
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: tuRdq1hJjTOZJFvUIctKBgzEg7cDTItwAonqq/nYrS0=
Subject key identifier: A7:88:FA:4A:66:A9:B2:88:9B:D4:23:9E:3C:EA:FB:B4:B1:AF:7C:05
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 0471
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 0453
Signing time: Mon 05 Oct 2026 00:12:36 +0000
Manifest this update: Mon 05 Oct 2026 00:12:35 +0000
Manifest next update: Mon 12 Oct 2026 00:12:35 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: IdoyVAl40p8HZxUhx3rIFjQT9dSJvPuvIbzjS6a0mv8=)
2: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=)
3: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=)
4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Oct 5 00:12:35 2026 GMT
Not After : Oct 12 00:12:35 2026 GMT
Subject: CN=6ac2eb74-d796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:db:d2:25:d2:63:31:bc:92:93:ce:55:30:
6b:df:f3:33:1f:56:e3:c3:10:b5:09:7e:f2:59:1d:
e9:81:b3:54:38:17:ed:ba:e9:17:4e:84:e4:ec:f2:
25:88:ff:ca:fd:ff:b8:d6:ed:58:4e:70:d2:8d:03:
df:c8:f8:55:f0:ed:60:4a:b1:f8:dd:8d:7f:b0:20:
6d:0c:c9:e4:bd:4f:3b:05:84:74:7d:ac:69:f9:30:
2e:34:91:06:e4:05:7a:ff:ac:3a:ee:21:10:a9:75:
43:a4:d9:50:43:87:0e:89:20:fe:7c:21:84:da:57:
23:99:a5:d0:18:e6:94:12:77:9f:d1:d5:b5:f2:ea:
62:0a:36:14:92:46:a7:51:7e:b7:91:93:0b:26:fc:
dc:ff:41:99:3a:e2:54:84:02:ff:a7:0b:b3:e2:dc:
71:24:41:54:bd:9a:03:12:d3:44:ab:bf:f0:35:5d:
4e:00:ac:3e:25:32:7c:84:6d:6b:60:76:72:12:f2:
73:fe:79:56:0f:13:32:25:39:5d:8c:d4:d2:0b:8a:
67:c0:e5:31:78:d0:40:6f:12:8b:5a:03:76:e0:14:
2b:7f:bd:62:53:71:e1:17:77:f2:4f:0a:f4:2f:f6:
b8:60:04:56:f6:66:36:f2:b8:51:df:9f:3e:b2:8b:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:FA:4A:66:A9:B2:88:9B:D4:23:9E:3C:EA:FB:B4:B1:AF:7C:05
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:3f:bc:5e:ac:fa:8a:3c:03:09:46:4a:ac:89:7b:1d:5e:8e:
88:93:1c:80:63:3a:6a:7c:34:49:a9:15:a3:3e:5f:bc:94:1b:
dd:46:23:92:59:89:38:f5:22:c0:41:ba:3a:d8:cd:52:38:91:
03:83:32:09:02:9a:95:f4:cf:77:5f:86:1b:f0:14:2b:8a:5e:
9a:54:b0:ef:ff:67:bb:9b:bc:01:4c:dc:e8:6a:c6:8c:84:94:
a3:a1:65:f3:ec:29:32:9d:dc:8f:a5:b0:79:f4:2e:55:c0:56:
fb:ba:19:a1:9b:28:df:ff:b2:38:01:91:d1:f1:15:18:71:16:
8b:62:7e:96:ab:11:52:d7:c3:86:06:45:ea:78:e8:ad:93:82:
1b:49:f3:9e:08:05:c3:b7:06:93:35:d6:00:08:73:1e:98:c9:
0e:71:b0:83:2b:c4:6e:db:c7:f8:9b:21:e9:12:6e:2a:1b:0a:
c8:6a:64:10:d2:f7:49:7e:da:14:d7:12:e0:57:fd:a6:fc:ca:
5c:d3:6f:57:0c:34:5d:a7:0c:0f:b3:c2:a5:33:99:e9:1d:f1:
aa:91:cc:af:28:5e:6d:f9:9a:69:a8:77:37:cf:14:50:43:31:
2e:28:fb:4a:cf:38:e3:41:a2:23:1a:94:45:a6:da:73:43:8f:
b6:0c:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:59:01 2026 by rpki-client