
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
File: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft (raw, json)
Hash identifier: twhuy7BlvWn7cUKVISar2RZc2SS/tP/EFnee5e9pMjc=
Subject key identifier: 97:1B:93:6F:B4:57:C3:2A:FC:A3:91:EC:8A:1B:49:19:9E:90:25:24
Authority key identifier: 51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
Certificate issuer: /CN=A91C575E/serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
Manifest number: 84
Signing time: Mon 11 May 2026 07:47:35 +0000
Manifest this update: Mon 11 May 2026 07:47:34 +0000
Manifest next update: Mon 18 May 2026 07:47:34 +0000
Files and hashes: 1: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl (hash: tGMQpRfBDzFcRlJkeQ6iYqpyirHjVUFMqShy32fb/HM=)
2: 3FD60CEC896B11F0A99C2258C4F9AE02.roa (hash: Znxli92ke42bUcuO4y2MWt6186ap7JgRI1qPxtQiAUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C575E, serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Validity
Not Before: May 11 07:47:34 2026 GMT
Not After : May 18 07:47:34 2026 GMT
Subject: CN=6a018996-d48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:23:fc:e6:51:72:fd:9c:5b:16:bc:2a:05:
5e:42:19:3e:31:25:ac:f9:5e:9c:84:16:31:a7:e9:
b6:93:22:7a:eb:43:41:37:9d:53:76:ac:9a:95:ca:
c1:f9:1d:31:34:d5:a2:cb:e2:a8:cd:e1:01:fe:4d:
f8:d3:9e:66:c3:e1:f8:cb:3a:eb:2b:7e:17:1b:6c:
e5:37:24:3c:1d:c9:93:e2:b1:0d:bc:f9:32:e5:4d:
f8:d6:9f:b2:e4:2a:ce:19:72:e0:6b:a7:0b:13:6a:
a7:a5:91:bb:0e:6d:ea:6b:0b:73:ab:9b:ca:08:72:
de:39:d7:73:e0:9a:30:85:94:69:cc:d5:d8:65:6d:
a1:65:9b:25:d6:b5:ce:1c:d9:fc:c2:cf:6d:b2:4f:
bc:b4:d9:20:cf:35:3c:c9:83:16:fe:aa:71:b0:f8:
d6:7b:2a:41:4e:16:9b:03:19:f0:46:13:37:98:ad:
e8:87:a3:28:d2:a6:59:b9:46:89:8f:f0:b9:f3:59:
02:f6:53:dd:8a:46:ca:aa:9f:d1:6b:ea:ca:6a:97:
8f:1c:54:0c:1e:1d:29:e1:62:74:42:47:02:56:d7:
0f:e8:77:7c:e0:08:75:a5:45:e3:13:9d:4d:91:19:
36:9c:da:3f:73:ce:d0:19:8f:35:92:dd:2e:25:aa:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:93:6F:B4:57:C3:2A:FC:A3:91:EC:8A:1B:49:19:9E:90:25:24
X509v3 Authority Key Identifier:
keyid:51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:b9:8c:43:7b:c2:54:f1:58:63:45:f2:0e:00:76:44:c6:af:
d9:b0:e7:99:4a:dd:a8:70:22:2c:a7:30:c2:bb:70:22:42:9c:
1d:42:a9:7a:3b:95:12:8c:50:c0:57:62:83:4f:7d:76:54:4b:
58:30:76:b6:60:40:f0:0e:c8:c7:b9:81:8b:cb:50:66:68:fa:
20:19:48:2f:9d:7d:b9:87:89:d9:98:cf:d8:c2:d7:12:9e:03:
69:78:59:1b:5b:ab:3b:49:e3:2b:bb:bf:41:c6:02:8a:13:dd:
75:d0:d4:98:82:2b:fa:43:12:78:a8:59:8f:0f:f3:0f:9b:56:
17:6f:27:c4:4c:03:0d:7c:c5:b5:7b:46:b6:f7:b6:d3:ea:da:
a6:17:88:4a:71:cb:0c:bf:d9:71:3f:dc:18:25:22:0b:7f:ed:
8d:c1:4c:e9:a0:5d:b3:aa:cc:e8:38:7e:7c:b9:f6:97:e5:50:
4a:2d:15:c2:07:ac:69:be:70:2f:d8:8e:49:d8:13:26:28:c9:
29:53:c8:19:3e:ee:64:77:17:78:13:ad:99:3d:4f:77:1d:af:
f9:63:a8:34:6f:83:98:82:d1:e1:59:88:d6:7c:a7:a7:51:60:
fb:91:a8:61:18:fb:ad:f9:4f:da:1e:9a:be:1c:00:86:cd:62:
16:12:1e:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3NUUxMTAvBgNVBAUTKDUxM0VDRTczRUU5RUEzMjVFQTQ0MjkzMUIwMDYyQkQ4
QkYzMDRBNzYwHhcNMjYwNTExMDc0NzM0WhcNMjYwNTE4MDc0NzM0WjAYMRYwFAYD
VQQDEw02YTAxODk5Ni1kNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp6gj/OZRcv2cWxa8KgVeQhk+MSWs+V6chBYxp+m2kyJ660NBN51TdqyalcrB
+R0xNNWiy+KozeEB/k34055mw+H4yzrrK34XG2zlNyQ8HcmT4rENvPky5U341p+y
5CrOGXLga6cLE2qnpZG7Dm3qawtzq5vKCHLeOddz4JowhZRpzNXYZW2hZZsl1rXO
HNn8ws9tsk+8tNkgzzU8yYMW/qpxsPjWeypBThabAxnwRhM3mK3oh6Mo0qZZuUaJ
j/C581kC9lPdikbKqp/Ra+rKapePHFQMHh0p4WJ0QkcCVtcP6Hd84Ah1pUXjE51N
kRk2nNo/c87QGY81kt0uJaqhJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcbk2+0
V8Mq/KOR7IobSRmekCUkMB8GA1UdIwQYMBaAFFE+znPunqMl6kQpMbAGK9i/MEp2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTc1RS9FMkFDQjQzQTg5
NkExMUYwODFFNDRENTdDNEY5QUUwMi9VVDdPYy02ZW95WHFSQ2t4c0FZcjJMOHdT
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VUN09jLTZlb3lYcVJDa3hzQVlyMkw4d1NuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTc1RS9FMkFDQjQzQTg5NkExMUYwODFFNDRENTdDNEY5QUUwMi9VVDdPYy02ZW95
WHFSQ2t4c0FZcjJMOHdTblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAILmMQ3vCVPFYY0XyDgB2RMav2bDnmUrdqHAiLKcwwrtwIkKcHUKpejuVEoxQ
wFdig099dlRLWDB2tmBA8A7Ix7mBi8tQZmj6IBlIL519uYeJ2ZjP2MLXEp4DaXhZ
G1urO0njK7u/QcYCihPdddDUmIIr+kMSeKhZjw/zD5tWF28nxEwDDXzFtXtGtve2
0+rapheISnHLDL/ZcT/cGCUiC3/tjcFM6aBds6rM6Dh+fLn2l+VQSi0Vwgesab5w
L9iOSdgTJijJKVPIGT7uZHcXeBOtmT1Pdx2v+WOoNG+DmILR4VmI1nynp1Fg+5Go
YRj7rflP2h6avhwAhs1iFhIedw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:53:29 2026 by rpki-client