
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File: UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier: MTunqAh6xwiZNHTyIQ70fbrB+imzJUu4T1BTG4QsthI=
Subject key identifier: 94:72:AE:AE:17:BC:0D:8A:2E:B0:46:A0:67:D0:08:87:99:27:34:5B
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number: 8E
Signing time: Tue 21 Jul 2026 09:36:14 +0000
Manifest this update: Tue 21 Jul 2026 09:36:13 +0000
Manifest next update: Tue 28 Jul 2026 09:36:13 +0000
Files and hashes: 1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: GR1fT14UGT4CX894P5fB622F0HzG5zkr4dYsd2GEYxQ=)
2: B3F4F0B63A4611F1AC42A0C8A2833773.roa (hash: fpFxwMet0vB9WnBsjTfP9SxuIo93jDE4zKg8N/HyDK0=)
3: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: MjpUGxFVne7zJz+pWuXSIalHXmjcz+0TUQ4S4Pxy6UM=)
4: aAHMO22bHQG5LOPpqrF7ua5WkJ4.asa (hash: IFycOPEAyAwSUWTAfBkBDROqmeMzJaDfpcOHk15E1gE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 09:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Validity
Not Before: Jul 21 09:36:13 2026 GMT
Not After : Jul 28 09:36:13 2026 GMT
Subject: CN=6a5f3d8e-e74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:bb:3c:03:76:b8:db:21:bc:17:56:df:3f:
e0:4d:10:06:57:da:1b:ad:86:86:13:a5:5c:5c:a6:
26:fc:55:f3:4f:da:b7:3f:d9:f7:d3:81:10:95:1f:
b4:e8:df:c4:e1:5e:fa:1b:37:a3:f2:c1:1e:8e:78:
82:24:4f:d0:c0:c5:51:b4:e2:30:f2:31:4c:90:f9:
b6:92:b0:dd:a2:be:78:3b:b2:98:b9:9f:a3:c2:f9:
1f:59:cb:6c:5d:a2:0c:3d:24:bf:eb:a4:af:a7:2f:
ec:ce:c5:3d:fa:be:66:b0:9e:fc:2e:c8:dd:d1:75:
63:0c:2b:d8:47:23:32:1f:4a:b4:a4:07:6d:26:57:
34:cc:37:69:fb:ee:0f:a9:7f:57:e6:5f:ff:4e:bf:
a1:73:bb:0e:a4:7a:df:be:6d:dd:33:ed:9d:67:3c:
c9:e9:50:a7:b7:45:01:84:4f:29:e1:a4:79:55:97:
59:ce:b5:01:38:0f:21:9d:b2:a3:0e:25:84:20:a8:
60:5e:12:75:cd:4c:b2:2f:e8:ae:49:d8:a1:9d:f9:
99:c9:7f:4f:be:ec:5d:c0:56:7b:53:83:48:e0:d7:
a5:36:2e:00:2a:c5:6f:90:ce:a6:05:db:91:bf:34:
a7:12:0f:ef:3e:e2:bf:ac:88:51:0c:83:03:6f:c0:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:AE:AE:17:BC:0D:8A:2E:B0:46:A0:67:D0:08:87:99:27:34:5B
X509v3 Authority Key Identifier:
keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:7f:d4:57:bc:41:c9:f3:67:a3:3f:80:50:fa:34:5a:c4:77:
2d:7c:24:3e:3e:fb:e0:c4:6c:1d:c6:d3:ad:f2:dd:e4:73:1b:
43:c8:b6:cc:23:cc:33:06:4a:3d:27:6c:c7:93:5f:e9:2b:65:
e3:12:68:57:58:7a:50:ae:9e:bc:b9:44:e4:99:6a:a3:62:98:
9d:f5:26:2a:77:d5:04:d4:6a:5f:70:df:c9:e4:9d:7d:be:d6:
ae:07:64:cd:9e:c9:61:ca:25:06:f5:af:53:36:20:c2:8e:4d:
44:d5:92:05:9d:e3:ed:9e:10:78:17:3a:ca:ab:ae:c9:dd:12:
05:8a:d6:1b:e2:f2:b9:51:3d:1a:fe:a9:04:ad:6e:9d:8b:35:
71:c0:b1:04:92:7d:99:30:35:ef:f4:4c:9d:27:c3:3b:9b:f0:
e0:a2:2d:c9:fb:65:5d:14:d7:d1:91:a7:c7:7e:10:24:4b:06:
c3:3b:1f:b0:87:4f:01:11:e0:78:1b:2b:ae:4a:5f:6d:86:d8:
f0:ab:74:ac:b7:58:cc:9e:ab:a2:dc:88:e1:2e:a2:3d:99:5a:
80:00:cb:bd:38:0f:b2:e0:54:8d:0b:06:b9:03:bb:b0:92:ef:
b7:db:e5:51:4b:d9:da:b2:aa:00:0a:2c:4f:78:de:56:42:50:
1e:aa:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:28 2026 by rpki-client