
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
File: uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft (raw, json)
Hash identifier: Ub2tesUaT4JAtf/zA37C2HMlJ9gPtrk8Ji0ePvnZ8DU=
Subject key identifier: 96:E6:43:C9:02:A0:53:FE:E7:DF:6D:44:E4:72:1B:6E:90:AA:6A:28
Authority key identifier: B9:95:17:14:DA:42:AE:01:83:6F:04:42:1A:3F:7E:5E:0C:18:68:F0
Certificate issuer: /CN=A91A84E4/serialNumber=B9951714DA42AE01836F04421A3F7E5E0C1868F0
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
Manifest number: 1F
Signing time: Tue 19 May 2026 08:51:23 +0000
Manifest this update: Tue 19 May 2026 08:51:22 +0000
Manifest next update: Tue 26 May 2026 08:51:22 +0000
Files and hashes: 1: uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl (hash: pQbH7kInSaVGA7iNdrj2Vu6F2OUS62cvhfhKHOImsEs=)
2: 9FD3C6EC45EB11F1A29385B097833773.roa (hash: dExHyhgqfE8zJdmuf/00Aoqy7D6f+M0i059P4+A2NUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl
rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A84E4, serialNumber=B9951714DA42AE01836F04421A3F7E5E0C1868F0
Validity
Not Before: May 19 08:51:22 2026 GMT
Not After : May 26 08:51:22 2026 GMT
Subject: CN=6a0c248b-16a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:2b:3f:79:71:71:56:03:7c:6f:6a:55:c0:
19:09:66:29:76:fc:d6:8e:b0:40:eb:10:55:7f:36:
7c:ca:f6:7a:5a:bf:78:e6:d1:b9:f6:df:03:c4:84:
72:a9:e7:61:2c:f6:59:6c:a3:dd:68:5b:50:6d:ea:
9d:56:64:e0:d7:d6:68:bb:22:10:f2:b0:d8:21:ee:
9d:72:92:ab:fb:ff:0e:74:3e:71:f3:da:50:21:1d:
3a:4a:bf:40:aa:a1:ec:ba:50:ef:b4:5c:a3:03:58:
26:de:4b:aa:91:b8:6b:02:18:8b:8c:3c:9f:2a:ca:
8f:d7:13:70:d1:90:f4:ca:73:6f:b8:de:ec:11:ec:
f8:dd:2f:97:8e:e1:ad:ef:45:4d:da:d7:eb:ff:13:
10:89:f8:11:3d:86:58:7c:63:45:c9:62:27:c1:98:
7b:e0:1c:74:d8:ad:d4:62:b7:37:6f:a0:37:c3:f5:
5d:61:e9:ef:c4:52:a8:b8:3f:69:21:e9:11:1a:14:
3c:07:a3:a2:8d:93:86:f9:68:03:0f:b5:fa:0f:76:
7f:4f:d2:7e:4b:97:7b:d4:57:37:a2:f2:bd:6e:c3:
02:f3:f5:21:ec:d8:1a:bd:2c:32:0a:b2:6f:08:6c:
cd:6c:65:05:64:cd:9f:cb:30:17:a7:34:3a:3b:f1:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E6:43:C9:02:A0:53:FE:E7:DF:6D:44:E4:72:1B:6E:90:AA:6A:28
X509v3 Authority Key Identifier:
keyid:B9:95:17:14:DA:42:AE:01:83:6F:04:42:1A:3F:7E:5E:0C:18:68:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:31:6f:5a:9d:40:97:05:96:ac:c1:b2:44:10:20:82:69:30:
40:46:53:32:59:e4:24:c5:ae:31:ce:bc:d4:96:92:5c:f2:0d:
e2:46:5e:26:8f:ea:9c:fc:14:0d:a9:5c:ff:4f:63:b0:bb:3d:
b9:09:6d:65:bb:17:38:6d:46:60:5d:ba:b0:42:b3:6d:e5:fd:
6e:c6:ee:5a:08:b1:4f:34:c8:b8:86:12:b4:d9:38:5f:4e:2a:
2a:dc:85:fe:44:53:22:bd:8e:fd:0c:2f:8a:22:82:ad:88:55:
37:9f:51:57:0c:4c:2e:a1:f1:45:e1:b2:9d:b1:d3:d4:58:26:
7d:93:ab:e9:82:60:73:c9:cc:0f:ec:22:0e:e8:4b:a5:42:f2:
a2:bd:a2:81:63:c6:8c:84:b8:39:ad:24:1b:8c:f8:9c:55:63:
c8:b3:1b:66:b3:f1:8b:04:d4:7b:b1:c3:5e:7c:93:ad:a2:a9:
e8:58:ab:38:f5:17:5f:44:f9:97:e8:bb:c8:95:f7:8c:87:d7:
97:fc:50:a3:a0:85:c9:95:94:51:d3:de:f6:bc:9b:2f:3b:12:
c3:40:e3:56:45:98:ce:b3:15:ad:f9:c0:43:6d:28:53:56:19:
09:90:4a:21:40:ac:0f:26:46:ec:d2:81:6f:6a:5f:67:b8:06:
60:c0:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:29:02 2026 by rpki-client