
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
File: U73ibYJfZ3-axChvmmdmH1xJtWk.mft (raw, json)
Hash identifier: mhgAIYcPvbKcnJsj5pkntapoV1s7QVBSvogr5cnOQuc=
Subject key identifier: AD:CB:1F:B9:E1:47:99:AA:59:5C:B4:6E:79:7A:CF:E6:17:D9:49:FF
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Certificate issuer: /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial: 09E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
Manifest number: 09BA
Signing time: Tue 12 May 2026 20:05:54 +0000
Manifest this update: Tue 12 May 2026 20:05:54 +0000
Manifest next update: Tue 19 May 2026 20:05:54 +0000
Files and hashes: 1: U73ibYJfZ3-axChvmmdmH1xJtWk.crl (hash: y7fcwcsMEOflPk2OO/tC3HJUdQ4zJq7CaHZUl+Y4cYg=)
2: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (hash: mmVost6mx+Nsnlt25bJ3nZWYDauWfkhD71L+YP06Tjs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1AE, serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Validity
Not Before: May 12 20:05:54 2026 GMT
Not After : May 19 20:05:54 2026 GMT
Subject: CN=6a038822-6f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:79:75:d7:ab:64:23:da:04:b2:81:5e:17:
b7:dd:2d:b3:cb:fd:ab:7b:c8:7e:f6:58:1e:bd:24:
3e:fa:af:c1:8d:86:eb:a1:b7:f4:cc:e9:54:90:fb:
aa:77:3f:5c:de:23:be:b3:64:fd:16:93:dd:af:11:
b2:06:25:8d:d5:9b:d1:a3:61:ac:26:ca:cb:57:78:
4f:71:9c:c2:27:8f:31:76:e3:62:7d:93:68:94:ba:
3c:34:40:41:88:25:66:17:6c:b2:5c:80:42:a5:57:
98:ef:93:1f:4e:c3:89:ec:a6:01:25:82:f4:94:18:
20:e8:2b:70:43:20:98:7c:14:1c:f1:85:af:b2:af:
15:2e:1f:94:94:a0:03:64:97:d5:20:84:c8:de:3e:
fc:7b:fc:0d:3c:43:f3:02:b8:23:a6:35:15:f8:03:
a5:ff:7a:cb:f8:93:62:67:4c:c8:32:e8:19:e6:48:
51:b5:d1:ec:b2:6a:89:80:d0:9d:1f:01:7d:3d:72:
bb:fb:45:e7:21:11:8c:e3:ce:e1:02:dc:db:e8:84:
e5:65:5c:44:f3:53:bb:fc:17:6a:0d:99:39:3d:40:
23:04:cf:e9:fd:4b:16:61:eb:c5:b9:17:09:25:78:
2b:9a:cc:1c:3c:43:8b:d6:70:4b:d5:d9:3e:3d:8b:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:1F:B9:E1:47:99:AA:59:5C:B4:6E:79:7A:CF:E6:17:D9:49:FF
X509v3 Authority Key Identifier:
keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:72:5a:64:99:e3:ec:b5:b0:7b:fb:17:55:57:19:71:91:00:
3c:52:69:26:8c:3a:e2:79:f4:37:37:9a:a8:06:6e:c7:9a:19:
e6:eb:b4:41:4e:90:05:83:95:f7:c4:b1:51:73:f3:4b:fb:da:
51:c8:9f:09:e3:51:47:b5:be:bc:aa:0a:27:41:f2:83:89:c3:
24:68:21:0b:40:4f:63:ed:e1:8f:f0:19:07:24:53:73:58:66:
48:6c:fc:c9:c2:8d:8d:92:5e:1a:69:55:20:fe:c8:37:f0:f8:
ce:1a:61:7a:68:c2:fb:ab:01:2f:92:06:d5:62:9d:b6:6c:5a:
70:21:43:dc:00:e7:22:3f:43:39:d1:e1:28:c8:0b:2d:63:ce:
d5:d0:ee:a5:a0:09:69:51:5f:58:89:27:46:51:60:15:94:ef:
47:38:71:61:06:bc:68:26:17:33:60:de:91:72:08:91:90:38:
b0:8b:88:8a:8e:ad:81:b5:db:e4:fb:d5:84:a4:1b:87:99:0e:
56:a9:8a:20:5c:8a:38:79:04:49:0f:d4:4a:7c:fd:fc:8b:c1:
90:64:f8:dc:d8:80:a5:bd:2d:4d:0c:37:bc:f6:92:47:9f:f9:
42:d3:0b:53:45:c2:f7:3c:8f:e2:ba:23:aa:c1:e8:83:2e:a6:
23:f2:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:01:05 2026 by rpki-client