
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json)
Hash identifier: JFXcZYVjqlO/MgxtKsCEYh56NOy1AIayHb4H+7yeCco=
Subject key identifier: 13:71:3F:CA:A4:73:1D:74:6B:9F:1E:07:EF:94:0F:82:09:F7:C3:E0
Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Certificate serial: 0492
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
Manifest number: 0487
Signing time: Mon 05 Oct 2026 00:05:14 +0000
Manifest this update: Mon 05 Oct 2026 00:05:13 +0000
Manifest next update: Mon 12 Oct 2026 00:05:13 +0000
Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: PAohT/NyrUJmHvgSCOnic+Nekh4908AmoIJgEMepxv0=)
2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: iqRn8MuwHOm1OeP7OiaBzMQDUZroez3UjhhvxuLDGhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl
rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170 (0x492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Validity
Not Before: Oct 5 00:05:13 2026 GMT
Not After : Oct 12 00:05:13 2026 GMT
Subject: CN=6ac2e9ba-0783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:2a:a4:a6:15:3a:74:af:3e:e7:af:02:31:
f9:f3:a2:f5:45:fa:0b:e0:88:34:bb:65:65:32:e6:
b5:83:3e:13:5f:5e:03:04:fe:09:01:e1:1d:33:08:
59:17:7b:00:14:ab:06:ae:66:17:5c:ab:eb:ec:d1:
6e:9d:d3:5b:99:91:59:03:b8:1a:2f:27:ea:12:9e:
53:b9:07:86:77:d5:cb:db:9a:72:13:c8:ae:9b:76:
34:f2:ec:13:0b:57:6d:70:2f:9e:1a:9b:07:02:98:
a9:ad:9e:f1:b7:44:e2:b3:04:0f:af:7f:1e:de:d5:
3c:6f:73:77:70:54:23:8f:b0:1f:89:2b:fa:87:41:
a2:51:fc:a9:7a:e5:41:74:16:82:72:3b:61:c0:85:
01:e3:b4:5f:bb:34:71:a1:94:d5:0e:b9:03:26:7f:
6f:73:96:3b:42:3b:cb:a0:a8:71:1d:f1:25:d1:f3:
a9:bc:c8:09:a3:6f:ed:cc:a4:d7:4b:6e:62:c3:10:
f4:71:b7:59:e4:08:bb:56:39:c5:55:e4:ca:b7:bd:
21:4b:16:61:02:f4:74:58:87:31:ba:17:94:ef:fa:
46:44:dc:66:aa:a6:b5:4c:39:9b:bf:33:d6:4c:bf:
5a:b6:ab:45:4e:87:4b:3d:82:0c:f7:37:8c:b1:38:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:71:3F:CA:A4:73:1D:74:6B:9F:1E:07:EF:94:0F:82:09:F7:C3:E0
X509v3 Authority Key Identifier:
keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:9a:a9:cd:3f:c4:df:b3:55:10:48:7b:09:6d:f2:fd:04:46:
23:5b:60:84:18:47:d3:38:5b:8b:f5:a2:88:00:32:92:1a:3d:
ab:12:a0:eb:f5:a3:d5:2d:dc:d6:9e:11:aa:6a:29:60:b1:fc:
82:70:de:31:06:5b:e5:5b:db:25:a3:9a:f4:a3:9a:26:e4:53:
83:fa:da:c1:2a:3c:86:86:85:2a:24:98:02:b8:1c:67:17:a4:
87:5e:f7:5d:3e:1f:04:b1:81:ad:7b:1e:0f:0a:48:dc:6c:da:
a3:3f:43:ac:11:68:01:18:5f:9d:39:1a:12:99:3b:d6:3e:74:
eb:75:cd:1d:1d:96:54:31:62:94:29:00:8d:31:26:30:b2:30:
eb:1e:cf:7b:b7:b6:f5:86:c7:b1:18:cd:1b:64:6e:eb:2f:bc:
5a:6d:ad:6d:a7:a9:78:c6:85:dd:3d:c7:42:72:c3:26:0e:89:
01:ff:a2:53:06:59:17:c3:b0:2f:19:ac:9f:b3:e8:11:22:94:
38:f3:82:ae:42:8b:5d:58:b4:94:ac:23:b3:67:b1:68:4e:7a:
77:eb:f0:ca:fd:dd:c8:c7:15:d1:30:b4:de:1b:3b:a7:cd:ca:
8d:18:7d:7b:02:29:40:50:0f:74:1f:f5:52:13:8c:bf:7d:f9:
0b:40:e3:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAzQ0YxMTAvBgNVBAUTKEI4QUQ4RDkxNkNEOTQ4MkI2REE1NUQzMDdDRTk1QzA3
QTk1QjJGNzQwHhcNMjYxMDA1MDAwNTEzWhcNMjYxMDEyMDAwNTEzWjAYMRYwFAYD
VQQDEw02YWMyZTliYS0wNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA054qpKYVOnSvPuevAjH586L1RfoL4Ig0u2VlMua1gz4TX14DBP4JAeEdMwhZ
F3sAFKsGrmYXXKvr7NFundNbmZFZA7gaLyfqEp5TuQeGd9XL25pyE8ium3Y08uwT
C1dtcC+eGpsHApiprZ7xt0TiswQPr38e3tU8b3N3cFQjj7AfiSv6h0GiUfypeuVB
dBaCcjthwIUB47RfuzRxoZTVDrkDJn9vc5Y7QjvLoKhxHfEl0fOpvMgJo2/tzKTX
S25iwxD0cbdZ5Ai7VjnFVeTKt70hSxZhAvR0WIcxuheU7/pGRNxmqqa1TDmbvzPW
TL9atqtFTodLPYIM9zeMsTjz5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNxP8qk
cx10a58eB++UD4IJ98PgMB8GA1UdIwQYMBaAFLitjZFs2UgrbaVdMHzpXAepWy90
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDNDRi8xN0Q2RTRDMkE2
OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlNDdHRwVjB3Zk9sY0I2bGJM
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLMk5rV3paU0N0dHBWMHdmT2xjQjZsYkwzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDNDRi8xN0Q2RTRDMkE2OEExMUVDQTlBNjM1NTFDNEY5QUUwMi91SzJOa1d6WlND
dHRwVjB3Zk9sY0I2bGJMM1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc5qpzT/E37NVEEh7CW3y/QRGI1tghBhH0zhbi/WiiAAykho9qxKg6/Wj1S3c
1p4RqmopYLH8gnDeMQZb5VvbJaOa9KOaJuRTg/rawSo8hoaFKiSYArgcZxekh173
XT4fBLGBrXseDwpI3Gzaoz9DrBFoARhfnTkaEpk71j5063XNHR2WVDFilCkAjTEm
MLIw6x7Pe7e29YbHsRjNG2Ru6y+8Wm2tbaepeMaF3T3HQnLDJg6JAf+iUwZZF8Ow
Lxmsn7PoESKUOPOCrkKLXVi0lKwjs2exaE56d+vwyv3dyMcV0TC03hs7p83KjRh9
ewIpQFAPdB/1UhOMv335C0DjLA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 00:20:26 2026 by rpki-client