
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
File: ul-4WRv8DEUKTkTW_D47x76GVBY.mft (raw, json)
Hash identifier: S18OzjhcfHdnjrECMfLtVqjAEOSOxkC4ET+ZWtIGuow=
Subject key identifier: 13:96:89:27:9D:C7:BB:E8:F3:E1:0E:B1:1C:A1:0B:21:80:3B:F0:FD
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
Manifest number: 01CD
Signing time: Fri 09 Oct 2026 04:19:21 +0000
Manifest this update: Fri 09 Oct 2026 04:19:20 +0000
Manifest next update: Fri 16 Oct 2026 04:19:20 +0000
Files and hashes: 1: ul-4WRv8DEUKTkTW_D47x76GVBY.crl (hash: x3w5YBBOSisRB0y2wnkyFbnFeppMqOi+8ZWe9DJfngU=)
2: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (hash: QctUwaISCCsjTsg8d6+OCTF1bXP6fQ+c0E+PJuOqkfE=)
3: E30E4FF605E511EF868E0F6DC4F9AE02.roa (hash: MmWFM1dURxQD1o2oF69cp1HxMUdsdeEfUuFqXRdwgSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Validity
Not Before: Oct 9 04:19:20 2026 GMT
Not After : Oct 16 04:19:20 2026 GMT
Subject: CN=6ac86b49-b123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:e2:c5:07:e9:3a:09:59:bc:5e:9b:5a:64:
d2:21:82:b1:3e:d4:65:a8:be:83:f4:4e:0a:1e:5a:
ad:39:7a:ff:d6:67:0a:b4:74:df:c5:4e:a6:02:51:
b6:0d:0c:cb:d2:2f:f7:85:8e:e3:c1:70:5b:a4:19:
b6:c5:1b:09:62:5e:b0:43:fe:66:c5:ea:64:c8:6b:
f7:c8:41:48:5c:d1:b9:03:86:a0:94:d1:ba:76:fa:
9b:33:78:08:06:f7:23:cf:86:13:a5:16:bf:d5:d5:
2b:a4:c2:fc:e3:56:18:33:fb:12:34:42:48:76:69:
4b:70:c4:cb:ee:a7:0e:ee:21:bd:be:13:8a:61:0c:
fb:58:a1:73:78:48:56:1c:67:da:ff:9f:48:2f:72:
fd:a1:1b:25:36:d4:da:47:30:50:29:dd:0b:0f:25:
0e:de:48:c5:b2:c4:96:66:a7:54:7b:93:84:6d:f7:
ec:9d:08:37:4e:e3:f6:1c:4d:fa:70:07:40:ca:bf:
25:d1:02:5b:13:3b:46:1c:43:ef:fc:ec:2e:8f:96:
11:e4:91:27:8f:6e:02:d8:6b:fb:33:b6:1c:85:fa:
de:2a:76:f9:ac:95:b0:42:8a:90:26:1a:0e:1e:5f:
75:b0:b3:cb:06:d5:9d:13:40:66:ef:af:ad:a5:33:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:96:89:27:9D:C7:BB:E8:F3:E1:0E:B1:1C:A1:0B:21:80:3B:F0:FD
X509v3 Authority Key Identifier:
keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:44:5f:2e:4d:8e:dd:e9:7a:3f:49:c2:98:cd:ec:b0:07:5d:
93:bf:ed:fc:fb:ed:d9:80:a8:c5:97:9b:1f:c6:b1:c5:c2:a3:
1b:38:39:9f:ad:72:10:65:e0:a5:b3:61:b0:41:00:42:65:c4:
6e:f9:7d:8d:ea:8c:10:7e:6a:3a:ba:90:0a:a2:4c:f3:9a:5a:
06:32:98:8f:e1:56:a5:58:ae:31:c4:de:ed:69:aa:49:ef:42:
20:be:7b:4e:d4:ce:64:bc:99:c5:59:0f:a4:79:1e:8d:41:92:
e9:7f:93:31:0a:9f:d3:36:2a:b6:64:95:62:bb:63:1f:a6:17:
18:d5:32:a9:89:d4:ee:29:24:09:86:75:f8:20:67:fa:a9:c5:
83:7a:f5:53:88:f4:0d:dd:6b:a4:f5:18:d2:35:3b:88:a7:0e:
27:09:03:d9:ee:f9:34:97:c1:9a:eb:60:f3:64:f6:f2:00:44:
58:24:cc:e4:4c:c9:61:67:39:fa:82:12:da:2f:99:7c:56:08:
f2:e1:ea:ca:59:15:23:4a:98:ff:9e:a4:f8:e5:18:b1:e8:88:
8e:55:59:c1:f0:01:bc:56:ab:a0:e1:57:25:36:a4:91:6c:e8:
41:24:89:f8:92:3b:cf:ef:9f:27:a4:00:b1:64:74:e8:ee:3c:
21:1a:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:19:17 2026 by rpki-client