
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
File: tU-K0c7KwTb8r0eS6_0A5o6h02g.mft (raw, json)
Hash identifier: A2FrZnYBUf0G8Pct54j0c9yHH+SUFgJQuLFWaRhjni0=
Subject key identifier: 8F:45:38:4D:40:24:0B:59:3D:4A:E8:89:8E:12:D2:9D:0B:2D:65:8E
Authority key identifier: B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68
Certificate issuer: /CN=A91B7DCB/serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
Certificate serial: 010A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
Manifest number: 0106
Signing time: Wed 23 Sep 2026 05:55:06 +0000
Manifest this update: Wed 23 Sep 2026 05:55:05 +0000
Manifest next update: Wed 30 Sep 2026 05:55:05 +0000
Files and hashes: 1: tU-K0c7KwTb8r0eS6_0A5o6h02g.crl (hash: kWWqrZLP2B3k5sXgDPu9UhKHVB17J7a9Jv87v0G2YbM=)
2: D470A60E294511F0B1412377C4F9AE02.roa (hash: GSkbxwT7s713aepzAHb1asdunZV2hHHIcFkvDpvvdJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl
rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7DCB, serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
Validity
Not Before: Sep 23 05:55:05 2026 GMT
Not After : Sep 30 05:55:05 2026 GMT
Subject: CN=6ab369b9-86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:03:30:54:85:62:a2:ba:dd:39:33:ad:9b:
a1:96:56:cb:d9:c8:ce:e2:85:21:27:06:61:0f:1d:
95:24:55:94:82:9e:84:c6:3b:a6:97:86:d7:9b:1f:
f0:b8:62:00:76:fb:25:53:97:5f:70:ca:99:6e:1b:
8c:37:0f:0e:1d:72:c3:e7:99:9b:56:ee:73:73:55:
98:22:d0:d2:67:d5:04:ba:81:8e:e2:da:56:ce:84:
b1:0a:ba:e7:86:e0:9c:7e:98:26:95:1e:3f:62:48:
a6:41:13:5f:e2:51:b8:18:40:22:41:1a:2e:c8:5e:
29:1c:52:b0:c4:1e:1c:74:01:c5:1a:cf:64:40:87:
90:68:f7:b6:e1:46:6a:33:65:68:3f:04:11:1f:a9:
27:dd:44:42:05:6d:f6:5e:bd:ca:d9:c9:c9:4a:26:
18:c1:69:00:21:c5:92:8f:d1:c0:d0:41:b3:c8:2d:
27:fe:cc:7c:06:78:fe:65:3b:9c:b4:be:14:60:57:
49:de:69:12:7f:b9:b7:8a:5c:0f:0a:c4:bb:84:27:
5e:30:f0:24:4b:fb:cf:a4:29:67:4d:84:dc:c1:ba:
f6:1e:fb:c7:1a:9c:cb:37:b5:ed:24:9f:2b:93:06:
d6:32:15:92:33:19:b8:97:3e:6d:2f:0b:9b:a5:2c:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:45:38:4D:40:24:0B:59:3D:4A:E8:89:8E:12:D2:9D:0B:2D:65:8E
X509v3 Authority Key Identifier:
keyid:B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:23:f9:12:2a:80:60:d6:c0:7f:02:f3:30:f2:cd:bb:48:7b:
aa:3b:e9:97:1b:83:d3:4e:55:0e:e2:40:f4:73:1d:9e:79:06:
07:46:eb:8c:e1:25:d1:02:4a:18:25:5a:7d:e1:04:1f:0b:7f:
da:7c:7a:56:ea:5c:a5:fd:f3:02:09:f4:80:54:14:32:42:f7:
b9:b2:66:9d:d5:bb:0c:4d:8f:71:34:38:f4:01:cc:a6:54:a8:
05:09:08:ec:c3:ad:0f:24:48:5c:9a:f5:d8:0c:b1:ae:08:fe:
3e:c8:f2:6f:7f:29:dc:14:a9:e6:39:18:ab:28:40:42:c9:7c:
29:da:49:44:ff:f7:7c:7a:70:74:80:16:af:aa:b7:2d:4c:58:
83:71:4a:26:48:f6:59:b6:f7:59:c0:91:80:04:2c:09:2e:19:
ad:72:e6:77:10:4c:3f:ee:69:e5:31:de:18:d5:e3:43:e1:d4:
3b:f8:d6:e5:f2:50:36:13:37:e5:ad:55:e2:76:d2:aa:a3:99:
e9:7b:14:63:41:7e:f3:2d:66:53:5e:45:c2:93:aa:7c:d2:15:
1f:91:68:de:26:70:95:f0:5e:47:c1:fd:3c:e8:a9:c3:5f:f6:
39:5d:a3:f6:95:82:9b:ad:23:1f:16:28:3d:16:cf:f4:f2:ad:
ea:79:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:04 2026 by rpki-client