
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier: Fm6qS0bDxYQO2+71RBE6JuZ70/omLlAAtIXJmZBLnbc=
Subject key identifier: F6:29:37:84:CE:40:66:9F:7D:91:F5:41:FC:7D:EF:8A:59:5C:1F:22
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number: 01D6
Signing time: Fri 13 Mar 2026 02:39:31 +0000
Manifest this update: Fri 13 Mar 2026 02:39:31 +0000
Manifest next update: Fri 20 Mar 2026 02:39:31 +0000
Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: TyzdK9lHlNIqE2SDj5OsPDa0tQrbAZRsM+eLe7OaESs=)
2: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 59acFeQy4V5pQjYYCiasQgZVB5QvS3oo/PphMyeS6gg=)
3: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: dicUkqJpWBQlhJi+bO6jbQ3e2lQm0aq0QA9SUOerdpM=)
4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: Hlrpuim6i7fHk0KlEnhldHqMP2jG8T1/tqWjQFLYvbs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Validity
Not Before: Mar 13 02:39:31 2026 GMT
Not After : Mar 20 02:39:31 2026 GMT
Subject: CN=69b378e3-34e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:56:74:56:ef:a5:c2:e5:01:54:12:6e:f7:
a3:c7:2f:52:66:51:ef:5d:c9:d8:2c:fd:23:22:54:
5f:2c:16:9d:65:30:22:5b:1f:57:da:bc:0f:df:46:
a0:69:1f:dc:03:4a:ac:ce:01:a5:ff:bc:58:b9:7e:
fd:cb:3b:03:02:e1:e1:a1:8c:93:4e:b3:de:db:cd:
c1:2b:fe:4c:de:f4:49:1f:64:e5:26:71:d9:ea:1e:
9c:18:79:8c:ea:2d:a5:24:72:d6:20:77:c8:cc:6c:
6e:c7:4c:76:e8:be:a0:c3:c2:a3:9d:2e:70:7c:2c:
63:09:eb:9f:13:e3:f5:18:2c:11:3b:ea:12:cd:4c:
8d:80:41:d4:6f:fb:5b:a1:f9:da:8a:7c:e2:ca:77:
1c:24:c1:88:16:f7:e8:29:16:09:2f:11:69:da:e8:
1f:3a:e6:00:2a:f3:be:57:6f:a5:48:ff:8d:31:e9:
86:bb:0e:88:1f:3b:d4:b1:34:b8:44:a4:33:7c:4f:
73:03:32:d3:00:25:2e:40:7c:62:35:c0:80:be:c5:
aa:5a:a5:49:a4:47:25:bb:3d:f8:0b:47:2f:82:d5:
90:94:cb:ab:8d:ec:d2:79:7a:a0:9e:b3:58:53:50:
8e:90:59:8a:b3:2e:35:16:6d:78:e9:25:af:47:e2:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:37:84:CE:40:66:9F:7D:91:F5:41:FC:7D:EF:8A:59:5C:1F:22
X509v3 Authority Key Identifier:
keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:0b:1c:93:e4:5b:6e:09:24:7b:96:26:2e:83:ab:e9:5b:83:
d4:e6:6d:10:a0:50:bc:90:57:9c:d0:9c:7f:bb:29:09:fc:33:
b1:43:b2:13:52:a0:e0:4b:db:4a:54:0b:27:51:98:f1:f1:33:
43:e4:68:bb:f4:d7:ed:ed:a1:40:1d:77:e7:58:32:5c:be:2b:
22:71:f7:e1:ee:56:bb:ff:ab:cd:77:4b:80:dc:1c:08:f3:32:
df:f9:38:d7:7d:1b:44:09:1b:e7:51:d3:84:6f:99:98:04:3e:
f0:96:c1:bc:47:bb:5b:be:7b:be:b8:52:f3:a0:15:ce:be:4b:
6d:68:f3:4c:0a:2b:d7:49:bc:5b:a0:9e:67:88:0d:19:e0:68:
62:c3:bc:4f:17:39:e4:0a:f1:f2:c1:c8:d6:5a:ba:32:b9:b0:
6a:ba:8f:c5:e0:b1:1b:51:1e:8d:e2:b3:1d:eb:e4:e6:05:30:
6e:f6:d1:32:61:a1:ec:a7:d0:0f:c7:bd:92:da:51:f5:33:f4:
81:c2:79:6d:de:66:7c:ae:46:61:a1:75:a6:f5:2b:e5:23:4d:
c2:de:b1:d2:f1:06:f4:e2:39:ce:16:a0:db:e0:2e:e5:a8:d8:
b4:e3:c6:58:10:5a:96:e9:c5:6a:4f:9c:46:0a:06:64:e6:9b:
8b:26:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:33:15 2026 by rpki-client