
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
File: uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json)
Hash identifier: g4YOS5kb4XMry/E34KZoishKgYsY2RcggPaf2t6HKmU=
Subject key identifier: 3F:9C:D5:37:EC:CE:75:59:9B:D5:B3:0C:D1:45:6A:14:E3:BB:28:61
Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Certificate issuer: /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
Manifest number: 0412
Signing time: Tue 21 Apr 2026 00:18:45 +0000
Manifest this update: Tue 21 Apr 2026 00:18:45 +0000
Manifest next update: Tue 28 Apr 2026 00:18:45 +0000
Files and hashes: 1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: pDqahuixC9iZtjTjCIe0JZAJPWAcrUBrCG/6AAXtkc0=)
2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: epKRw41KBWpJS0cS06bdYab65bSZPCjDLsCD9m8JyLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 00:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Validity
Not Before: Apr 21 00:18:45 2026 GMT
Not After : Apr 28 00:18:45 2026 GMT
Subject: CN=69e6c265-5ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:d4:6f:4a:d7:82:25:36:bd:f8:5e:56:8b:
23:6c:a4:59:25:2e:1b:4c:3c:98:97:94:2b:82:cf:
09:bc:a5:29:81:bb:40:33:1c:82:c5:c9:64:b0:0f:
f8:e0:90:8f:6b:ce:6d:7f:27:d2:80:3a:58:b5:bb:
dc:07:ab:bb:d8:3a:dc:cc:49:8b:ac:50:56:f3:68:
44:fc:5b:85:e0:e3:c4:e7:ff:bc:1a:cd:42:a9:46:
2d:67:c4:13:d1:3e:06:3f:ea:6f:1f:85:94:98:c6:
72:af:89:d2:37:56:dd:a0:0a:31:fe:7c:ce:50:f1:
7d:8f:2c:0b:3d:3e:0c:38:52:bf:4a:4f:be:cb:62:
9a:71:06:55:84:f6:cb:3a:39:e4:c4:f5:c3:bf:8a:
33:37:10:0b:0a:1f:83:ef:36:25:03:c4:34:4d:13:
c2:b2:a5:d0:4f:c9:1a:a9:3f:ba:5d:a6:57:fb:e7:
27:22:71:72:5d:12:7e:6c:4b:cb:4d:6b:20:36:a5:
c2:2f:c3:25:fe:92:34:47:73:b0:d4:37:56:2a:63:
76:b3:30:ec:2a:3c:9f:b1:72:7d:c0:ee:af:f4:66:
1e:9d:1a:bf:33:02:c8:03:45:5f:24:4e:39:69:e9:
d2:5a:53:03:f4:e6:a7:47:93:c1:7c:86:52:1a:4f:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:D5:37:EC:CE:75:59:9B:D5:B3:0C:D1:45:6A:14:E3:BB:28:61
X509v3 Authority Key Identifier:
keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:33:ec:6e:be:5d:91:49:2c:d5:43:f7:ab:9a:06:df:38:24:
4c:2d:7e:af:75:75:59:33:af:b9:90:52:e0:d3:ff:d1:4d:e5:
e5:15:fe:bb:2e:f8:75:e1:d2:37:03:25:0d:4f:84:e7:a7:05:
1d:2b:03:9b:38:fd:5b:c3:51:5f:58:44:d0:88:64:89:4a:0d:
7a:6f:e8:02:6a:ae:14:3d:0f:4a:cd:f4:55:5e:86:f5:cc:df:
4a:36:40:2e:f0:ab:06:f6:b8:b6:02:e0:a5:ff:09:ff:16:ca:
89:25:5c:a3:83:74:c3:79:55:cf:fd:43:81:0b:0e:f7:64:c4:
72:76:97:fd:6b:b1:b4:4d:97:f5:b7:48:3e:73:79:78:90:da:
cc:67:0f:d6:5c:88:66:e8:8e:7f:a4:bf:7e:ac:8f:2a:e5:e6:
d2:5b:f7:70:58:cf:0d:c9:d4:67:48:3b:5c:26:07:bc:af:f3:
f3:cc:b3:2e:38:e3:ef:9e:ef:ef:66:47:ba:1f:4e:1d:9a:81:
7f:3c:6b:23:49:77:14:8c:ad:5d:ad:83:00:50:8d:eb:3b:37:
b9:57:78:f5:63:48:77:2e:22:04:c9:3a:01:61:a9:a5:2d:f1:
03:41:10:46:da:6d:d1:26:dc:95:db:9d:24:3f:3a:20:74:f0:
4f:ca:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:40:52 2026 by rpki-client