
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: nbUf5O1uwbxJFsyQ+RdGelY6enmsc0PtKFWp1vpoN5s=
Subject key identifier: 8D:D3:4B:A1:94:AB:55:43:5B:C5:E7:7C:4D:F6:B5:35:F3:81:30:3B
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 0410
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 03F2
Signing time: Sun 29 Mar 2026 00:26:41 +0000
Manifest this update: Sun 29 Mar 2026 00:26:41 +0000
Manifest next update: Sun 05 Apr 2026 00:26:41 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: 3/6pe/w53xz9AzkCb9fGdu5a0vwRC6vIOtmw+SkxtzA=)
2: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=)
3: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=)
4: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Mar 29 00:26:41 2026 GMT
Not After : Apr 5 00:26:41 2026 GMT
Subject: CN=69c871c1-133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:bd:b6:5e:c1:ea:8c:1e:bc:ad:80:28:0c:
80:fc:06:93:ad:2d:79:02:c8:af:b6:0a:99:23:ee:
ca:7e:c9:64:a5:5b:2f:4e:2f:e3:65:9a:ed:23:0b:
01:85:54:2c:0d:1a:d2:e4:b8:14:31:99:bc:3c:fd:
79:02:4a:50:d0:ae:46:c8:fa:b0:ff:78:82:ef:e4:
e6:d6:4a:c0:84:ae:90:cc:09:6c:17:2d:c0:3c:37:
a5:78:8a:9c:60:4a:65:d1:62:de:92:3c:29:0a:fd:
42:57:7e:5a:ca:3e:65:49:f6:5e:67:9b:13:60:21:
88:f8:33:0a:9e:81:a4:79:7c:d4:2a:92:19:92:e8:
11:04:af:30:b0:75:93:f0:55:64:40:9f:3d:08:95:
a7:5f:66:e5:08:70:b4:d3:f7:2d:d5:1c:d3:38:12:
f5:91:24:02:f2:64:bb:61:e1:15:b8:47:b5:71:ba:
0c:4e:f1:82:33:f5:33:5e:ba:5d:b0:e6:f9:1e:e1:
c2:f7:9b:a3:1a:46:15:6c:34:d7:33:fb:3e:16:6b:
a5:fd:26:d5:27:85:5b:6d:ed:6c:2a:fc:9b:91:35:
26:f2:a2:8e:87:35:e9:63:85:35:f1:07:a3:e6:8a:
4d:62:29:4f:86:9a:e4:d8:18:0a:30:67:e0:7a:9f:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:4B:A1:94:AB:55:43:5B:C5:E7:7C:4D:F6:B5:35:F3:81:30:3B
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:08:af:33:21:14:d7:02:df:f5:64:aa:05:5f:0d:a9:2a:d8:
95:0d:2d:b1:5b:00:f1:1d:83:f4:82:e9:77:86:ce:62:64:6e:
b0:af:4e:dd:7e:96:73:89:3b:fd:8e:db:8c:bd:07:36:35:84:
30:10:69:a9:fa:5d:bb:0c:8b:de:25:5a:15:03:e8:5b:cd:52:
70:df:44:86:53:8b:46:c1:13:28:ee:d3:13:15:d9:5a:ba:1f:
77:93:eb:07:f4:93:03:b2:70:94:3a:8c:64:0b:a0:6b:9f:50:
9d:30:87:02:06:dd:ee:08:fa:cc:ec:24:4b:d2:8d:45:bb:5b:
4d:9d:b2:5e:d8:6c:92:bb:9f:40:b0:65:74:14:69:b5:a3:d4:
90:10:25:9b:e2:c1:72:fa:cc:f1:2a:d2:0e:44:43:ee:f6:a7:
6f:3b:ff:4b:2d:01:12:ad:93:56:f6:bc:75:42:e0:a8:3a:30:
6e:d1:ea:83:73:d6:1a:eb:02:9b:54:8c:c2:cb:5c:9a:0f:5e:
4c:fd:b5:4b:40:5d:28:d9:14:78:93:fc:80:77:8d:f9:80:ac:
ec:d0:58:4c:09:a4:2a:fc:cb:27:90:ab:8c:8c:ec:55:d5:d2:
90:0d:4a:1e:6a:ff:e6:70:60:ab:e4:87:c6:cb:3c:05:64:6e:
a1:16:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:30:30 2026 by rpki-client