
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
File: UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json)
Hash identifier: CztWTv3LyYwMZMKB7gHOjVPayUFkdIXYNyJfaJ9ZLDw=
Subject key identifier: D1:33:87:55:AF:8A:FD:2A:63:95:11:DF:77:36:3A:5C:2B:0A:1F:DB
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
Manifest number: 0105
Signing time: Tue 13 Oct 2026 06:59:35 +0000
Manifest this update: Tue 13 Oct 2026 06:59:34 +0000
Manifest next update: Tue 20 Oct 2026 06:59:34 +0000
Files and hashes: 1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: RancNfDYIFmZH8wgigI4m5FOPh5M/SQIxL+XzmfOjPg=)
2: 3B2E80F84C4C11F198B679C5B8833773.roa (hash: ygzPBbzcPNKgKBn3Takd4OFJZsQA58vlX72w9BdEaDs=)
3: C577E392D0F711F0BC02385AC4F9AE02.roa (hash: u1r3Je4qZRnxg/RZHpWI2PjYiwMKESZ7cb2kwwWNTUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 06:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Validity
Not Before: Oct 13 06:59:34 2026 GMT
Not After : Oct 20 06:59:34 2026 GMT
Subject: CN=6acdd6d7-11d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:7a:26:a5:4a:eb:45:a3:43:b4:74:0f:0a:
05:20:48:81:03:51:23:f6:23:d2:c2:4e:3d:f2:cf:
86:7c:b9:8c:50:a0:ab:2a:80:fc:df:89:7d:c3:e2:
92:a6:70:ed:cd:e9:4e:80:fd:fc:9a:72:c3:e3:cd:
05:0a:cf:f3:31:52:d1:00:e6:f6:e0:f9:1f:d9:2b:
c5:62:8f:55:95:ba:f0:2a:50:80:d0:85:7b:67:5e:
40:f3:c8:12:9d:a1:a8:5b:69:25:fe:81:71:1a:1e:
1e:31:d8:69:ea:f8:60:19:04:31:d0:8e:15:87:aa:
25:38:1b:e7:c8:3e:09:ad:e9:d3:c7:e0:7e:f5:0a:
e8:18:f1:a1:53:b4:07:c6:57:79:91:b2:b7:42:37:
d0:0e:6e:85:51:a7:bc:b1:2d:9e:f4:23:20:9c:fa:
39:63:bc:88:32:19:fe:6c:a4:d1:87:e0:32:61:0b:
20:35:ee:44:cc:a6:02:4e:ef:00:e7:84:12:58:9a:
ea:dd:8d:4b:99:c8:ea:da:a9:0b:8c:09:aa:7b:0e:
06:6f:3c:63:33:ce:c8:0f:29:a8:5b:c3:33:6e:75:
1f:a0:73:11:59:9e:88:ba:72:fb:b5:c3:d1:ed:f9:
6e:8c:cb:1c:ae:1f:ba:6c:75:a3:a6:6c:a4:61:41:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:33:87:55:AF:8A:FD:2A:63:95:11:DF:77:36:3A:5C:2B:0A:1F:DB
X509v3 Authority Key Identifier:
keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a5:a0:47:5b:8c:ce:8e:2c:13:88:90:43:c5:48:84:c6:bd:
2b:23:82:ca:85:92:73:94:dd:d0:90:b0:73:84:c4:93:88:77:
f2:0a:b2:db:e9:2b:29:fd:85:0f:30:e1:de:c0:48:b9:0f:12:
1a:78:f8:e3:6f:33:5e:c1:e7:04:2d:05:bc:4e:56:a2:4f:b5:
3b:5f:86:5b:2b:12:75:70:ca:f8:da:50:fb:c1:08:6c:3f:0c:
d7:e5:cb:de:a8:da:9f:48:9e:e7:b5:a5:e5:61:7f:b9:68:74:
e5:60:09:97:1e:d7:91:80:f6:0b:4d:84:9d:3e:c7:35:de:49:
a3:ae:01:6d:f1:a7:90:89:b8:db:c5:30:ad:28:19:df:81:90:
ef:a6:ee:8d:02:63:20:70:97:61:22:37:39:86:52:93:1a:8a:
58:59:d1:f8:9b:90:e8:d5:f1:7b:57:db:de:ac:2b:bc:b8:05:
f2:64:40:70:04:3f:9d:0a:67:41:c0:ce:6b:80:38:4a:f5:75:
c2:ff:d5:a8:da:30:5a:b9:e3:88:01:22:50:cc:4c:28:71:e2:
5f:df:72:ad:c0:3b:fd:b0:18:59:c0:b2:1a:74:d6:fe:fa:38:
cf:ea:9f:93:4c:ac:e2:38:55:42:fc:c4:1c:83:ab:00:45:28:
cf:87:12:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:55:39 2026 by rpki-client