
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
File: U5TlfShXd_11FCjRXLD7L8WSx6Y.mft (raw, json)
Hash identifier: tQ4+nltxP/4rb2pk/62ETzB1qNMem3VW4UalQmJUPuk=
Subject key identifier: C2:4B:17:A7:39:74:D7:02:BC:B6:A6:F1:A8:FB:C7:14:A2:20:37:EF
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 062F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
Manifest number: 0610
Signing time: Wed 22 Jul 2026 23:36:36 +0000
Manifest this update: Wed 22 Jul 2026 23:36:35 +0000
Manifest next update: Wed 29 Jul 2026 23:36:35 +0000
Files and hashes: 1: U5TlfShXd_11FCjRXLD7L8WSx6Y.crl (hash: I8fEDrhC/StveTu55fN72Qxxe0z8QuDi2Nfgv0y1+9I=)
2: E19B6AD6D5BE11ECA8BE4666C4F9AE02.roa (hash: EtIVrjW3D9LKTRC7oaoRmQY6Qz3nhGLe2dzCq7rzB8U=)
3: C2CAC16E5C9D11EC99F7D10BC4F9AE02.roa (hash: 6SWLv2jStmw9Boi79xmGA+0FveHASTq1p9xtUOijHD0=)
4: C25659465C9D11EC99F7D10BC4F9AE02.roa (hash: 6SMT1AnOauj5YAPAP3C0QKupLOTw71ii/bAztVft8xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Jul 22 23:36:35 2026 GMT
Not After : Jul 29 23:36:35 2026 GMT
Subject: CN=6a615404-b703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:7d:09:24:a6:dd:2a:c1:fb:67:1b:3e:8b:
50:24:e0:c5:a7:c4:1c:ed:63:5b:a1:d0:eb:3e:01:
f3:82:2f:92:6f:4e:de:8b:77:59:70:f2:c5:bf:18:
1c:3a:12:07:31:7f:ec:0f:55:b5:b6:d0:c4:72:f4:
b2:b9:94:07:a4:f9:e4:fc:61:ca:e4:09:27:08:c7:
01:95:a7:16:d9:a4:4b:20:2c:b7:de:9e:e2:c0:5f:
72:dc:27:ee:a0:55:20:f8:dc:f3:84:fd:92:04:a1:
d7:76:f7:9a:8d:3e:28:c1:88:dc:16:a4:00:fc:fb:
7b:bb:dc:c3:9f:b7:cd:29:04:05:5d:ca:0a:f2:d5:
69:ea:e9:93:5f:18:ea:99:06:84:4f:5f:9a:67:f8:
e9:7c:0a:7f:7b:65:6c:7b:8e:e7:7c:8c:40:0a:58:
11:b7:6c:bc:e2:cc:74:fb:83:de:69:f3:a1:ac:81:
6b:80:cb:d3:a1:e9:db:25:f9:a7:66:fd:fd:b1:9d:
38:38:7a:cc:29:34:0d:a9:3f:df:b9:d8:7c:bf:16:
dc:ef:81:93:90:38:be:a1:74:a4:7b:96:98:2b:d3:
0a:c6:bb:35:59:34:7e:85:19:a9:5a:4f:05:3b:fc:
67:6a:47:0f:70:3c:ff:03:1d:96:65:02:f4:6a:bf:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:17:A7:39:74:D7:02:BC:B6:A6:F1:A8:FB:C7:14:A2:20:37:EF
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:06:59:6d:71:58:7d:0e:fd:04:ee:11:35:18:96:8d:4f:c4:
f3:7e:b2:26:51:e0:6e:b6:a0:ab:32:21:8f:19:36:48:9b:97:
93:e1:be:8f:f6:66:f1:9c:c0:4e:70:00:0c:06:cb:e2:d0:50:
5e:2f:23:be:9d:86:87:d0:0c:e8:95:a5:28:84:b3:d6:93:a4:
6f:7c:e5:21:5b:df:02:c6:68:85:d2:a0:b6:bb:16:aa:be:3f:
78:8d:75:20:6b:2c:52:5a:5b:75:f3:39:b1:8e:d1:1b:e8:51:
87:9d:32:24:5e:76:2d:a9:5b:ef:65:43:89:53:95:90:ce:2f:
19:f6:ef:4c:50:c7:73:4b:41:f9:a3:62:b3:06:51:71:66:de:
af:ca:1b:7c:9b:4d:6a:36:6d:6d:fc:a5:1f:75:bb:4a:6c:07:
fd:b4:d5:c4:48:d7:81:51:9c:91:5c:32:bc:82:2a:a2:f4:ac:
45:ab:40:00:1a:35:eb:90:59:70:7e:24:e1:b9:67:46:c8:07:
7d:74:fb:b0:3b:21:f9:4c:7a:03:22:7e:30:ad:d5:d6:84:ac:
de:ee:a3:a4:dd:15:56:14:ab:11:41:51:76:43:9b:fc:fb:64:
19:ae:12:45:e2:e8:31:f1:dd:ae:96:ae:e5:01:a1:35:2c:2b:
2c:3d:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:48 2026 by rpki-client