
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier: bOnB/pJq7xlgCEFouV50sQMppXz1tW0X1Zl9qrr2oec=
Subject key identifier: D3:99:3B:0D:79:79:D9:6C:57:37:AA:34:87:51:57:39:47:E0:0F:CB
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial: 0B00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number: 0AE8
Signing time: Wed 20 May 2026 19:27:35 +0000
Manifest this update: Wed 20 May 2026 19:27:35 +0000
Manifest next update: Wed 27 May 2026 19:27:35 +0000
Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: 5SOM5CXziUGKVSY2T1iOBrayOawwGuq5tc7kEM5opPs=)
2: 834C938A12C711F09998A234C4F9AE02.roa (hash: FGFCUH8ClLANdklj2bZ58cKTnItHntcutDN30p2U93k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2816 (0xb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Validity
Not Before: May 20 19:27:35 2026 GMT
Not After : May 27 19:27:35 2026 GMT
Subject: CN=6a0e0b27-390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:ea:cd:f9:1d:a7:10:93:81:41:f8:b8:9d:
cf:6c:4d:76:ac:15:c0:61:15:a8:e8:d1:86:6f:d5:
61:ae:65:43:41:e9:1f:fd:51:f3:99:ac:98:0b:86:
ee:e0:67:82:77:b9:2b:a8:c8:0a:ec:27:17:40:3b:
36:2f:76:fe:f6:26:8a:f2:d5:4d:84:a8:6f:db:f1:
21:8e:c7:da:f1:ca:ce:28:58:fd:c2:db:4e:16:1d:
8a:60:f7:fe:c2:ea:fa:6e:af:88:b8:a2:d2:cd:2e:
6f:0f:1e:d1:46:ce:6a:cd:cf:bd:ad:c0:0d:42:23:
e1:32:7f:b7:fb:6a:9e:cf:10:e3:d8:3c:06:c1:c8:
20:ae:66:c7:8c:5f:c8:7b:d9:17:1b:c9:d7:10:8f:
83:62:ab:2f:20:28:55:4c:18:3d:fa:b9:8a:0f:71:
11:65:93:92:54:03:ef:43:ac:c8:87:ba:eb:27:67:
3f:c6:3d:ef:bb:97:6c:bc:66:d3:5e:a8:13:df:8c:
95:e9:67:cf:93:f3:c2:ea:99:ff:d9:cd:0a:a0:83:
78:6a:2f:f3:c7:0e:a2:99:7e:ae:7a:f6:48:c0:f0:
21:65:c0:48:75:04:76:09:0c:4a:b9:0d:2c:71:d7:
a3:cf:48:59:e7:7c:2b:bf:76:91:4d:43:5c:9c:41:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:99:3B:0D:79:79:D9:6C:57:37:AA:34:87:51:57:39:47:E0:0F:CB
X509v3 Authority Key Identifier:
keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:29:86:75:2f:26:13:58:7e:70:d4:e6:8d:2b:3f:58:f5:72:
e6:6f:dd:e3:8b:ec:9e:88:27:79:cf:12:09:e4:55:a5:46:66:
e4:92:11:c9:2e:69:14:24:67:6c:0e:a4:e1:eb:56:f3:f0:8b:
9f:3c:2d:f2:03:9a:b9:0c:2f:4a:d0:10:09:b8:ae:7a:90:15:
cf:de:41:89:a4:00:c8:ff:21:ab:63:40:d1:d7:cd:d6:fe:a2:
68:c4:75:7e:47:e4:71:56:2e:e2:60:1a:68:70:e1:fe:27:ed:
5b:89:ed:8a:25:50:5c:82:ec:b0:e8:04:2b:34:4e:df:b2:e9:
92:3a:b4:96:bb:aa:42:61:bc:29:04:d6:39:ba:16:44:bd:0d:
84:28:07:ee:c2:3b:3b:7b:9a:38:04:48:e1:e0:db:c9:96:d5:
d5:48:e4:35:fd:85:b1:6b:16:de:5b:b9:34:4b:7f:c7:4a:72:
11:96:7c:eb:34:11:28:fe:a6:13:6c:8f:12:c4:97:6a:2c:91:
90:5f:76:bc:67:fe:82:59:2a:81:ff:3e:b9:bd:f9:28:91:f1:
8d:81:1b:64:37:a9:8a:49:c4:72:57:88:eb:f9:d2:6d:ae:d9:
d2:44:e0:ef:a9:8d:f1:fb:1f:49:75:fe:30:3b:31:f5:dd:7f:
40:5a:f9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:45 2026 by rpki-client