
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
File: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft (raw, json)
Hash identifier: hNOhq13/3H9U4j9e9/Gzpt2UApgN7uX9eiQFt0CL4Jg=
Subject key identifier: 0A:1C:D7:FF:6B:72:79:11:62:61:39:0F:E9:CF:B7:DA:63:B3:96:EC
Authority key identifier: 51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
Certificate issuer: /CN=A91C575E/serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
Manifest number: C8
Signing time: Wed 23 Sep 2026 06:35:53 +0000
Manifest this update: Wed 23 Sep 2026 06:35:52 +0000
Manifest next update: Wed 30 Sep 2026 06:35:52 +0000
Files and hashes: 1: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl (hash: GkY6nWIj6WH9rhUu7VXO66Trqs4l5aQfrW9ouNWAioU=)
2: 3FD60CEC896B11F0A99C2258C4F9AE02.roa (hash: Znxli92ke42bUcuO4y2MWt6186ap7JgRI1qPxtQiAUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C575E, serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Validity
Not Before: Sep 23 06:35:52 2026 GMT
Not After : Sep 30 06:35:52 2026 GMT
Subject: CN=6ab37348-25de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:ec:ff:73:6b:a0:41:10:ff:0a:0b:c3:79:
09:d2:95:d8:f6:ef:a1:e6:13:d6:c4:2b:35:44:ee:
8e:cf:c8:b6:3c:14:c9:51:89:80:76:f3:a8:bd:a8:
11:dd:5b:e4:32:d7:63:70:df:19:9f:ae:13:e2:f4:
ba:15:39:93:3e:0f:98:4a:d0:21:04:bd:fc:4f:b2:
be:b6:4f:a9:82:7c:e6:27:ca:3e:73:5b:35:e8:d0:
1b:04:3a:4b:b1:a3:a7:a1:e8:f4:60:58:b3:91:94:
a3:40:3c:67:93:84:63:30:3f:29:ec:e3:80:f1:f8:
a0:3f:d9:e6:c3:ee:8d:ba:09:b9:65:d1:03:d1:07:
65:82:6b:bb:4a:0d:92:94:ca:00:6b:c6:35:3b:9f:
2f:da:0b:bb:18:85:0f:fc:68:57:c2:e2:f5:a0:54:
5a:80:66:99:44:98:7d:72:12:cc:e3:00:0b:53:ae:
20:ba:82:5f:09:33:60:50:9f:86:26:de:c7:00:10:
0c:f5:e9:6f:a5:4e:b2:79:99:e3:ad:0a:26:ec:0f:
91:bc:c3:75:48:de:77:e5:dc:22:f9:cb:53:8c:be:
b4:e0:ff:71:c2:c1:34:a7:30:d2:ed:b9:81:2c:37:
18:16:35:60:cb:a3:8d:db:b9:49:f6:f8:d4:51:a5:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:D7:FF:6B:72:79:11:62:61:39:0F:E9:CF:B7:DA:63:B3:96:EC
X509v3 Authority Key Identifier:
keyid:51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:93:34:8a:ab:33:33:5f:88:a8:10:09:88:67:82:4e:20:7b:
40:f4:a2:15:42:8f:7f:d4:17:a5:58:56:68:6f:e8:27:c8:ae:
33:9c:09:a9:2f:2a:0e:60:3d:3b:61:d1:23:8f:c7:8c:c1:ca:
50:4b:62:2f:94:73:98:e0:40:69:d7:5b:6a:39:86:67:bf:29:
05:15:51:e8:26:e6:e8:15:17:08:73:90:9c:6d:a2:9b:6b:2b:
58:41:07:72:da:e4:b3:87:15:94:a3:e2:c1:5b:db:6f:db:da:
eb:01:4c:15:08:3c:09:b7:8c:ae:66:e5:ea:df:aa:67:8a:0e:
f3:d7:e7:1c:92:39:a5:41:33:e0:fa:5f:99:49:02:d6:78:5f:
33:f4:a1:0f:62:e5:81:d6:d5:3b:f6:dc:03:f1:15:f8:b6:6e:
e5:24:24:f2:a3:7a:5b:46:b8:68:37:bd:42:2d:16:bf:73:d3:
63:b6:f8:3e:8f:b3:2d:8b:68:a0:ea:e0:d8:96:ba:89:1b:cb:
c8:05:d3:c6:0c:e6:b5:d8:ee:af:49:a5:18:f7:71:23:a2:8b:
ad:56:30:b7:40:8a:b7:df:0b:dd:41:0f:55:ac:ad:98:b8:52:
a9:14:82:68:7c:7a:04:a9:85:70:d1:d3:fd:f5:c5:0b:db:a6:
d6:c9:59:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3NUUxMTAvBgNVBAUTKDUxM0VDRTczRUU5RUEzMjVFQTQ0MjkzMUIwMDYyQkQ4
QkYzMDRBNzYwHhcNMjYwOTIzMDYzNTUyWhcNMjYwOTMwMDYzNTUyWjAYMRYwFAYD
VQQDEw02YWIzNzM0OC0yNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmuHs/3NroEEQ/woLw3kJ0pXY9u+h5hPWxCs1RO6Oz8i2PBTJUYmAdvOovagR
3VvkMtdjcN8Zn64T4vS6FTmTPg+YStAhBL38T7K+tk+pgnzmJ8o+c1s16NAbBDpL
saOnoej0YFizkZSjQDxnk4RjMD8p7OOA8figP9nmw+6Nugm5ZdED0Qdlgmu7Sg2S
lMoAa8Y1O58v2gu7GIUP/GhXwuL1oFRagGaZRJh9chLM4wALU64guoJfCTNgUJ+G
Jt7HABAM9elvpU6yeZnjrQom7A+RvMN1SN535dwi+ctTjL604P9xwsE0pzDS7bmB
LDcYFjVgy6ON27lJ9vjUUaXjGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoc1/9r
cnkRYmE5D+nPt9pjs5bsMB8GA1UdIwQYMBaAFFE+znPunqMl6kQpMbAGK9i/MEp2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTc1RS9FMkFDQjQzQTg5
NkExMUYwODFFNDRENTdDNEY5QUUwMi9VVDdPYy02ZW95WHFSQ2t4c0FZcjJMOHdT
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VUN09jLTZlb3lYcVJDa3hzQVlyMkw4d1NuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTc1RS9FMkFDQjQzQTg5NkExMUYwODFFNDRENTdDNEY5QUUwMi9VVDdPYy02ZW95
WHFSQ2t4c0FZcjJMOHdTblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnZM0iqszM1+IqBAJiGeCTiB7QPSiFUKPf9QXpVhWaG/oJ8iuM5wJqS8qDmA9
O2HRI4/HjMHKUEtiL5RzmOBAaddbajmGZ78pBRVR6Cbm6BUXCHOQnG2im2srWEEH
ctrks4cVlKPiwVvbb9va6wFMFQg8CbeMrmbl6t+qZ4oO89fnHJI5pUEz4PpfmUkC
1nhfM/ShD2LlgdbVO/bcA/EV+LZu5SQk8qN6W0a4aDe9Qi0Wv3PTY7b4Po+zLYto
oOrg2Ja6iRvLyAXTxgzmtdjur0mlGPdxI6KLrVYwt0CKt98L3UEPVaytmLhSqRSC
aHx6BKmFcNHT/fXFC9um1slZYg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:51:10 2026 by rpki-client