
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json)
Hash identifier: Wa501cjfbTfjIiSrbeBexIqXx56n2k+koVfXKMDtewM=
Subject key identifier: A7:53:81:90:A2:A6:1D:9E:C1:46:54:8C:11:1E:45:E2:23:2E:46:33
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
Manifest number: 01F0
Signing time: Sun 05 Apr 2026 02:48:41 +0000
Manifest this update: Sun 05 Apr 2026 02:48:40 +0000
Manifest next update: Sun 12 Apr 2026 02:48:40 +0000
Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: uqIzjeQ/J1cwYSZ2fbnR76FRGfTd679r6BsiczwYGwY=)
2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: kQQtoUock6v51XesRrhDlErgmW8VAdf0TAeHQYio1TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Validity
Not Before: Apr 5 02:48:40 2026 GMT
Not After : Apr 12 02:48:40 2026 GMT
Subject: CN=69d1cd89-34a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:18:c0:f9:ef:dd:78:c1:73:b5:a9:eb:c7:
f4:01:9a:3e:25:6d:41:e1:1c:72:41:eb:a4:b0:69:
5e:36:00:6a:bd:e1:0f:93:61:c4:96:74:dd:7d:82:
64:8b:9e:97:f1:5e:ac:a3:74:90:cb:c2:9b:ee:8f:
a5:1e:07:49:51:09:da:b0:33:61:91:3f:8b:1c:4e:
1e:e1:e9:dd:4b:16:d1:bd:64:21:2c:26:12:c6:64:
dd:04:11:07:46:06:95:14:df:d6:28:be:c9:9f:dd:
de:0c:99:66:eb:ec:15:44:62:57:fc:1e:3f:fb:38:
ac:34:48:fe:21:ba:02:43:a3:38:99:ed:5f:d7:7b:
42:3e:1d:61:72:26:bd:ec:d3:9f:7f:a4:02:ae:38:
c4:61:64:f6:dc:2c:13:0e:cf:63:1f:b5:eb:7b:25:
e5:53:82:54:07:86:be:29:14:17:95:dd:d0:b9:f9:
56:b3:2f:e0:82:25:ae:79:1f:3b:9e:53:20:25:25:
a1:3e:00:f5:7e:8a:b8:11:78:79:58:6c:77:5e:64:
ec:91:70:6a:2b:c0:55:9a:76:64:31:14:d3:ec:5a:
67:e1:f7:46:51:4a:ef:38:4c:a6:6f:13:f9:f0:8c:
82:2c:1b:5c:63:67:2d:ce:e9:9d:52:53:07:12:e2:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:53:81:90:A2:A6:1D:9E:C1:46:54:8C:11:1E:45:E2:23:2E:46:33
X509v3 Authority Key Identifier:
keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:40:cd:a8:9d:a0:b0:19:54:eb:84:01:df:bb:d6:f2:a2:1f:
eb:e8:3a:e4:7a:d4:05:fb:e6:20:fa:0d:24:b2:f0:2c:77:57:
7e:80:fa:a1:d3:1e:b1:03:f1:d5:44:7a:48:fe:0f:9e:17:72:
5d:0b:f2:d2:a4:0c:d4:7c:ac:04:79:20:9b:0c:e3:f9:00:06:
2a:93:1b:30:ce:24:66:9f:44:77:08:3c:18:7d:a2:0f:ac:1a:
80:42:bb:47:5f:35:0b:a0:40:11:45:68:65:5c:fa:05:f5:ca:
36:83:ae:df:20:fd:a3:b5:e5:39:0e:44:dc:96:32:39:62:07:
e4:76:14:f0:31:25:c1:e2:07:d1:17:a5:01:21:0b:c7:0a:a6:
96:8d:0a:e6:75:da:dc:16:2d:fa:6e:6d:27:71:19:1f:24:3a:
6a:ff:08:4f:cb:dd:94:46:ef:2c:7d:38:07:e6:15:e5:68:ef:
a8:35:fd:c5:8d:8a:8c:c0:c0:f1:06:37:5a:5a:c5:dd:bf:2b:
6f:b1:fa:07:0e:55:a2:cf:e5:18:72:a0:7a:24:0a:a6:dd:e0:
0c:f6:37:ae:68:db:6b:6a:7a:4e:29:ad:9c:df:99:7b:fd:77:
3b:50:a4:ef:83:c0:06:37:80:e6:e9:de:56:f9:8f:e9:b3:35:
26:ce:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:46:59 2026 by rpki-client