
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft
File: uGiurSwGbrZERE2wR1UigzYkoUI.mft (raw, json)
Hash identifier: UzfbeN4IHJD+LhZLx341AvvXPVlu/RFHAAPMFi7pPVY=
Subject key identifier: 69:24:7E:7D:49:0E:31:22:D2:BA:CE:AC:59:3E:74:1F:76:46:DF:CF
Authority key identifier: B8:68:AE:AD:2C:06:6E:B6:44:44:4D:B0:47:55:22:83:36:24:A1:42
Certificate issuer: /CN=A91A2BF7/serialNumber=B868AEAD2C066EB644444DB0475522833624A142
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft
Manifest number: 05
Signing time: Mon 05 Oct 2026 09:46:29 +0000
Manifest this update: Mon 05 Oct 2026 09:46:29 +0000
Manifest next update: Mon 12 Oct 2026 09:46:29 +0000
Files and hashes: 1: uGiurSwGbrZERE2wR1UigzYkoUI.crl (hash: 6SfzMT7DX6JoyaPa0B6LH9Ftpk1TSg5FSQkifoG2W+Y=)
2: 795E775CBD7B11F182EB58B66911F970.roa (hash: r0uKeirlP+BUrH5zH9qvtx1weVr+VrXu/913rYMa7E0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.crl
rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2BF7, serialNumber=B868AEAD2C066EB644444DB0475522833624A142
Validity
Not Before: Oct 5 09:46:29 2026 GMT
Not After : Oct 12 09:46:29 2026 GMT
Subject: CN=6ac371f5-4f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:fa:81:dd:dd:c3:85:06:59:8b:6c:a7:fb:
69:50:83:68:6a:37:d2:09:ad:a1:29:14:b6:12:16:
c3:72:1e:7a:ab:95:e9:92:d9:89:9a:35:c8:b8:c1:
48:7f:78:3a:86:83:de:90:a9:7c:fe:72:6a:bb:44:
0f:d6:74:23:b7:66:5a:b7:05:76:8c:36:55:a0:f1:
00:e7:ba:ab:f5:a6:c2:7a:9c:e5:11:f0:c6:77:e2:
ce:6b:ab:ac:1d:0f:f1:fe:19:1f:04:6f:e7:3c:0e:
0f:a6:c1:90:74:92:1d:36:c7:84:56:dc:ee:d2:1f:
6b:aa:63:21:f7:ee:ec:dc:2a:c6:bc:48:44:ec:f2:
5b:b4:82:ca:86:d1:88:ad:0f:98:02:8c:69:5a:db:
8d:ef:b8:4a:b9:7c:c6:bd:6c:ad:2c:ae:5e:92:67:
8b:da:19:ea:10:6a:0d:29:63:bd:82:5d:a2:6e:81:
39:ed:a4:e3:61:d9:88:01:ec:3b:55:c0:03:38:9f:
73:f8:29:22:ba:63:56:96:da:7b:c5:c1:3b:29:db:
94:8a:1c:0f:db:05:51:55:07:78:cb:02:08:3a:dc:
e8:d1:31:1f:bc:e5:0e:33:69:8f:96:ff:5c:bd:de:
e5:53:9b:22:7d:f6:d1:e7:25:d9:67:71:25:36:78:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:7E:7D:49:0E:31:22:D2:BA:CE:AC:59:3E:74:1F:76:46:DF:CF
X509v3 Authority Key Identifier:
keyid:B8:68:AE:AD:2C:06:6E:B6:44:44:4D:B0:47:55:22:83:36:24:A1:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:bb:9b:bc:a7:82:9d:a2:09:31:e5:e0:42:58:a5:8e:ef:62:
3a:a9:fb:bb:c8:72:6e:79:f2:45:09:fc:ee:e1:46:ca:63:58:
a1:e4:49:f4:c8:e1:98:10:20:ed:14:26:c7:a5:c1:79:6c:a8:
73:f5:98:09:48:8f:b0:4c:f2:ea:f2:a4:64:6d:2a:37:ae:ad:
a5:91:e1:42:1e:57:08:be:73:b9:a9:cb:16:e0:a4:ea:1f:04:
13:ba:0a:0e:16:c8:9c:b8:8a:c0:79:69:d8:26:58:2b:42:36:
c0:39:e4:d7:51:d2:a2:8c:86:1c:cd:92:a3:b3:54:a5:58:55:
1c:80:67:6d:e4:46:16:22:1a:87:20:b7:b7:56:92:0c:e6:89:
16:be:6b:44:be:c8:d9:9c:d3:f7:0b:24:e1:0d:86:94:e7:cd:
6a:86:d1:9b:17:84:4a:9c:ce:b8:6a:f3:23:e9:66:47:ae:17:
d3:bf:3b:65:55:e7:07:4a:98:a3:01:bf:43:79:26:34:db:4f:
7f:5d:ef:b3:d1:d1:1f:01:fb:f3:f6:48:75:4c:bf:37:4c:30:
ad:b4:d2:2a:a8:8d:92:b3:23:a8:6d:af:bc:ad:6d:4f:f3:c1:
6f:16:88:64:4b:87:37:3a:12:a3:15:12:80:21:7b:16:db:47:
d1:c6:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:18 2026 by rpki-client