
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier: ZYGJmAtEI4XgEHHW4vUYy06obKPgKqAHubn7wlGRI9E=
Subject key identifier: B3:E6:0B:A1:AF:33:58:0A:FD:81:6D:10:C4:04:9C:D0:86:1F:48:00
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial: 0DF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number: 0D8B
Signing time: Tue 24 Mar 2026 17:52:21 +0000
Manifest this update: Tue 24 Mar 2026 17:52:20 +0000
Manifest next update: Tue 31 Mar 2026 17:52:20 +0000
Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: hiy5+2NfvCvlkw6iQgIo/12QUYPVW6c07Ikl8tbPOsY=)
2: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
3: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 42dKv4sjx0XRqkeI33DpCxr1YPHwmnsJzTMy3OeU/bA=)
4: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
5: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3575 (0xdf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Validity
Not Before: Mar 24 17:52:20 2026 GMT
Not After : Mar 31 17:52:20 2026 GMT
Subject: CN=69c2cf55-9224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:dd:85:42:45:df:c0:38:4b:4c:6c:29:54:
dd:f0:6e:63:42:47:f8:39:97:0d:a0:0b:f4:30:48:
e6:af:9d:06:0d:88:64:3e:20:e1:c1:01:7d:a3:76:
b2:27:2e:1d:6d:3a:63:6e:0d:65:5c:eb:73:aa:08:
d9:90:e5:cf:ab:e3:f9:86:15:30:08:95:86:69:0a:
3b:3d:4f:45:ae:34:78:6e:57:96:c5:fe:2b:82:74:
c2:1f:82:c7:60:5b:cc:49:ac:f3:13:ac:65:93:84:
88:44:6e:93:83:48:ae:74:31:fc:b4:2d:86:42:f6:
da:39:b2:57:c1:f2:1d:7a:38:19:b7:1e:9b:f9:25:
b6:fe:47:56:3c:3f:e9:d8:d0:1c:7c:01:9e:b2:7a:
45:27:a7:31:d8:59:b3:d6:d1:f2:ff:c8:ab:77:45:
24:0c:6d:c6:34:8a:37:66:13:00:8f:3d:dd:23:1d:
c4:ae:9f:84:ea:fb:6f:7b:02:7d:b8:1b:86:da:fa:
de:e7:36:f7:88:43:6e:bb:ec:78:b1:c1:fb:09:e6:
bd:d2:5f:bf:be:eb:42:f7:fe:98:44:53:da:c4:36:
d8:69:19:ef:a3:91:e8:85:93:46:b1:7a:aa:b0:ee:
af:1e:5a:b0:86:0e:aa:eb:f6:91:24:ad:65:fb:92:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E6:0B:A1:AF:33:58:0A:FD:81:6D:10:C4:04:9C:D0:86:1F:48:00
X509v3 Authority Key Identifier:
keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:71:14:9f:2d:45:47:9c:fd:5d:a0:e8:56:bc:b2:da:b1:ed:
ea:0e:e7:82:08:c1:d5:3a:af:73:bb:ff:6f:ec:9c:5e:a7:b9:
81:77:cc:97:25:05:4a:56:56:44:ce:68:d1:36:b2:b1:9f:5c:
ac:64:4d:45:72:46:1c:38:e3:42:a6:b1:86:6c:b9:51:b0:34:
d4:fa:1e:29:70:15:7c:e3:91:49:7e:a5:6d:04:f1:be:f8:68:
69:b6:1e:98:62:dd:71:5a:37:90:71:fe:0a:f6:f3:71:5a:30:
7c:d1:ea:cc:64:eb:3d:73:81:09:6e:8f:2d:a5:46:d8:7e:35:
d6:86:60:9b:c9:fb:c3:c1:a4:cc:dd:42:51:a0:46:22:10:fd:
7c:0f:1a:1e:16:9a:7e:c4:06:12:9b:6f:53:95:48:a0:72:b4:
23:73:60:15:b1:f3:8f:a7:94:2e:56:c1:29:91:56:ba:d2:d9:
90:16:c7:43:c0:8b:f7:42:27:37:44:38:3c:b3:51:01:c6:5e:
6a:2d:f3:90:59:e2:7b:90:cf:14:64:28:eb:35:fd:d3:54:76:
29:fc:5b:65:9b:4e:94:60:d4:84:e1:a5:61:81:ad:b1:7f:23:
a1:06:ec:33:77:a0:2c:04:d8:c0:fc:cf:66:30:f2:f7:f5:0e:
58:52:90:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:22 2026 by rpki-client