
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
File: uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json)
Hash identifier: UqSLpNyZS705SF0fhDgep+rjovirWSU+YQzPUdGw7M4=
Subject key identifier: 2F:FD:77:1B:41:78:0D:64:D4:82:4C:23:59:99:98:60:1A:B5:B6:5A
Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Certificate issuer: /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Certificate serial: 0460
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
Manifest number: 0459
Signing time: Fri 04 Sep 2026 23:53:50 +0000
Manifest this update: Fri 04 Sep 2026 23:53:50 +0000
Manifest next update: Fri 11 Sep 2026 23:53:50 +0000
Files and hashes: 1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: RAsM1WEILU3uN4+wcUIVv/Leas29QU+eYcYShnsBeT0=)
2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: epKRw41KBWpJS0cS06bdYab65bSZPCjDLsCD9m8JyLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Validity
Not Before: Sep 4 23:53:50 2026 GMT
Not After : Sep 11 23:53:50 2026 GMT
Subject: CN=6a9b5a0e-0afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:75:d7:47:f9:7c:cb:cb:1f:91:d9:b1:d5:
60:28:82:01:40:b1:15:31:59:3f:fb:10:53:71:13:
ab:07:13:66:ea:d4:86:e5:f5:4f:90:58:67:7e:28:
35:d1:82:ef:90:f8:83:cb:fe:b7:13:f2:07:30:ad:
06:ea:06:13:9d:64:37:74:70:43:e9:c5:27:b3:90:
1b:3b:3e:bb:10:23:cf:43:81:f7:31:ee:9f:91:95:
d7:64:ed:38:91:93:a2:5e:88:69:a1:b6:21:85:b6:
7b:c2:9e:ba:ae:bf:3f:24:11:c2:63:6c:21:8d:a9:
34:49:22:a5:41:af:6c:2b:80:6b:11:cc:0c:d9:6b:
e7:39:33:be:dd:79:63:e3:33:8e:f6:d9:35:4d:7f:
05:6c:88:1d:1c:3f:97:e8:a0:43:d8:c8:07:35:68:
97:92:f2:79:95:5c:89:c9:02:6c:e5:de:92:ff:f6:
d0:2f:2e:7c:72:70:70:ca:0b:eb:ab:8e:bf:70:65:
b5:bf:57:8b:ab:86:b0:5a:b1:bd:7c:be:51:ca:f4:
2a:12:c2:0b:ba:01:d9:9d:0a:b8:5c:a7:3f:bf:56:
06:66:e6:a1:99:bb:db:4e:f3:6e:23:76:e4:f5:64:
a0:95:e1:58:39:b0:b6:aa:37:d0:74:ed:2c:51:29:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FD:77:1B:41:78:0D:64:D4:82:4C:23:59:99:98:60:1A:B5:B6:5A
X509v3 Authority Key Identifier:
keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:9e:a5:02:2c:cd:65:24:46:42:88:ac:86:27:00:94:8d:a2:
65:e9:2c:20:a8:52:fd:10:4b:6c:83:23:4a:f9:3f:12:ae:5f:
6d:38:00:33:8e:92:80:1c:db:f9:fa:62:d5:23:06:d9:bf:d7:
b3:f0:d9:5d:d9:a6:78:01:49:4f:3c:d0:80:b3:4b:b8:c5:9f:
fc:9e:9a:c4:d4:9b:67:bd:62:ba:86:aa:f6:80:00:2d:97:fe:
3e:9c:c6:92:54:ef:8c:98:a7:ed:10:a1:08:77:fe:18:24:d0:
3e:c8:92:d6:b0:ec:b3:0e:bf:67:6b:5d:41:49:93:85:18:35:
6f:90:79:77:aa:d6:ed:a9:af:bd:ac:37:2b:fb:80:0a:8a:7d:
4e:f1:bd:de:10:b9:00:79:23:b8:42:18:54:cb:7f:89:3c:9e:
7d:9f:33:14:b0:45:c8:73:19:52:1c:1d:a3:c1:99:0f:46:1f:
89:cf:34:82:e3:4f:2c:04:8f:8b:5f:78:7a:55:12:03:6e:d3:
f6:cc:2e:5a:60:be:64:1b:b3:aa:32:1c:fc:bc:a4:35:84:c3:
14:df:12:a4:91:39:00:d8:8c:93:49:88:5c:50:56:e6:d6:e1:
55:86:4a:18:19:c9:86:8a:34:51:cd:3c:8d:91:b4:ff:01:06:
a8:f4:bf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:39:29 2026 by rpki-client