
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json)
Hash identifier: 1Ecz6zN6WSZhnUmz1z/P5qLLmGOTAt22CvMl3iKdkR4=
Subject key identifier: 5B:E3:60:8A:4A:59:3E:34:3D:F1:EE:D8:DC:45:80:2D:B9:B1:B8:2B
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 08BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
Manifest number: 08A8
Signing time: Sun 16 Aug 2026 20:56:52 +0000
Manifest this update: Sun 16 Aug 2026 20:56:51 +0000
Manifest next update: Sun 23 Aug 2026 20:56:51 +0000
Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: 5yTyKbiCR7iQGQZeQQlm9bOr/Daq03gMPT7yABiK/NY=)
2: 3FA536CA38EE11F1A0707106A9833773.roa (hash: mUiOI8EcFxg0okwr3CRT18uhCpuSgMbB1bMOukLtLrw=)
3: BCCEB0E68D8911F1AB735BAB3A11F970.roa (hash: EteG4ERl7dgEVOEBURUM5yPOYfiL2XFRmjKpTBgKI4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 20:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239 (0x8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Aug 16 20:56:51 2026 GMT
Not After : Aug 23 20:56:51 2026 GMT
Subject: CN=6a822414-26ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:fc:43:28:e9:6e:c2:74:46:d5:72:cc:7a:
97:aa:ea:5f:a7:54:56:24:7b:1a:74:63:7b:c6:1b:
5c:6e:f0:52:85:de:65:06:24:ea:b8:46:d1:05:60:
76:76:cc:08:68:de:33:cd:12:b7:ed:9e:a0:0a:7a:
d4:08:6a:d4:63:10:ec:32:5e:2c:b7:c5:7c:38:61:
77:80:00:fe:1d:d1:67:be:d5:8b:ca:01:ca:66:b3:
ab:63:62:78:40:04:4e:a2:93:45:b9:b3:d8:b6:49:
b1:34:98:40:4b:ab:bd:57:7a:29:c9:1a:dd:14:dc:
32:b1:c1:e1:a4:0c:f2:16:2d:e2:9a:d2:f9:70:0f:
0a:92:e1:0b:00:97:d3:81:eb:66:54:bb:60:a0:eb:
4f:f7:25:bc:b6:75:5f:a9:57:5c:ea:41:97:2f:dd:
b9:1a:1c:5e:63:1d:a6:70:a0:d5:28:db:b8:6b:1b:
e3:b0:1d:9a:e7:5d:99:25:4c:ae:5e:96:78:2d:79:
69:1c:4a:38:bd:8c:7d:d7:3a:ce:4d:2d:22:ae:50:
6e:ad:35:20:28:6d:aa:00:b2:df:4a:47:28:a4:7d:
11:f4:d6:96:8d:7c:3c:de:6a:34:bb:73:ea:d6:0b:
86:2a:0b:dc:6f:03:a0:c0:e7:ac:0b:8f:91:f9:e2:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:60:8A:4A:59:3E:34:3D:F1:EE:D8:DC:45:80:2D:B9:B1:B8:2B
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:96:e2:d5:24:38:c2:37:bc:17:3f:c6:e4:18:b4:2f:57:89:
1f:63:35:f7:aa:8f:29:24:97:8d:17:79:77:01:0d:55:46:00:
97:c3:ed:a6:da:f6:9c:77:b0:85:bb:a8:76:e3:8a:71:3c:80:
c4:e2:29:1a:f5:fa:42:64:70:26:44:f5:43:e4:4e:51:24:4e:
cf:9a:5c:2a:b4:70:45:be:19:c0:0b:f4:51:ff:5e:62:df:e3:
d2:c4:11:ca:e0:90:46:1e:0c:f5:ab:3f:fc:68:c9:99:ed:f6:
66:e3:79:50:b9:bf:20:6d:67:ba:c5:46:27:bb:06:4f:06:2e:
f2:2d:05:81:27:ea:31:e1:71:da:41:1a:a2:ba:ed:5a:d8:b6:
3c:4d:a3:89:13:66:1a:e3:0b:b1:4e:0c:4a:d5:af:f8:e8:73:
86:ba:1d:5c:4b:76:d4:3b:c7:8b:06:a7:a7:ef:80:9f:33:e4:
ea:a3:e8:5e:4e:74:fd:75:5e:2b:2f:c1:9e:cf:9f:a6:5a:ae:
82:67:0c:20:63:7a:dd:08:f4:4f:c8:50:57:20:e7:43:a2:a5:
8b:9b:a4:01:c0:b4:74:5f:f7:81:97:2c:8b:15:4a:cb:78:04:
ac:46:77:2a:0c:46:08:00:a1:46:2c:0a:a7:68:bb:b0:be:cb:
6a:a3:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 08:32:07 2026 by rpki-client