
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json)
Hash identifier: pqWhSL5RBIN//KSP32p16Z+04/u91Iu8r6j6e2e2a1I=
Subject key identifier: 76:F3:12:C5:74:B6:41:43:40:5C:5D:78:B7:5A:72:C3:C7:B3:1B:5B
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
Manifest number: 024F
Signing time: Wed 07 Oct 2026 02:48:00 +0000
Manifest this update: Wed 07 Oct 2026 02:47:59 +0000
Manifest next update: Wed 14 Oct 2026 02:47:59 +0000
Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: kCRE+qA7FeykNgqsKpgQhT1E+lpvq3ZIJCIkuqlo3eM=)
2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: BMS7yIShPQgNQAhR+NlB0waVolj3Ec+7GobiZkhfVxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Validity
Not Before: Oct 7 02:47:59 2026 GMT
Not After : Oct 14 02:47:59 2026 GMT
Subject: CN=6ac5b2df-bca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:92:f3:6c:da:c5:d6:c4:6a:73:92:02:e1:
c2:a8:62:f8:e1:23:b0:fb:99:91:f0:ca:d2:c2:84:
75:d4:10:de:bd:79:c0:71:c1:e9:38:65:88:e5:e3:
7b:d9:a7:c3:3b:53:d7:12:d4:be:9e:12:ed:3a:4b:
a2:85:c0:85:55:35:2d:81:2a:32:b6:02:c1:9b:4c:
d6:13:4a:e9:01:c5:ce:1b:f3:df:96:1d:9e:f0:1c:
1e:0d:d5:d2:03:81:a7:fe:d6:1f:be:82:1d:51:52:
b4:8b:b6:dc:26:37:ad:d4:e7:4a:9c:90:47:ab:36:
49:f5:50:b0:a3:95:23:c8:e5:6e:a3:0a:a0:7b:17:
02:8e:3c:93:a1:f8:4c:33:63:29:3a:7b:88:82:e9:
bc:31:a9:41:d8:a5:ca:49:d2:82:5a:46:ed:07:a3:
a2:95:1f:bc:84:88:bb:1b:10:b3:57:2e:a6:41:01:
79:71:ad:fd:2c:6d:e5:40:32:b2:98:ee:35:8f:07:
a2:5c:58:36:b1:db:fe:cc:97:46:cc:9c:e8:3d:98:
8f:9d:d6:b5:8d:22:d1:94:45:03:d4:4a:df:37:20:
02:32:5f:0d:d1:2c:4c:f7:0d:3f:13:05:89:a6:d7:
3e:bf:55:fb:bb:b5:85:df:70:e0:78:98:31:4a:a3:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F3:12:C5:74:B6:41:43:40:5C:5D:78:B7:5A:72:C3:C7:B3:1B:5B
X509v3 Authority Key Identifier:
keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ca:f0:6b:4d:e0:aa:c2:51:8a:45:97:dd:06:ba:26:b2:cf:
78:b3:65:39:cd:cd:34:f4:fa:0b:9f:ff:c1:37:62:9d:df:17:
38:c9:94:06:30:e7:31:2b:2d:10:6b:ad:8d:0b:91:eb:9b:46:
57:64:e0:0d:0f:bf:b4:87:55:cb:1c:7f:02:9d:6c:88:bf:d7:
f0:60:07:54:c7:bd:ca:a8:2c:28:47:f9:da:c6:41:b9:fc:b3:
34:c6:42:f7:72:4e:56:1d:9a:74:be:75:33:bf:4d:b0:b7:98:
92:73:fa:a7:ac:5e:66:de:86:4c:53:b9:86:af:de:c3:ae:00:
53:60:eb:87:29:87:e8:6c:43:0a:b3:2b:d9:6a:22:d5:de:81:
23:9e:9b:47:97:37:62:fa:c0:8f:85:d4:67:36:8f:bc:72:55:
0e:32:0c:af:5c:14:12:81:4c:43:ab:eb:3d:3c:bb:cb:a5:bd:
37:19:90:a5:8b:32:a0:f5:27:06:24:25:d8:24:d0:84:47:7e:
a5:64:66:e9:cf:c4:c6:cb:fa:59:a1:8a:c0:1d:61:e9:49:7d:
5b:3d:51:8b:99:e9:6c:fe:79:d6:3c:de:ba:9a:70:80:2b:bb:
02:92:3b:f0:07:06:3d:5f:05:76:86:d8:8d:f6:f5:9d:46:cd:
d7:37:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:17:28 2026 by rpki-client