
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier: VO6/OEyWWS8bT3zAXKB9lQRKyG/pfl1T7StE8xmvOYQ=
Subject key identifier: 20:36:77:C7:0F:F5:F5:11:0B:5B:7E:A4:95:7A:85:7A:00:D1:78:61
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number: 0203
Signing time: Thu 11 Jun 2026 05:13:24 +0000
Manifest this update: Thu 11 Jun 2026 05:13:23 +0000
Manifest next update: Thu 18 Jun 2026 05:13:23 +0000
Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: vyFVFlvDeJqrDX+347Ugr1AV3Hntf6SnqApXvUm7Xk0=)
2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: dicUkqJpWBQlhJi+bO6jbQ3e2lQm0aq0QA9SUOerdpM=)
3: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: Hlrpuim6i7fHk0KlEnhldHqMP2jG8T1/tqWjQFLYvbs=)
4: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 59acFeQy4V5pQjYYCiasQgZVB5QvS3oo/PphMyeS6gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 05:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Validity
Not Before: Jun 11 05:13:23 2026 GMT
Not After : Jun 18 05:13:23 2026 GMT
Subject: CN=6a2a43f4-91c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:6f:af:0f:ce:c1:27:b4:27:11:2c:f6:98:
a2:b9:ff:45:a7:a4:57:ae:f3:0f:f2:c8:b2:29:c9:
93:47:9f:44:17:b4:7b:ca:34:3b:8f:46:bf:a8:37:
36:ee:92:7a:2b:e0:97:b3:c3:5a:a4:07:12:b2:ef:
17:a4:29:cb:25:bd:14:f9:ca:1c:51:3e:ca:bc:91:
8d:a0:22:1d:25:55:eb:97:3c:19:46:d8:46:ce:f8:
67:cb:a1:c1:8a:7a:38:2c:b7:5d:ef:cd:a2:c5:87:
cf:c3:6c:01:bf:f7:78:8b:ab:7a:c9:43:55:ae:75:
3b:e0:d1:b3:52:3a:b7:5d:ee:70:16:1f:e2:5f:eb:
c9:c7:b1:47:c5:14:9c:dd:00:a8:d4:a9:0e:51:10:
b2:28:ef:f1:08:d0:4c:a9:92:2c:ce:7c:31:4f:4a:
43:b0:90:25:0f:e6:17:e7:7a:f2:58:00:1c:16:4b:
d1:55:ec:80:ac:5a:2c:3f:1b:a2:75:ef:6f:db:08:
f1:7f:ad:1d:76:b7:b1:9a:0a:d1:79:47:9a:90:82:
15:c9:50:ac:0f:66:5d:2e:ce:73:11:c1:99:b7:fa:
f3:cf:37:3c:31:a8:33:e7:b5:36:63:01:48:53:3e:
f4:2d:7c:53:9d:17:6f:10:b7:bd:20:8a:25:56:7b:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:77:C7:0F:F5:F5:11:0B:5B:7E:A4:95:7A:85:7A:00:D1:78:61
X509v3 Authority Key Identifier:
keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:74:04:96:86:7f:af:20:80:3f:8b:74:7e:e8:a4:45:a2:f0:
62:d8:08:0a:9b:39:a2:42:8c:ac:98:2d:1a:7c:b6:a8:cd:f7:
9c:96:b6:9d:2b:d6:1c:ed:8b:c8:87:71:66:6e:2b:57:0b:67:
a9:71:1d:b6:d9:89:66:58:fc:90:65:a3:59:ea:fc:ea:bf:53:
7c:12:44:ea:57:8c:75:6c:1a:c6:74:97:42:da:ea:f1:74:1d:
1c:98:25:26:06:c6:71:13:57:be:19:00:1e:bc:ce:2a:af:14:
af:24:4e:34:9e:14:47:77:ed:cd:33:fa:40:8b:3b:c7:d5:66:
80:21:4b:e1:a4:a9:21:9f:3d:bb:97:9c:33:44:a9:fb:0b:3c:
cd:54:ed:01:ae:74:87:68:0a:94:a3:b5:19:ba:05:2e:85:7d:
43:0b:c4:2a:42:e6:58:4a:bc:c4:44:34:b6:d6:10:0e:33:4b:
13:f2:39:fe:4d:62:e2:83:fd:21:2f:50:25:2f:5d:74:5d:e4:
03:4f:e8:7a:4e:55:2e:dc:bc:46:99:b0:75:66:35:26:0c:ce:
cd:98:b0:83:e5:55:40:ac:c6:f5:83:65:94:1b:c5:a7:1f:00:
e2:9f:19:12:61:cc:21:67:e9:e7:c4:2f:7a:d9:c3:32:c4:23:
7b:3a:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:40 2026 by rpki-client