
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File: Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier: p+u+39TUYj7+Y6n08SAqFQ9VU8Sb6tGbd+ZDOTd82kg=
Subject key identifier: FC:AC:AC:09:91:0E:31:D7:A5:63:F3:F1:E5:9C:3C:C4:E8:96:08:E9
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer: /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number: 4C
Signing time: Sun 05 Apr 2026 07:43:33 +0000
Manifest this update: Sun 05 Apr 2026 07:43:32 +0000
Manifest next update: Sun 12 Apr 2026 07:43:32 +0000
Files and hashes: 1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: xPvWgmQOO+WpRmD3QdPcv0O07RJevR4mL5gZGnOUBxU=)
2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Validity
Not Before: Apr 5 07:43:32 2026 GMT
Not After : Apr 12 07:43:32 2026 GMT
Subject: CN=69d212a4-1a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:1d:e0:d1:74:2d:d4:a7:a6:f9:95:ab:2a:
e0:61:99:5f:12:13:89:11:fc:31:ec:f5:c6:c0:4b:
95:d2:3b:35:29:59:c0:68:1b:58:37:aa:29:08:ed:
d2:e7:4c:ca:c8:b4:a7:50:20:99:3a:3f:13:a6:b6:
e0:56:c7:f1:ac:d1:66:06:1d:fb:cb:c4:c2:55:7a:
3f:1b:9f:63:cc:d2:f9:89:70:bb:aa:8a:7a:18:e9:
2c:de:2a:98:87:47:ae:6e:58:f6:a2:6a:32:95:e0:
7e:53:c7:69:56:09:ee:9e:9d:c6:25:4c:6f:57:b5:
20:87:50:b4:20:c7:0e:2c:b0:28:46:55:7f:63:4f:
37:06:39:11:90:5d:ce:ff:e1:38:f1:5b:6b:17:9b:
2f:57:80:38:37:33:4b:d6:b0:10:82:c4:61:9c:ad:
fb:22:0d:5e:0e:55:4c:f2:06:ac:bb:ea:ad:76:f5:
9e:00:c9:ff:ae:c5:ba:6e:d9:4d:80:ee:d9:e8:54:
b3:03:f8:ef:d5:5f:74:c3:2a:c4:63:4a:66:a9:73:
16:3d:f4:ab:6b:39:5e:18:90:04:b3:12:48:0a:fc:
54:33:f5:ef:84:9e:47:fa:b8:f4:8a:0b:81:88:65:
9f:ca:87:6f:71:00:ba:c9:de:d6:df:c1:e3:f0:31:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:AC:09:91:0E:31:D7:A5:63:F3:F1:E5:9C:3C:C4:E8:96:08:E9
X509v3 Authority Key Identifier:
keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:cf:95:22:99:31:b3:8a:ff:b2:9f:a4:82:25:0f:62:90:d0:
76:3f:61:21:95:41:2d:2a:ca:00:56:4c:40:4e:35:a2:e7:94:
ad:59:5b:6c:a3:49:a4:6c:27:0c:bd:2c:d1:a4:ef:e0:5c:7e:
8c:c6:4c:da:68:30:a3:20:9b:70:cb:0b:d0:eb:be:d6:37:61:
09:f5:b3:26:3f:eb:0b:37:e6:a4:21:8e:37:79:c6:54:60:fe:
17:74:ea:81:b1:18:21:47:1a:f8:76:95:44:3c:bf:06:1e:65:
49:30:e3:03:9a:ce:5e:ac:fc:df:24:55:ab:b4:8a:f8:4b:57:
2b:b5:af:3f:0e:1f:ac:d7:dd:d2:c5:4b:ce:1f:55:1d:af:26:
41:ff:f3:8b:9f:a8:f3:4c:e9:60:ce:de:97:87:82:6f:ef:87:
d6:14:0f:50:2f:25:d4:d8:94:fa:fe:3e:8e:78:8c:a8:a9:71:
0b:0b:dc:9c:1b:25:01:7d:39:14:c8:99:19:73:2d:f6:11:f3:
b9:cf:f3:b3:f5:9c:b8:d7:08:24:b2:20:4d:f0:9e:4e:67:08:
f4:03:6b:31:b7:d3:57:ae:fc:10:08:2f:f9:f0:b4:25:6e:6b:
50:7f:65:ee:a5:55:e0:11:6d:cf:c4:fd:fc:d7:ff:b4:82:f5:
84:32:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:53 2026 by rpki-client