
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File: UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier: WoUO85G03vqQhxcBxyVILqCth4HIiEtL4CGkeNn23PU=
Subject key identifier: 2F:F9:23:A7:BD:D9:AC:D2:90:EC:B9:A2:15:4C:93:52:34:AD:F9:05
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number: 5E
Signing time: Fri 17 Apr 2026 10:18:01 +0000
Manifest this update: Fri 17 Apr 2026 10:18:00 +0000
Manifest next update: Fri 24 Apr 2026 10:18:00 +0000
Files and hashes: 1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: HDgy2YZttwzTrT9DI/IE3zaE4nxevd830HICjNd+1UI=)
2: B3F4F0B63A4611F1AC42A0C8A2833773.roa (hash: fpFxwMet0vB9WnBsjTfP9SxuIo93jDE4zKg8N/HyDK0=)
3: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: MjpUGxFVne7zJz+pWuXSIalHXmjcz+0TUQ4S4Pxy6UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 10:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Validity
Not Before: Apr 17 10:18:00 2026 GMT
Not After : Apr 24 10:18:00 2026 GMT
Subject: CN=69e208d9-1d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:81:87:45:7a:5c:7f:55:70:15:9c:a0:86:
72:62:5a:51:6e:38:9c:95:c1:d8:cf:69:8a:dd:96:
fe:28:1a:68:09:6c:be:00:47:7f:c3:30:cd:9f:d7:
ea:58:eb:ff:2c:ce:94:a4:d1:0e:02:47:5a:58:e6:
31:cd:d4:ce:b0:b0:f2:fc:5d:b6:aa:2a:91:98:ed:
52:8f:a1:42:94:6a:88:11:53:25:7c:c6:41:e2:31:
91:61:d9:f0:7d:44:16:4c:88:1e:de:2e:2c:5b:1d:
bf:22:35:55:c2:6a:8c:d8:bc:8e:cf:7a:12:f8:62:
6b:51:d5:e0:e5:ce:49:42:07:56:8b:e9:80:ae:fd:
8e:4d:1b:4f:ae:4f:05:ee:9b:de:9b:a8:c1:05:23:
fe:39:d9:0c:88:8a:cb:f4:ba:47:d4:28:c0:9a:5e:
fb:a4:1d:c1:b3:46:ab:9e:06:6c:e3:b4:92:41:21:
af:be:52:7c:fc:71:e9:4e:ad:85:14:34:ae:fc:56:
8d:2c:90:eb:90:d4:20:fb:82:eb:37:05:30:89:17:
09:9e:43:eb:f9:f6:de:b5:21:01:dc:ff:71:19:e7:
de:2f:a1:cd:a9:5e:3f:67:bd:a5:29:e3:3e:cc:e8:
09:84:10:11:7e:e1:8a:0e:7e:89:d3:98:3d:2c:29:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F9:23:A7:BD:D9:AC:D2:90:EC:B9:A2:15:4C:93:52:34:AD:F9:05
X509v3 Authority Key Identifier:
keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:88:b4:95:20:4c:77:cc:bc:17:d4:3e:76:16:19:78:c1:a0:
18:43:d1:8b:63:a0:fd:b6:64:2c:ae:85:16:8a:6c:1d:e9:12:
a8:59:e3:ec:e5:ba:d4:7d:19:2d:d5:30:a0:1a:c6:1b:11:c0:
44:45:74:ff:29:56:d8:b4:bb:de:73:a0:a8:5c:17:92:ef:6e:
69:6d:6c:01:c1:49:3d:2d:83:61:61:49:ca:15:31:5f:79:da:
25:a3:2a:8f:e5:53:11:70:df:78:b0:f2:83:e2:ab:ad:2e:57:
64:b0:d9:47:9d:3c:b4:01:80:71:17:bb:cc:15:bd:e3:8b:a1:
40:01:54:fa:0b:4a:3b:9b:d4:76:d7:2f:38:1c:5e:03:00:ad:
6d:b1:11:81:e2:74:84:bd:f2:ea:eb:3c:a9:08:af:9d:4c:63:
6f:5e:3d:c0:ca:c2:52:ad:1e:5f:d5:e9:7d:ba:e3:7e:53:1f:
ca:2b:16:66:e6:31:fe:51:92:7e:42:42:68:6e:33:2e:98:6b:
d5:1b:d5:42:b9:34:4a:9e:61:e7:ff:ba:61:f1:94:bc:97:c9:
2d:a7:12:e1:57:98:b9:ce:ff:f1:9a:66:dd:68:c6:d5:56:b1:
fb:2e:87:29:5b:8c:c1:10:8b:bf:22:07:f9:25:ed:01:6a:0e:
a1:8e:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:13:47 2026 by rpki-client