
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: fMrAhvSGPr3uV70qxRozsXjmCx4d6aHibiituyLm70M=
Subject key identifier: 86:6C:AA:40:A8:FB:FE:28:C6:4D:F4:2F:1A:8F:DF:1F:EF:AF:BB:26
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 06D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 069F
Signing time: Tue 12 May 2026 22:37:13 +0000
Manifest this update: Tue 12 May 2026 22:37:13 +0000
Manifest next update: Tue 19 May 2026 22:37:13 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: FoDD5QqQtozttvTgxqgFMsuoa3Ri+ixgaxvihO+jsEo=)
2: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: JRKiJJ9AWmFRvC8bzLvB5N74Umbi+4AAyRuytcebbpc=)
3: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: vY5QoFj5EHYuHnY1WoGJpIuRo8oxFf3pMcROdKUYi68=)
4: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: WCFojuggE3ZNtWIBN6Mw5rcPm1Wz+bqqQpugJ6sdoRE=)
5: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: vxAnQu8I+FETfsi2yVbOeGtWdoSBCdNqoU43CnDVcmU=)
6: 311221F84DDF11F1B04EC87CBC833773.roa (hash: I0GEToVYJ8K9D+Rdoyrx1y5R9bJA2VGV0O6cO0v2MXM=)
7: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: tBhBUhrw0Op7ettMh29/peo+xDDgIQVsQGBwOWayPp8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751 (0x6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: May 12 22:37:13 2026 GMT
Not After : May 19 22:37:13 2026 GMT
Subject: CN=6a03ab99-c7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:da:34:18:35:ae:39:5b:1b:25:5f:47:51:
31:13:18:a7:27:ba:f0:1a:44:79:33:7e:0b:3b:05:
e3:45:9c:e0:3b:47:91:17:72:93:3f:3e:61:a8:72:
65:f3:4a:80:15:71:c8:19:63:fb:88:11:4a:0e:ab:
dc:82:9d:31:65:46:30:a0:25:6f:1e:af:e9:de:e0:
30:a3:d3:1a:68:72:f1:03:5e:cb:59:8e:d5:e8:65:
7f:ec:9c:1c:8a:5a:5f:77:b2:9e:33:ce:f2:b9:f1:
e6:4d:7d:43:24:2d:d2:f3:3e:d1:bf:b0:93:bd:fa:
b6:d0:a1:e6:64:8d:bd:b8:95:0b:1f:08:27:c8:f0:
75:a8:11:ab:a0:c6:bf:1a:28:f6:f2:db:a4:0a:da:
83:55:22:ec:e4:fa:63:7e:90:37:d5:69:25:bb:69:
7b:e1:62:dc:db:24:87:d6:15:b0:53:4b:9a:3b:e3:
9e:85:79:3b:fe:82:60:6b:ae:03:e3:5f:85:9a:ce:
ce:a1:e0:c1:c3:63:4c:cc:10:11:0c:bb:ff:a9:cf:
25:3b:6f:06:b3:a9:0e:6f:c0:68:33:37:99:22:90:
e5:93:5c:13:e2:7d:85:12:1a:f3:44:f7:e3:e0:49:
45:14:e6:92:9a:c4:69:16:1b:6c:0d:bb:26:15:73:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:AA:40:A8:FB:FE:28:C6:4D:F4:2F:1A:8F:DF:1F:EF:AF:BB:26
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:15:91:e5:1a:cb:05:dc:f9:55:34:c4:45:3a:6d:f2:05:
eb:28:b9:66:8d:53:26:d2:60:01:3a:c6:93:6d:0d:6c:c3:b8:
8b:e5:2b:da:08:05:8d:ff:0b:92:b7:62:91:29:93:a7:a6:ab:
06:4b:b6:33:de:fe:ee:bc:d2:f9:8e:e2:54:2c:72:55:91:76:
af:e0:27:16:9f:b5:97:22:6d:fb:b1:5b:de:8e:6d:78:68:17:
33:fc:93:8e:ca:7f:65:1e:49:94:15:c2:67:8b:04:5e:de:c3:
58:8f:dc:9e:e6:54:f8:3c:61:21:60:b8:36:11:d4:1b:d6:2e:
5c:49:ba:28:7a:49:2e:52:d0:57:c6:f1:32:49:56:f7:21:cd:
b0:6a:91:94:0f:c0:20:8d:a0:db:64:cd:a9:ac:3b:75:f4:29:
1d:a3:1e:06:54:08:db:09:ef:1c:a8:c7:c0:b8:12:68:7d:8b:
9b:de:56:b8:fb:85:76:d0:b4:d4:1b:01:2e:f3:6a:32:e5:66:
1a:6a:64:0e:58:57:43:b9:11:e9:2c:d3:a5:96:08:70:99:b3:
75:89:21:44:2d:76:6a:27:7a:79:68:8e:bb:fc:4b:54:10:13:
6b:9a:e3:27:a3:a6:58:f6:04:72:5a:25:31:8a:34:ea:31:6d:
b9:19:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:53:19 2026 by rpki-client