
$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier: lbIO6CL87YZ2CQMvEP7eRQpi2fPgE8OpGFv5+aOvoJ4=
Subject key identifier: 48:1D:0A:D3:75:0E:22:6A:F4:FB:C3:0F:2F:A4:24:57:04:CA:CB:7C
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number: 0239
Signing time: Sun 05 Apr 2026 02:11:54 +0000
Manifest this update: Sun 05 Apr 2026 02:11:54 +0000
Manifest next update: Sun 12 Apr 2026 02:11:54 +0000
Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: CFDX/dSjexmp9fY18fK/MgakHCGRR/924q9Qm5j13rQ=)
2: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: KoscC2+CKPk9KEZZ95MIfhzhcgEnyjRIFFpZQcedXxs=)
3: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: /K4XbNVu4etnNSZ7BxaN1k4jj6OscZNd232IO+CgOm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Validity
Not Before: Apr 5 02:11:54 2026 GMT
Not After : Apr 12 02:11:54 2026 GMT
Subject: CN=69d1c4ea-bed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:79:eb:06:1b:0f:a1:9b:74:77:5b:94:1f:
6c:ff:9c:c0:aa:f5:13:96:91:32:53:08:ce:3a:12:
8b:0c:3b:90:6c:33:ef:f9:a8:82:cf:79:a7:66:b8:
36:5c:f4:1e:f1:ee:6a:4d:d3:4e:9c:99:0c:82:e5:
2c:2a:9e:0d:9a:80:5d:c4:3e:5e:be:dd:4e:27:95:
a0:78:fc:d4:85:ca:39:e8:e5:b9:2e:5a:ec:ac:e5:
20:48:90:8b:f8:cb:9a:64:6d:2e:09:42:13:51:44:
62:2f:78:50:e2:0c:e1:df:d1:cc:88:be:f7:e3:6d:
94:d2:bf:5a:46:5c:9e:af:74:18:78:0b:04:fa:ad:
64:fb:0c:ef:ed:8b:ba:cb:74:ad:85:42:0a:4a:c1:
ac:4b:f2:80:ea:a1:eb:3e:53:5e:33:02:cb:85:05:
89:a8:3b:e8:38:7f:d6:b1:62:f9:1a:65:30:68:3d:
e1:d9:02:9c:fc:79:f4:f2:02:dc:e6:06:8c:99:6a:
d3:78:0a:d2:6c:31:32:5b:9a:56:2d:73:ac:3c:62:
bc:9b:b8:c4:63:3c:cd:98:7c:18:b6:a4:e4:4e:45:
8d:ed:66:1d:d8:ae:40:2b:24:57:19:af:55:e1:95:
70:3c:34:23:13:75:80:ff:5a:6d:45:e6:aa:1c:c4:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1D:0A:D3:75:0E:22:6A:F4:FB:C3:0F:2F:A4:24:57:04:CA:CB:7C
X509v3 Authority Key Identifier:
keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:00:b5:a1:a2:28:63:70:e2:ba:51:47:d2:d6:ca:db:b1:
59:05:28:e3:0a:f6:d2:e8:eb:be:42:ca:01:a2:b5:90:04:4e:
26:8d:82:f9:a9:5b:b5:44:f8:12:6a:2f:1b:7a:f7:b9:ac:60:
89:f1:e9:5d:d9:6c:96:e1:6c:67:a0:6b:73:b3:4d:9a:c9:3d:
33:4f:af:0b:f2:93:00:7d:45:c5:2f:ff:97:07:99:41:04:f2:
66:84:43:6f:a0:77:25:9d:50:4d:fa:e7:8f:e2:15:b8:79:fd:
6b:a8:90:ed:52:2e:2a:1b:2a:e9:1a:0f:53:b2:88:a3:f9:91:
ef:e1:cd:46:d5:ee:cc:86:38:c3:24:f9:97:40:54:83:5c:e9:
f8:dd:38:bf:e0:0a:57:84:34:14:d2:d4:08:a5:cd:26:e7:75:
86:0a:04:26:1e:bc:fb:6a:1a:a2:64:81:e7:45:de:63:ab:d4:
fa:6f:1c:17:9a:ac:13:72:b0:93:dc:04:55:0e:8e:93:e0:69:
a0:55:13:27:aa:d2:cd:e8:76:62:83:fa:e8:39:5b:d3:03:e6:
42:b2:c8:5b:f4:8e:d6:3e:9a:73:85:27:21:60:56:63:35:2b:
dc:26:ff:a5:d9:08:64:cf:87:35:b2:51:8f:f9:e4:ae:62:9b:
93:c0:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:00 2026 by rpki-client