
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json)
Hash identifier: fHhBqoEQE9xUqbsauIrWCjI50VRDc8O/+kj/STE6IAs=
Subject key identifier: 73:2D:DA:A4:3F:8C:8F:DC:21:19:1C:07:10:8B:92:1C:57:D0:A9:F7
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 06B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
Manifest number: 0682
Signing time: Tue 24 Mar 2026 22:18:20 +0000
Manifest this update: Tue 24 Mar 2026 22:18:19 +0000
Manifest next update: Tue 31 Mar 2026 22:18:19 +0000
Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: 0cuOIQganxmlZCcKVU6v/vKxEsxujG90o9poulpt6Ms=)
2: B6116DBEC9C811F0931CA339C4F9AE02.roa (hash: U8arnA83oKFnG2GhSz7RqEAXRJbC7v17OG6QnWS2Zk8=)
3: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: aRUQXx0V0GLFzvhmgfrBz3H8fjolbBpOYARYMTl5fCw=)
4: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: LNAhRYJg3M12wy9+EdbC2gimkX7SG11fYwLAn51ZszY=)
5: 3FE8CD1051B111F0932E1173C4F9AE02.roa (hash: mMQnIMnHxyxrtTIwTqaDefb9F/Y/eYhRGnrXlUtgbk0=)
6: E37129F0F50311F0BCFB4C27526F56BC.roa (hash: wQe9yLAF43ljAO4crGexO1z5JEF2PnlYeQKpz08kYNE=)
7: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: 612cmpEWafPstBGm8x2iYDbkh7FUHX/7eUkj+iqPm8c=)
8: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: dvfJXQq1EbLSwTmXVBbNhnU/w2dtpCOPHLknOXmP8c4=)
9: E28853A6F50311F0BCFB4C27526F56BC.roa (hash: iH8N2/EZ0A3FgzosMJpb5IUjNTYPsThENasr1YI4C1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1713 (0x6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: Mar 24 22:18:19 2026 GMT
Not After : Mar 31 22:18:19 2026 GMT
Subject: CN=69c30dac-2cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:c2:64:dd:75:99:a2:45:ae:2e:36:01:d0:
60:77:02:8d:fe:44:90:08:99:41:6d:67:0c:0f:93:
42:5f:a5:89:e3:8e:d3:d1:0a:a8:2d:c8:3a:1b:b8:
30:b0:a1:7d:29:fb:17:51:0c:0f:2c:29:ed:3c:75:
2f:01:cb:eb:89:34:35:dd:b4:bb:5f:31:03:b7:53:
a4:7d:bc:1f:b6:8c:d1:ae:b2:81:4e:7a:d2:b4:0b:
6a:35:93:79:7d:37:34:23:9c:6c:42:a5:3d:5d:8b:
35:3c:73:3b:a7:22:13:9a:00:92:f0:52:4a:9e:24:
4c:6c:b2:ff:42:b5:b4:dc:c7:b8:ba:0f:5f:e2:2a:
e7:e2:cb:57:55:bd:65:4b:3b:bc:6b:3d:36:4b:58:
27:26:53:47:47:75:67:79:68:99:41:4f:a3:bb:54:
8d:3f:f9:5e:48:9d:3f:37:f4:ca:5e:19:d4:a1:13:
b0:a7:39:31:db:7c:ce:51:ad:0c:ee:d0:7a:bf:d3:
cb:7a:94:a8:b1:69:e5:13:9c:ce:21:02:41:a4:a5:
69:3f:12:3f:64:8f:8f:f5:47:6a:69:1e:6a:e8:b3:
b0:6f:f4:6c:6a:7e:60:47:7c:4e:55:d9:40:f3:7e:
2b:55:4a:bd:06:7a:f5:df:de:95:a7:ff:6f:13:e9:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2D:DA:A4:3F:8C:8F:DC:21:19:1C:07:10:8B:92:1C:57:D0:A9:F7
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:a7:0d:82:65:2a:1f:0f:17:6a:fe:e0:60:08:37:8f:73:19:
03:b0:45:34:b0:53:96:4f:b7:35:e3:9d:84:17:f5:93:6e:1c:
e9:9d:81:02:7e:02:35:50:90:30:72:50:2d:79:35:08:29:f9:
d1:51:14:0a:6c:6d:0d:0d:ce:19:95:09:2b:14:28:f8:be:e0:
8b:ef:a7:66:90:fb:b1:e6:5c:33:95:08:89:7a:db:fb:57:c7:
3c:85:1b:c9:05:eb:4b:c4:f5:b7:1b:6e:3b:84:b4:f7:64:9f:
a9:3b:bf:bc:c8:f5:66:16:06:b0:86:33:5e:3e:76:bc:b2:4e:
00:2c:22:47:0e:17:15:9d:85:af:c8:77:ca:b9:ef:da:b5:50:
7f:e6:54:cf:d7:b0:a9:45:8e:93:dd:6c:fd:65:fb:ce:65:5a:
9c:93:67:8d:41:34:fb:b4:40:24:b5:f4:c3:45:e8:e9:71:5a:
db:4e:4a:f4:41:25:ff:7b:45:91:25:af:bb:17:d5:aa:e7:d9:
04:c8:fe:f5:8e:b9:89:13:c5:6d:63:5b:98:ff:b1:18:04:ab:
03:4d:a7:37:3e:af:6a:16:ea:d1:f1:94:f0:60:20:12:d7:f2:
37:07:1d:02:ad:bf:f3:b5:c4:5f:6f:9a:38:12:ee:03:53:89:
0d:64:7d:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG
MDVCQUYyMTEwHhcNMjYwMzI0MjIxODE5WhcNMjYwMzMxMjIxODE5WjAYMRYwFAYD
VQQDEw02OWMzMGRhYy0yY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCfCZN11maJFri42AdBgdwKN/kSQCJlBbWcMD5NCX6WJ447T0QqoLcg6G7gw
sKF9KfsXUQwPLCntPHUvAcvriTQ13bS7XzEDt1OkfbwftozRrrKBTnrStAtqNZN5
fTc0I5xsQqU9XYs1PHM7pyITmgCS8FJKniRMbLL/QrW03Me4ug9f4irn4stXVb1l
Szu8az02S1gnJlNHR3VneWiZQU+ju1SNP/leSJ0/N/TKXhnUoROwpzkx23zOUa0M
7tB6v9PLepSosWnlE5zOIQJBpKVpPxI/ZI+P9UdqaR5q6LOwb/Rsan5gR3xOVdlA
834rVUq9Bnr1396Vp/9vE+mVCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMt2qQ/
jI/cIRkcBxCLkhxX0Kn3MB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE
MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4
bFZGSjlYWWhHUVR3VzY4aEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZKcNgmUqHw8Xav7gYAg3j3MZA7BFNLBTlk+3NeOdhBf1k24c6Z2BAn4CNVCQ
MHJQLXk1CCn50VEUCmxtDQ3OGZUJKxQo+L7gi++nZpD7seZcM5UIiXrb+1fHPIUb
yQXrS8T1txtuO4S092SfqTu/vMj1ZhYGsIYzXj52vLJOACwiRw4XFZ2Fr8h3yrnv
2rVQf+ZUz9ewqUWOk91s/WX7zmVanJNnjUE0+7RAJLX0w0Xo6XFa205K9EEl/3tF
kSWvuxfVqufZBMj+9Y65iRPFbWNbmP+xGASrA02nNz6vahbq0fGU8GAgEtfyNwcd
Aq2/87XEX2+aOBLuA1OJDWR9ig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:45:09 2026 by rpki-client