
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
File: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft (raw, json)
Hash identifier: UZBxq++SFYj0cOWf657SSjYc2/wTglTL5PmqubrhHBc=
Subject key identifier: EB:0B:08:3B:94:E0:EE:E2:FF:1A:59:9D:29:51:6C:11:BF:87:F0:3F
Authority key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
Certificate issuer: /CN=A91201F1/serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
Manifest number: 8E
Signing time: Sun 25 Oct 2026 08:00:05 +0000
Manifest this update: Sun 25 Oct 2026 08:00:04 +0000
Manifest next update: Sun 01 Nov 2026 08:00:04 +0000
Files and hashes: 1: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl (hash: P0saZeg90dzN16K+0wUryb7TmVMWGLo2BSNMmYLK6j8=)
2: D93132D6019811F1B6B26F14666F56BC.roa (hash: Kdauw0gJZUlOd9cLWCyN/Fmo1Dvhpdel9pLxOkR1eyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Validity
Not Before: Oct 25 08:00:04 2026 GMT
Not After : Nov 1 08:00:04 2026 GMT
Subject: CN=6addb705-60dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:42:8e:7e:46:03:18:cc:6f:55:30:8a:b0:
6b:96:1b:4d:4d:42:66:94:7a:45:c9:cc:8b:c3:64:
14:9d:1a:ee:20:78:62:b9:72:78:13:9a:45:3b:4b:
17:75:7b:4d:52:a1:44:b9:bf:90:8c:d7:94:4d:1a:
72:30:83:71:02:ed:31:3e:86:7e:59:99:70:61:a8:
92:7e:c8:69:0b:10:84:1f:27:52:eb:2c:cc:c1:a1:
29:f5:df:33:27:4a:dc:c2:70:16:dd:f5:fd:dc:3a:
cd:a5:7f:23:48:39:b2:74:61:e8:c7:96:f5:cd:9b:
2d:0d:99:76:8e:8c:10:d5:8a:ea:bc:a7:23:39:2e:
8f:cf:5b:38:27:ec:b8:42:ec:73:ac:58:41:a8:1b:
4b:7a:72:ea:42:3e:92:1e:53:9d:44:a2:9a:10:80:
4e:86:af:74:cc:6f:b4:37:fd:5b:79:7f:de:db:ee:
97:15:1a:66:49:11:c5:06:7d:f2:2d:fd:66:6a:6f:
47:36:eb:0b:6b:a2:56:62:b7:0c:54:fb:9f:e8:a7:
7b:09:e3:fb:74:a9:2a:a1:73:55:4a:c5:fb:4b:53:
bf:fd:13:1d:cc:94:62:bd:4e:e0:e7:a2:57:2e:63:
ef:22:8e:68:53:e7:f9:a6:cc:24:51:51:6b:e0:f1:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:08:3B:94:E0:EE:E2:FF:1A:59:9D:29:51:6C:11:BF:87:F0:3F
X509v3 Authority Key Identifier:
keyid:51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:03:3d:64:c8:af:0b:54:40:21:06:03:5f:bf:e0:17:51:39:
f1:93:10:44:a1:32:a3:0d:09:13:3a:a4:5a:3c:f5:ea:d8:ff:
00:6f:1f:e9:04:fa:e6:94:cc:3e:c8:45:0d:23:4c:f1:ac:5e:
4c:46:b4:29:95:cd:ea:25:d9:8b:b3:98:93:be:6f:c6:29:a9:
6e:a3:11:c4:d3:56:13:81:b2:e5:7f:44:1c:a3:9f:59:f0:f1:
aa:d7:d9:ec:25:a1:6f:b7:f9:37:03:47:90:b2:ff:ef:ca:b5:
7e:03:a5:87:b9:05:73:7c:63:de:97:c0:42:92:d3:89:e0:a5:
64:bd:73:0a:7d:11:79:82:a3:c2:bf:11:28:c9:bb:52:9b:cf:
85:23:28:0b:eb:96:28:a7:1f:36:c3:65:13:e0:e8:16:80:d2:
c2:a8:f2:a3:78:60:cf:19:06:37:de:b9:4e:f4:1f:14:3e:40:
14:ef:c7:97:d8:2c:34:b0:5e:2e:c6:1b:e2:17:3f:d0:65:c9:
a3:1b:e6:1d:10:3d:4c:a1:d3:54:7b:fa:c6:44:7f:3c:31:15:
ba:a3:1f:71:11:98:88:ec:15:1b:44:86:9a:3e:00:90:f2:44:
9f:ee:45:77:cd:8b:c6:06:50:37:77:b0:2b:10:d9:33:6a:a4:
af:31:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:46:08 2026 by rpki-client