
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier: 2iXGGkrWP5chC27sm+erHKshqsVeb6Wg9R3kkyKiGdw=
Subject key identifier: F9:7E:90:AB:CA:EA:E4:11:55:ED:BB:87:C6:7B:14:50:CA:15:E1:06
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number: 01A6
Signing time: Sat 03 Oct 2026 04:52:48 +0000
Manifest this update: Sat 03 Oct 2026 04:52:48 +0000
Manifest next update: Sat 10 Oct 2026 04:52:48 +0000
Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: s9ntg3UVy0gRBXYB5ZBEMUkBzKFyxwtbtcYlbRifnLU=)
2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: ObDEmQtG1k/lwRkpOy9F2JW1dUiE7e1eGbOxUKu27dQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Validity
Not Before: Oct 3 04:52:48 2026 GMT
Not After : Oct 10 04:52:48 2026 GMT
Subject: CN=6ac08a20-7d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fb:4f:19:e1:d6:b9:5d:7e:2c:d5:a6:e4:18:
23:2c:f5:35:81:eb:d5:1a:f3:8c:20:90:62:d4:80:
8a:58:12:72:52:a8:9f:7d:10:ae:4f:e8:2a:82:7c:
60:b6:08:14:72:a4:f6:31:f4:c2:a3:3d:cc:db:50:
37:c7:c2:5a:a7:1f:9d:35:84:70:7a:b2:07:3f:d7:
44:f3:fe:59:bc:f3:db:f4:b1:95:e6:90:e0:d9:19:
f7:c7:3a:e7:71:9c:4b:8f:70:df:af:b3:a7:30:5a:
d9:0e:b1:a5:d2:06:98:3c:ce:94:90:09:8f:20:7f:
e3:8d:dd:3d:1c:8b:cd:fa:7d:00:e5:f9:28:39:ce:
3d:e7:ff:ac:bf:50:d8:80:f1:82:4b:bb:d7:9a:e3:
a8:aa:c5:77:85:e0:3f:c7:5e:31:3a:d0:4c:85:93:
b7:80:ab:d9:d9:72:27:22:46:74:41:4c:a2:ab:f1:
ef:15:57:c5:86:47:ac:b8:07:ee:f7:2d:8e:c0:1e:
27:92:9f:b3:c6:8c:a1:c5:5f:7d:f5:c7:aa:5d:84:
2f:55:a4:2b:62:b4:09:e9:ae:99:5f:7c:48:dd:ff:
0f:16:11:c7:4c:ec:83:63:2e:1b:51:c0:71:02:5c:
23:04:c2:49:2b:86:be:f6:4c:3c:bd:c9:b5:87:b2:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7E:90:AB:CA:EA:E4:11:55:ED:BB:87:C6:7B:14:50:CA:15:E1:06
X509v3 Authority Key Identifier:
keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:92:99:b2:54:e5:ad:6e:44:80:42:06:46:3e:cb:91:e5:
95:d4:e7:f0:d3:81:01:ce:91:98:3b:78:c8:60:28:35:f5:1d:
f3:8b:aa:07:d0:15:b9:02:81:b4:38:29:6b:3c:4e:7e:27:ed:
8c:19:a5:80:5e:a1:e9:0a:f5:ef:b1:22:b2:ab:77:b9:f4:94:
34:0f:4c:28:bc:c7:20:f7:aa:ca:14:06:f2:a9:93:7d:f2:11:
b1:f4:d9:7c:36:bd:57:93:7a:66:4d:a1:84:36:05:97:18:8c:
84:af:06:c8:39:8a:06:13:3f:62:27:12:98:bd:cc:60:40:1b:
93:1d:e5:51:b7:90:d6:c2:e2:67:9d:03:7a:c6:f9:af:7f:66:
cc:14:95:c5:b1:23:9d:43:f4:ec:84:b9:6a:7f:e6:53:2e:a5:
30:9d:c1:c6:d5:68:0c:16:a1:20:e6:6e:44:58:8f:c5:24:77:
95:78:00:cd:bf:d7:29:d1:c3:0a:a3:81:ed:d4:dd:dd:80:94:
e8:41:3e:06:ed:c1:30:cc:56:9c:30:28:32:df:7f:65:f1:71:
cc:08:27:0f:2b:2b:be:18:a3:95:9e:08:db:8b:8e:b1:df:0b:
e1:cc:00:f3:27:fb:23:60:45:64:d0:63:fc:d3:df:7a:61:72:
d3:3c:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:08:03 2026 by rpki-client