
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json)
Hash identifier: LfthMkyOxoRGnmmzXngCmb6JSa/Kw2i5RkrRRu7X4wQ=
Subject key identifier: 42:0C:E4:9B:7E:67:7B:90:A2:F9:3D:D1:C4:07:70:AB:B0:44:C1:E3
Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Certificate serial: 0A3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
Manifest number: 0A24
Signing time: Tue 12 May 2026 19:50:02 +0000
Manifest this update: Tue 12 May 2026 19:50:01 +0000
Manifest next update: Tue 19 May 2026 19:50:01 +0000
Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: 2ODgxK+d4JeBWKi6L4y4LQ6K/NVIgWPmOBBbt19gqHg=)
2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=)
3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2618 (0xa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Validity
Not Before: May 12 19:50:01 2026 GMT
Not After : May 19 19:50:01 2026 GMT
Subject: CN=6a03846a-8b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:9f:2b:05:f5:a8:73:ca:6e:c4:f8:62:0a:
4d:b4:92:ee:f0:c3:a5:37:0a:7d:9e:78:40:8d:fd:
1f:af:f1:29:fc:54:24:da:40:78:79:ce:88:d8:1c:
81:69:da:56:0d:a2:40:98:1f:2e:5f:e3:e1:ad:88:
df:b8:0d:c5:b6:18:57:0f:5c:5e:4d:a8:81:97:ef:
ec:4e:b4:7d:85:2c:0d:97:7e:a8:18:af:8b:52:39:
8a:63:c5:9f:da:b6:34:5a:cf:b0:54:c0:ab:79:e3:
d6:07:93:39:56:e8:19:06:23:f7:db:30:e6:4b:9f:
96:7d:d1:91:fc:98:22:de:9c:9f:d0:4d:da:54:4e:
0d:f3:27:d1:2c:4d:2e:bd:06:30:49:bf:1f:37:5d:
b3:d2:7c:0e:2f:93:bc:99:2f:dd:ae:f4:b6:3d:07:
20:5f:7b:45:1e:37:ff:8f:63:ff:ea:37:bc:72:f2:
10:aa:3f:bf:a3:63:83:b8:2b:2a:8e:4f:86:e7:70:
83:b4:50:d6:cf:a7:6c:bf:9c:f0:dc:58:d7:e6:11:
87:c1:c7:ab:19:60:98:11:90:1a:3c:56:c5:49:45:
7d:87:0c:ef:ab:aa:93:b9:e2:31:a1:9a:e5:18:ea:
8a:5a:1a:e4:f9:f9:85:b8:18:8a:47:7e:26:f7:6e:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:E4:9B:7E:67:7B:90:A2:F9:3D:D1:C4:07:70:AB:B0:44:C1:E3
X509v3 Authority Key Identifier:
keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:58:3d:9d:38:6e:40:16:6c:41:d5:c8:84:94:e3:7b:45:
8f:93:c2:1e:61:b0:4b:cd:a3:1f:e6:62:c1:f6:5e:4d:04:15:
a3:7a:51:02:e5:81:13:f7:43:96:ff:2a:c2:2b:90:74:72:34:
9d:d6:a8:3d:57:ac:c7:ac:c7:65:3d:33:1f:45:e0:dc:a9:62:
75:1b:44:01:b6:88:06:25:86:d5:25:8a:95:e9:8c:cc:2b:2a:
77:01:40:04:30:ae:f3:d5:da:52:8e:96:03:49:0d:8a:63:e1:
83:a1:0f:2d:ba:2f:7e:50:ee:85:57:04:bb:10:1c:9b:8f:2b:
13:ef:03:93:ae:bf:93:a1:58:4b:d2:00:c1:ad:65:73:44:38:
50:7b:f8:30:3c:c1:24:21:c1:71:94:d4:d8:9c:94:36:86:fc:
ec:a8:73:09:59:9a:88:d7:d7:a0:e7:f2:5b:d2:20:da:43:60:
54:12:42:e1:8e:db:f7:e2:26:48:d6:b1:c5:85:15:de:04:3f:
d9:b4:d3:13:13:7b:17:fb:ca:3a:d9:4e:72:76:d5:ad:a8:65:
83:cd:7f:ca:53:2a:c5:0f:70:4b:2c:a0:5a:ba:a6:30:2b:a1:
90:a7:1d:07:ac:04:2d:16:c5:bb:b7:f6:b2:5e:5f:c2:aa:e8:
87:cd:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:31 2026 by rpki-client