
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json)
Hash identifier: 8Fd/xefcwvE4W7CnEdRdEORXxQMFC2ahrodSJWnzbVw=
Subject key identifier: 61:78:07:29:25:56:B3:49:C3:34:73:99:5F:3E:0A:E2:77:FD:14:1A
Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Certificate serial: 0F33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
Manifest number: 0F29
Signing time: Wed 22 Jul 2026 17:45:15 +0000
Manifest this update: Wed 22 Jul 2026 17:45:14 +0000
Manifest next update: Wed 29 Jul 2026 17:45:14 +0000
Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: 0n64yKABEvyUKWtbl1jT1JsYaDj60ouB3+09U9FArnQ=)
2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /Sl1+zcuYzALlR5FExQ8VOIo7ICRp9RWUJXD4AKkevs=)
3: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: tkrVJ/cVpoiHk0cmXy2YYFkJoXN9OgcqITOcYSO8FI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3891 (0xf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Validity
Not Before: Jul 22 17:45:14 2026 GMT
Not After : Jul 29 17:45:14 2026 GMT
Subject: CN=6a6101ab-23d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:df:07:6b:d3:90:83:45:09:dd:b5:06:d8:
25:5e:d3:44:93:c7:ee:1d:f3:44:4e:32:0c:48:d1:
74:db:00:d5:f2:82:60:48:a8:fa:06:8f:d1:c5:57:
bd:e5:11:65:dc:53:92:de:2d:d2:6e:9a:3e:b2:ff:
5c:68:9f:4c:70:c5:fd:88:08:ca:27:32:8f:04:f8:
e1:53:34:2f:16:b8:34:b9:94:57:7c:1a:90:bc:89:
04:0d:ae:71:c2:0b:f9:38:da:84:99:0f:0f:9a:f9:
4a:df:44:1f:5a:83:20:26:1d:92:cf:d7:d8:e1:6c:
6b:ee:2f:47:4e:a4:48:94:83:f7:23:6d:38:7a:fe:
1e:49:2e:e9:d9:ff:7f:c7:e6:38:bc:5e:52:b0:b7:
60:23:52:64:d0:2e:4b:21:7e:1f:d0:ff:17:2b:5f:
20:4a:0e:9c:a6:75:ed:38:63:87:7a:f2:2e:35:6a:
52:b6:50:b3:5a:bf:4b:1a:dd:a4:96:3b:e5:9d:bd:
c4:f0:00:88:08:6a:b3:95:d7:da:34:69:f9:eb:84:
ae:cd:5d:87:28:65:80:28:7d:3d:8e:4c:c8:74:cd:
75:74:82:96:30:30:8a:86:1d:9a:50:94:dc:51:35:
81:49:eb:7b:b9:c3:36:42:84:62:c1:05:7a:d5:35:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:78:07:29:25:56:B3:49:C3:34:73:99:5F:3E:0A:E2:77:FD:14:1A
X509v3 Authority Key Identifier:
keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5d:f9:a4:51:ef:ce:ed:7b:52:f9:cd:0b:cd:2e:65:99:3f:
88:b4:3e:84:66:82:b7:ba:b0:b1:02:0b:3a:04:a0:f6:68:19:
15:0c:51:df:d4:be:ea:29:c6:59:e0:ca:d0:5f:63:b1:78:83:
9a:68:06:9f:4c:63:70:38:de:af:16:d4:98:a0:43:3e:9c:eb:
2c:5a:33:2f:f0:50:f2:c1:03:2b:9a:ee:8e:1a:72:f0:0a:60:
87:40:f3:9c:e5:08:c4:84:84:d8:0c:f9:ac:68:7f:d1:15:91:
c7:fe:40:ad:64:ec:bd:35:bb:00:5f:ed:09:34:e0:81:06:a2:
da:9b:54:a7:8c:b3:34:bd:42:08:cd:14:48:c0:49:1c:b7:4f:
fa:83:85:e4:93:14:2d:25:a3:1f:13:6b:51:65:2d:42:fb:0c:
45:cf:f6:39:15:05:80:68:1b:89:3c:a9:03:47:1a:3f:e8:39:
d8:35:40:ca:f7:96:98:39:37:4f:56:48:df:a5:98:ec:7d:dc:
1e:f5:be:2c:05:8e:4c:3f:6a:c9:0f:07:3f:67:f1:59:00:31:
88:85:b4:60:7d:73:fa:dc:6f:fd:f4:e0:48:bb:7e:cc:75:42:
7d:c8:72:74:90:27:4e:85:c4:ef:bf:bd:42:6b:de:48:92:31:
01:b2:0d:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2
ODQzMEY5RTQwHhcNMjYwNzIyMTc0NTE0WhcNMjYwNzI5MTc0NTE0WjAYMRYwFAYD
VQQDEw02YTYxMDFhYi0yM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAri7fB2vTkINFCd21BtglXtNEk8fuHfNETjIMSNF02wDV8oJgSKj6Bo/RxVe9
5RFl3FOS3i3Sbpo+sv9caJ9McMX9iAjKJzKPBPjhUzQvFrg0uZRXfBqQvIkEDa5x
wgv5ONqEmQ8PmvlK30QfWoMgJh2Sz9fY4Wxr7i9HTqRIlIP3I204ev4eSS7p2f9/
x+Y4vF5SsLdgI1Jk0C5LIX4f0P8XK18gSg6cpnXtOGOHevIuNWpStlCzWr9LGt2k
ljvlnb3E8ACICGqzldfaNGn564SuzV2HKGWAKH09jkzIdM11dIKWMDCKhh2aUJTc
UTWBSet7ucM2QoRiwQV61TWYMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGF4Bykl
VrNJwzRzmV8+CuJ3/RQaMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF
MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n
LUNodEJsU0NudGRvUXctZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi135pFHvzu17UvnNC80uZZk/iLQ+hGaCt7qwsQILOgSg9mgZFQxR39S+6inG
WeDK0F9jsXiDmmgGn0xjcDjerxbUmKBDPpzrLFozL/BQ8sEDK5rujhpy8Apgh0Dz
nOUIxISE2Az5rGh/0RWRx/5ArWTsvTW7AF/tCTTggQai2ptUp4yzNL1CCM0USMBJ
HLdP+oOF5JMULSWjHxNrUWUtQvsMRc/2ORUFgGgbiTypA0caP+g52DVAyveWmDk3
T1ZI36WY7H3cHvW+LAWOTD9qyQ8HP2fxWQAxiIW0YH1z+txv/fTgSLt+zHVCfchy
dJAnToXE77+9QmveSJIxAbIN+Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:16 2026 by rpki-client