
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json)
Hash identifier: KIEbaLyTyE9rHeQo6YSIVVM+iELlQ5bY3N4MQv8jUV0=
Subject key identifier: DD:2F:4F:BC:50:41:0B:1C:A6:B2:3B:D4:A1:35:FE:7C:94:1B:CF:2A
Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
Manifest number: 0136
Signing time: Wed 15 Apr 2026 05:05:45 +0000
Manifest this update: Wed 15 Apr 2026 05:05:44 +0000
Manifest next update: Wed 22 Apr 2026 05:05:44 +0000
Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: CeczRMoXgAJVB4BPZdPRXK3y64Q8DmHCviqEyj7Nhbs=)
2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: aqdbrD7OJ2blLWFWLyQljkln+OcPA1d2ry5HZh2PUb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Validity
Not Before: Apr 15 05:05:44 2026 GMT
Not After : Apr 22 05:05:44 2026 GMT
Subject: CN=69df1ca9-6293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:00:db:9b:98:ac:04:43:71:a0:2f:64:4c:
f2:ff:5e:c0:aa:22:33:8e:10:33:66:4c:a2:00:e8:
dd:f7:65:47:bc:e2:1f:cb:0d:d4:92:27:8c:63:21:
37:3b:ff:ae:0b:d9:88:d2:3d:af:ae:7d:ca:c6:b9:
96:a0:dd:17:f0:71:a9:14:d5:73:13:29:55:89:e0:
f1:f0:52:ce:63:6b:14:42:22:24:7b:8d:31:1d:64:
2d:64:e7:2a:b8:dc:5c:21:40:4b:77:83:32:5e:42:
0f:fa:49:db:e9:a4:1a:96:00:03:65:b4:76:1e:e0:
96:9b:9e:a9:05:ca:b6:92:50:cc:03:6d:81:80:d6:
95:e5:85:98:0d:d5:62:58:a9:46:44:b3:de:45:7f:
30:54:12:0b:90:ad:14:66:b3:34:53:37:3a:41:03:
fb:96:f4:4a:77:66:f6:70:83:3b:09:09:34:44:e5:
6d:8a:c6:d7:1a:10:1c:31:15:da:68:e1:4d:48:27:
f8:9e:19:bb:5d:0e:7b:9d:43:22:aa:f8:8c:87:9d:
d9:a8:d1:73:60:b2:05:8d:0d:05:f1:ea:46:22:70:
99:ab:55:4c:c8:b0:c2:8d:c3:23:38:12:eb:a1:2b:
4b:5a:d2:72:c2:56:c3:5e:c2:09:07:1e:ee:2b:b6:
e4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2F:4F:BC:50:41:0B:1C:A6:B2:3B:D4:A1:35:FE:7C:94:1B:CF:2A
X509v3 Authority Key Identifier:
keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:b6:85:46:c3:3e:80:8a:9b:1e:96:9a:36:a0:4b:2d:a3:5a:
d0:ea:3e:06:0e:ee:45:28:1d:4d:ea:95:f7:f2:0d:d9:f5:99:
98:d4:fc:58:d2:c9:28:05:2b:a6:8c:de:46:e6:95:6e:70:b9:
b2:76:2a:47:75:be:d6:77:83:36:c8:a9:9c:fe:17:69:98:47:
c1:24:f2:91:51:5c:35:79:72:9d:ee:e0:fe:3e:74:bd:b8:b7:
04:cd:8d:be:d6:51:89:00:72:96:8d:d3:9b:24:5d:9f:2a:a2:
a8:f6:ae:a6:84:3c:cf:6c:f1:6d:a6:b0:53:b6:76:1d:c1:e7:
a4:bc:ed:5f:42:93:9b:26:90:c4:4c:0e:cb:91:6a:7d:f1:a0:
50:0b:68:1b:b8:0e:b4:f6:a9:48:35:e1:9a:c1:79:56:59:20:
c9:9b:16:48:19:b6:1a:5a:b3:b8:30:24:76:77:82:4b:4d:b5:
b5:86:f2:3f:c2:9c:40:3b:55:6f:37:2e:29:38:f1:dd:f9:ff:
ea:e4:e5:2a:17:1b:2f:04:9a:ff:53:05:e9:0b:84:7a:70:08:
a6:38:65:79:d1:b9:53:b2:6b:4c:33:f5:c5:a1:2b:94:42:04:
f1:f3:ac:9a:ff:13:75:0b:ba:8e:e0:0c:8e:08:13:4a:f2:0d:
8d:ca:d2:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyRDkxMTAvBgNVBAUTKDUwRDI0MDQyQTRBNjVFRUU2N0E3RUE0RDNGQzQ4OTQ0
M0EzOUFBNzQwHhcNMjYwNDE1MDUwNTQ0WhcNMjYwNDIyMDUwNTQ0WjAYMRYwFAYD
VQQDEw02OWRmMWNhOS02MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3KAA25uYrARDcaAvZEzy/17AqiIzjhAzZkyiAOjd92VHvOIfyw3UkieMYyE3
O/+uC9mI0j2vrn3KxrmWoN0X8HGpFNVzEylVieDx8FLOY2sUQiIke40xHWQtZOcq
uNxcIUBLd4MyXkIP+knb6aQalgADZbR2HuCWm56pBcq2klDMA22BgNaV5YWYDdVi
WKlGRLPeRX8wVBILkK0UZrM0Uzc6QQP7lvRKd2b2cIM7CQk0ROVtisbXGhAcMRXa
aOFNSCf4nhm7XQ57nUMiqviMh53ZqNFzYLIFjQ0F8epGInCZq1VMyLDCjcMjOBLr
oStLWtJywlbDXsIJBx7uK7bk3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0vT7xQ
QQscprI71KE1/nyUG88qMB8GA1UdIwQYMBaAFFDSQEKkpl7uZ6fqTT/EiUQ6Oap0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9BOTlDMTYyODY3
QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1NW5wLXBOUDhTSlJEbzVx
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VOSkFRcVNtWHU1bnAtcE5QOFNKUkRvNXFuUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjJEOS9BOTlDMTYyODY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9VTkpBUXFTbVh1
NW5wLXBOUDhTSlJEbzVxblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgbaFRsM+gIqbHpaaNqBLLaNa0Oo+Bg7uRSgdTeqV9/IN2fWZmNT8WNLJKAUr
pozeRuaVbnC5snYqR3W+1neDNsipnP4XaZhHwSTykVFcNXlyne7g/j50vbi3BM2N
vtZRiQBylo3TmyRdnyqiqPaupoQ8z2zxbaawU7Z2HcHnpLztX0KTmyaQxEwOy5Fq
ffGgUAtoG7gOtPapSDXhmsF5VlkgyZsWSBm2GlqzuDAkdneCS021tYbyP8KcQDtV
bzcuKTjx3fn/6uTlKhcbLwSa/1MF6QuEenAIpjhledG5U7JrTDP1xaErlEIE8fOs
mv8TdQu6juAMjggTSvINjcrSEg==
-----END CERTIFICATE-----
Generated at Thu Apr 16 06:32:10 2026 by rpki-client