
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
File: uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json)
Hash identifier: Mp2LZTK3Lq3WrEuTLvZykj6ITwtzc7ydUpmAU+/NRz8=
Subject key identifier: 18:99:1E:7F:6C:11:3E:93:51:0D:5D:BD:1A:00:12:07:49:D3:F3:CF
Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
Certificate issuer: /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Certificate serial: 1033
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
Manifest number: 1025
Signing time: Tue 06 Oct 2026 17:31:11 +0000
Manifest this update: Tue 06 Oct 2026 17:31:10 +0000
Manifest next update: Tue 13 Oct 2026 17:31:10 +0000
Files and hashes: 1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: QpOHjBoWR9YUp/aFsL0e9M22s374pU95JZbHlAh4i5c=)
2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: OjM1bFnCHb2Nbpu1zaIXajiz/Q+c8E0n3J971ErzXps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Validity
Not Before: Oct 6 17:31:10 2026 GMT
Not After : Oct 13 17:31:10 2026 GMT
Subject: CN=6ac5305e-7cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:4c:88:63:f4:1c:2e:49:2e:f9:7d:3a:40:
dd:ff:32:78:b6:27:16:de:06:7e:bf:a8:f5:1a:a3:
79:09:18:60:8c:ab:3d:a2:4b:23:73:bb:65:61:e7:
87:a9:92:28:ce:fe:a7:f6:c8:17:5a:e3:01:e1:f8:
1a:ce:e2:ee:2b:1c:b6:61:0d:8f:20:3d:ad:d2:20:
9d:ba:61:12:46:5c:3d:c2:21:56:ee:b2:f6:6e:4e:
e4:af:18:11:0b:a3:51:a1:09:fa:39:bf:4f:87:ec:
8e:ca:57:4c:98:98:db:0d:9e:80:a6:ea:e0:e0:cd:
45:c0:38:2c:95:56:23:4c:f4:a8:8c:22:62:fc:cf:
23:f9:e2:64:70:f3:9b:c9:b3:45:c9:7b:39:8f:d3:
b8:20:bf:73:37:34:e8:21:f6:25:f2:03:47:12:bf:
57:86:b9:b1:4c:e1:5d:a7:ac:04:01:9b:f1:0c:e5:
07:f3:e2:5b:eb:9a:f7:62:97:8f:23:de:38:ae:11:
da:db:28:d3:0a:dd:2d:9c:80:41:0d:e8:da:f0:e3:
61:3b:6e:da:4b:66:31:1c:6a:70:a8:22:ef:d1:de:
1a:bd:ff:b6:e1:32:49:f5:7c:74:58:a2:63:d5:6a:
55:ed:63:8e:e1:bd:fa:ca:39:b7:12:cb:5e:33:a5:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:1E:7F:6C:11:3E:93:51:0D:5D:BD:1A:00:12:07:49:D3:F3:CF
X509v3 Authority Key Identifier:
keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:7d:9c:12:44:b2:2b:b9:db:a4:c6:86:83:21:21:85:90:aa:
80:7b:22:9b:ca:23:14:ca:f8:57:fe:58:0d:88:f0:04:d7:e1:
59:f8:64:2e:d5:87:f1:9e:13:fe:7d:dc:51:f0:14:18:ff:8f:
cc:10:e5:dd:32:18:20:57:62:94:1b:bc:dc:b2:92:17:df:59:
02:53:7c:45:63:e4:56:28:91:b3:ed:5b:43:cc:a8:7d:f8:63:
02:4a:97:02:cf:36:a8:80:54:00:f5:86:87:37:fd:b5:c3:03:
95:94:b3:b2:27:1a:41:af:21:37:7b:59:f2:87:a2:cb:1d:ed:
41:c4:f3:12:a3:de:90:65:0e:0c:39:48:9d:3b:bc:34:0d:4d:
43:b2:e2:62:0d:34:a4:22:35:79:b8:05:9c:b3:8f:4a:0c:0b:
79:ea:91:0c:26:33:3b:10:72:5e:7c:58:5e:70:56:20:e7:98:
e4:1d:4d:8f:bc:13:56:fc:7c:91:80:37:97:0d:37:1a:0b:15:
0a:ab:5c:76:6f:59:f4:a2:a7:0a:80:8e:7c:19:f9:f1:78:2b:
94:59:52:4d:82:28:10:3a:bb:25:51:d1:55:fe:ae:5a:cd:33:
d5:74:4f:e2:ca:a0:12:83:29:3a:e0:e0:3f:dd:07:64:f5:ef:
fc:8d:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:56:12 2026 by rpki-client