df:e3:ae:12:cf:e0:
a9:ad:2c:65:0a:48:6e:c4:82:6c:9f:68:c5:19:7e:
fc:f2:5f:59:03:67:ff:94:b2:22:fa:65:26:04:a6:
7f:e1:92:69:c2:3c:45:4d:0a:6c:55:50:ee:6f:f1:
2b:e3:d9:e6:b9:1d:fa:7a:ee:5b:37:cd:3e:c1:01:
86:99:08:f8:af:ad:b8:79:7d:9c:fb:57:97:d5:b3:
a7:21:0a:b9:25:b2:a9:98:0d:50:3a:20:3d:14:07:
7b:9a:63:a2:12:5d:df:c7:d6:4d:ba:e5:78:8b:95:
71:51:40:cf:c9:78:80:2f:f5:f8:e2:09:15:13:fb:
cf:f1:98:7e:8e:99:0b:e6:1f:1f:12:0d:f6:9d:56:
88:5e:8d:69:c9:23:6a:3b:2b:c2:87:da:94:21:90:
91:04:11:e0:7b:bf:b8:0e:f5:d6:21:8e:a9:a3:cb:
74:8f:db:a1:77:88:6d:6b:2d:15:0a:ea:31:82:4b:
ba:6e:ee:1d:c3:2c:b2:c9:d2:15:75:eb:07:04:ef:
71:86:f4:00:d0:0d:b7:99:33:d6:4b:62:e3:e9:75:
20:68:95:0c:07:7a:8a:8b:90:fd:1d:35:b2:19:f9:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:40:52:9B:7C:61:F2:E3:0B:1B:32:A9:0F:6C:B8:0D:D0:10:DB
X509v3 Authority Key Identifier:
keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:23:e6:d3:ec:6a:7e:54:f3:ee:7c:e4:78:8a:20:62:0f:be:
db:92:94:e7:15:10:29:0f:39:c0:4c:a7:65:8e:52:23:11:f5:
aa:38:1d:e8:bd:d4:c9:c6:d4:7e:09:ee:f8:1f:c2:19:ea:ab:
0c:17:58:82:9c:4f:08:df:92:f8:a9:ca:0d:ea:00:c3:b2:6d:
d7:9d:bc:1f:4e:e0:f3:5d:44:bc:c8:9d:29:a9:bd:16:27:f4:
1f:14:71:cb:4b:8e:a4:4b:d4:ca:69:03:77:de:76:ce:8d:67:
2f:d6:5c:69:1b:b1:bc:ce:41:23:57:f1:45:86:75:08:ab:75:
a5:5c:4b:7c:a4:51:71:47:42:5f:77:fb:70:f6:64:b1:e7:21:
d9:c3:bd:8a:84:64:26:c2:b2:67:15:6c:16:1a:2c:c1:00:33:
5d:4a:df:3d:13:0c:4a:1a:7a:31:7b:f1:00:4f:97:4e:ae:3d:
17:74:8a:d7:79:38:03:3f:28:e7:62:6f:43:0b:5f:0b:4a:0e:
12:23:67:ad:fc:8e:9c:2f:af:27:87:2d:4b:3c:fa:99:81:69:
24:07:7f:a7:7a:80:c3:b3:cc:10:88:99:9c:2a:4e:c8:da:7c:
24:89:b1:4c:59:78:10:f9:c1:9e:0d:64:fc:f3:d7:81:c4:0c:
21:6e:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:08 2026 by rpki-client