
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json)
Hash identifier: 6GrvRqk2OYFtuGXZfmrfNP2DAv8oNvrq6SY+q2FDnds=
Subject key identifier: 97:99:EC:17:7D:21:8A:8F:FB:A4:51:36:D6:32:0B:89:D1:9A:65:4C
Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Certificate serial: 0C1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
Manifest number: 0BF6
Signing time: Mon 26 Oct 2026 18:59:00 +0000
Manifest this update: Mon 26 Oct 2026 18:58:59 +0000
Manifest next update: Mon 02 Nov 2026 18:58:59 +0000
Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: ElOMRziHT34YkJ7+qYyCizCEbAJklYi8f5VauN6dkVA=)
2: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc=)
3: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 18:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Validity
Not Before: Oct 26 18:58:59 2026 GMT
Not After : Nov 2 18:58:59 2026 GMT
Subject: CN=6adfa2f4-39db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:f6:2c:58:f9:e6:0b:56:02:3f:c9:da:0c:
9a:04:df:2c:5d:56:dc:85:01:42:be:31:0e:07:5a:
e8:d8:be:07:1e:b5:b4:ae:b1:4f:9e:7b:56:68:74:
8e:2a:b3:c2:96:9b:86:33:ec:f3:bc:4d:89:e2:ad:
00:0c:c6:af:49:4b:de:74:07:c7:a9:d8:b7:c1:93:
ea:2c:d8:7e:73:19:1f:a7:28:7b:d9:60:0e:90:61:
34:3c:36:d1:df:85:4f:75:20:37:98:6f:f8:e6:fe:
e9:83:86:ac:9c:08:e3:bd:05:a9:34:0b:ba:f6:89:
dc:6c:d9:fd:a3:2f:cc:b5:c9:7b:a1:4e:f5:e9:b0:
0a:c3:62:79:02:6a:4a:f2:bf:bd:29:24:5d:f2:c8:
db:4c:a0:e5:0b:f0:01:24:d4:17:08:7b:a7:bf:9b:
0e:68:c8:d9:1b:ca:56:82:1e:4c:33:d5:0e:b1:a3:
72:a3:99:1f:f4:1f:c3:44:87:dc:f7:3f:8f:7b:77:
a6:11:c5:27:b4:81:a3:4b:37:85:8a:a0:25:b7:93:
41:73:15:33:d8:ee:04:73:58:7b:83:38:7f:e6:96:
20:55:47:ca:f3:10:3d:65:4d:e3:65:43:1c:a2:4f:
22:4d:34:e4:ef:1d:74:98:0e:6d:74:8e:38:8b:94:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:EC:17:7D:21:8A:8F:FB:A4:51:36:D6:32:0B:89:D1:9A:65:4C
X509v3 Authority Key Identifier:
keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7e:9a:ce:70:59:28:16:55:e3:83:ef:1a:d9:3e:20:43:72:
ce:78:3a:40:e5:93:f4:cf:cc:fc:59:c7:aa:97:b7:d7:e0:18:
73:b3:cb:5d:4a:ba:57:49:9b:88:37:de:da:82:20:1a:d4:97:
ee:5e:5e:1f:9e:93:f6:a2:5e:27:a1:73:6a:72:82:a3:61:4a:
a9:57:85:ff:1c:25:2f:51:3c:fc:84:28:62:c5:14:6f:fc:1a:
e0:3b:88:38:7b:38:cb:ae:a9:90:78:16:5a:d5:74:33:50:76:
38:13:56:00:ef:4e:fc:9d:da:32:9d:4e:3b:5a:a7:73:7f:76:
e4:7d:b8:64:0a:ee:aa:a9:9f:46:87:c6:fa:62:cd:80:d0:ce:
e0:77:52:fe:07:88:26:6d:6b:ba:3a:74:e8:09:b4:c8:67:0f:
bf:f1:e6:b0:05:95:93:6e:a6:d9:d2:af:1d:1e:c3:39:81:2c:
47:10:d8:58:f9:79:48:89:e8:f8:81:70:0a:32:b3:74:39:f0:
f6:1a:7b:2b:78:0e:d9:68:08:5d:eb:7b:69:6b:3a:7e:c0:ac:
ec:7e:13:0f:07:84:c4:ca:4e:9f:b3:76:12:e1:e0:82:14:bb:
74:c8:80:b0:df:12:47:24:f1:af:88:1c:c5:98:bc:29:ef:88:
c3:7c:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:19 2026 by rpki-client