
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
File: UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json)
Hash identifier: HBW2futY696+/mt4atVw00i3STJO0oKhpRG0Vuru9fI=
Subject key identifier: 5B:9E:F9:CE:A2:B5:AE:52:33:54:86:9E:4E:C7:89:A8:E9:54:FC:FD
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Certificate issuer: /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
Manifest number: DC
Signing time: Sun 05 Apr 2026 06:03:13 +0000
Manifest this update: Sun 05 Apr 2026 06:03:12 +0000
Manifest next update: Sun 12 Apr 2026 06:03:12 +0000
Files and hashes: 1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: dAT51dp3G4E3w5PvCG7Ew8rhokbjkkcB5CJ7q45+Lb8=)
2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: u0AZ+G521Y1mpL9O4RU7VPlcvfZ7loLQEOc3ANO3jN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Validity
Not Before: Apr 5 06:03:12 2026 GMT
Not After : Apr 12 06:03:12 2026 GMT
Subject: CN=69d1fb20-7b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:c8:e9:24:cb:1b:f9:17:4b:cc:85:d3:a3:
4b:5d:37:65:26:bb:f3:2a:2f:58:8d:b0:ae:ad:18:
cc:e7:02:91:fc:1f:51:44:f2:60:9d:fe:bd:20:cc:
6e:bf:4a:b4:9b:54:10:a1:be:b7:df:23:e4:f1:1f:
d8:38:b0:67:f3:fb:3f:dd:18:ee:23:7c:3e:76:df:
7f:27:e5:51:a1:cd:dd:50:69:21:87:22:19:12:ac:
18:43:41:06:fc:71:c9:b5:0b:64:8e:77:7b:0f:48:
47:12:ce:8d:d8:d4:4c:da:76:4b:3a:a9:e7:ad:3f:
f8:a9:d8:8f:b4:3e:68:37:03:dd:08:66:c8:15:ad:
b0:c5:f1:e7:da:a8:97:9f:e8:0e:27:1e:ef:d5:77:
d2:1e:d9:ea:ae:a0:04:65:36:e1:30:26:3c:cc:a6:
bb:7c:9a:91:f6:cd:7c:97:82:2b:39:40:d7:6c:8d:
49:c5:9c:c5:c1:17:d5:f7:af:56:fb:61:f8:ae:99:
50:c2:de:cf:02:5e:0f:5a:8d:80:1b:af:af:7c:08:
94:8e:96:e4:72:1c:bd:a3:1c:4a:fe:14:01:38:c3:
a3:d6:06:b2:cb:49:04:08:80:7f:94:b9:3d:1a:6e:
03:92:dd:65:d4:49:55:b8:24:9c:17:20:6a:f9:16:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9E:F9:CE:A2:B5:AE:52:33:54:86:9E:4E:C7:89:A8:E9:54:FC:FD
X509v3 Authority Key Identifier:
keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:71:2a:74:7c:cc:7d:d6:aa:9b:72:e8:4c:3c:43:78:1b:28:
8a:d6:1a:02:37:df:04:76:ca:52:3d:45:e2:af:ab:7a:0b:a5:
1f:c0:b2:8c:d1:1b:33:31:c1:f4:c2:c3:13:03:59:cd:84:61:
e7:d2:d6:51:94:ca:f4:96:3c:c0:d3:d5:29:67:11:43:e3:53:
d8:e1:ed:c7:d8:31:77:3d:d8:e4:49:96:56:9d:91:bc:84:0a:
66:a2:ee:4b:8f:1e:ca:cb:d9:5e:18:ad:66:ec:a6:64:f5:c4:
95:9e:c8:ee:4b:f0:29:56:f1:36:b3:0e:92:6b:ef:7d:d0:f7:
b5:08:a5:9d:11:52:d7:97:69:38:74:55:03:03:f9:8e:ff:c0:
b0:11:6c:bc:72:eb:8e:b5:1a:2a:c5:ea:68:7b:63:80:35:6e:
57:31:71:e8:47:62:e9:74:f5:d4:2a:ca:65:6a:ad:3a:b2:04:
d7:8f:dc:ca:c2:4e:61:21:a5:7b:1b:b1:d6:c1:23:09:2b:48:
de:c0:c2:b6:06:65:84:2f:2f:85:02:c1:64:19:b8:3a:35:49:
96:15:7c:a5:f0:fc:88:ad:e3:b1:c4:a9:40:7a:16:e5:50:fe:
e3:0d:e8:c1:a6:7c:35:c7:bf:13:e1:c0:57:f7:b0:3e:e8:81:
83:fb:5e:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc5NzgxMTAvBgNVBAUTKDUwMEM2MEE3RjY5QzA0QkU4NEZDRjNDNjU3MjNDMDc5
NzBFNUExMjgwHhcNMjYwNDA1MDYwMzEyWhcNMjYwNDEyMDYwMzEyWjAYMRYwFAYD
VQQDEw02OWQxZmIyMC03Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYfI6STLG/kXS8yF06NLXTdlJrvzKi9YjbCurRjM5wKR/B9RRPJgnf69IMxu
v0q0m1QQob633yPk8R/YOLBn8/s/3RjuI3w+dt9/J+VRoc3dUGkhhyIZEqwYQ0EG
/HHJtQtkjnd7D0hHEs6N2NRM2nZLOqnnrT/4qdiPtD5oNwPdCGbIFa2wxfHn2qiX
n+gOJx7v1XfSHtnqrqAEZTbhMCY8zKa7fJqR9s18l4IrOUDXbI1JxZzFwRfV969W
+2H4rplQwt7PAl4PWo2AG6+vfAiUjpbkchy9oxxK/hQBOMOj1gayy0kECIB/lLk9
Gm4Dkt1l1ElVuCScFyBq+RaSpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFue+c6i
ta5SM1SGnk7HiajpVPz9MB8GA1UdIwQYMBaAFFAMYKf2nAS+hPzzxlcjwHlw5aEo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk3OC81NjJCREIyMkVB
NjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JMNkVfUFBHVnlQQWVYRGxv
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBeGdwX2FjQkw2RV9QUEdWeVBBZVhEbG9TZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzk3OC81NjJCREIyMkVBNjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JM
NkVfUFBHVnlQQWVYRGxvU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEXEqdHzMfdaqm3LoTDxDeBsoitYaAjffBHbKUj1F4q+regulH8CyjNEbMzHB
9MLDEwNZzYRh59LWUZTK9JY8wNPVKWcRQ+NT2OHtx9gxdz3Y5EmWVp2RvIQKZqLu
S48eysvZXhitZuymZPXElZ7I7kvwKVbxNrMOkmvvfdD3tQilnRFS15dpOHRVAwP5
jv/AsBFsvHLrjrUaKsXqaHtjgDVuVzFx6Edi6XT11CrKZWqtOrIE14/cysJOYSGl
exux1sEjCStI3sDCtgZlhC8vhQLBZBm4OjVJlhV8pfD8iK3jscSpQHoW5VD+4w3o
waZ8Nce/E+HAV/ewPuiBg/telQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:54 2026 by rpki-client