
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json)
Hash identifier: TUQ1RXzANesMY22TFNmXZLVDg1il0P5jFhOfirdyyCo=
Subject key identifier: A5:E9:66:10:57:86:27:BF:80:94:BB:A9:19:4B:E5:2E:D9:E0:1F:82
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial: 0A76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
Manifest number: 0A54
Signing time: Mon 22 Jun 2026 19:44:53 +0000
Manifest this update: Mon 22 Jun 2026 19:44:53 +0000
Manifest next update: Mon 29 Jun 2026 19:44:53 +0000
Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: wa3s2RJdiWRHj7cBRm86bsex+dIqWKaVnCShT3BPTP4=)
2: 561D611CF05411F083286E06586F56BC.roa (hash: mV8foMb7ocsRMBzmhgWcQYBDx0aFnpOd/rvWDjDVZ3o=)
3: 927EC59C44C311F19F7AC93DBC833773.roa (hash: Q2pzbTsRFWgaAZue/uEXnUI4Gz6eIodBj3nr5/fu5yU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2678 (0xa76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Validity
Not Before: Jun 22 19:44:53 2026 GMT
Not After : Jun 29 19:44:53 2026 GMT
Subject: CN=6a3990b5-8700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cb:e5:67:a0:0b:3e:65:60:79:91:b8:33:a9:
62:5b:a0:a3:0e:d0:1e:c9:65:82:fd:74:c7:79:cf:
b5:7f:3b:fc:64:89:86:de:8f:48:64:73:de:5c:0e:
b7:27:c7:df:57:e4:2d:f2:2f:8a:2f:bf:cc:6b:35:
68:d7:23:9a:0f:8b:f0:8c:25:63:ba:f6:89:30:38:
5d:90:a5:37:4f:09:11:62:f4:04:e2:d9:4d:3b:7c:
b5:51:1d:0a:0c:d6:f9:f0:b2:e4:36:5b:91:f9:05:
d1:81:2b:59:9b:09:49:68:45:d6:03:6e:17:8d:dd:
8b:3a:09:cc:53:9f:f8:29:4b:2f:d7:0a:ea:11:b2:
b1:df:0d:92:29:d1:bb:37:a5:fa:f1:7a:6a:98:8f:
e7:cd:65:f9:2f:e2:60:1b:80:12:70:74:ca:c8:58:
bb:47:5e:df:5d:17:84:eb:77:0b:de:8a:62:75:fc:
1e:6f:ce:90:a7:d3:1f:7a:70:75:e3:d0:bf:a9:90:
5b:56:5c:a3:85:39:ea:76:3a:82:16:5f:42:9b:cc:
be:c1:ae:82:72:9d:22:9e:4c:13:0f:d6:05:a3:f0:
14:fd:57:ca:85:40:c4:d8:58:40:33:76:86:18:6b:
69:02:9a:26:f5:f3:e6:7d:af:b2:89:e5:ed:4e:b6:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:66:10:57:86:27:BF:80:94:BB:A9:19:4B:E5:2E:D9:E0:1F:82
X509v3 Authority Key Identifier:
keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c7:38:a3:32:80:38:b5:ef:ce:14:7f:43:f2:33:ec:3d:83:
80:fb:80:a3:90:f1:4b:3a:55:a5:23:a3:01:e2:86:30:96:4a:
30:8e:08:e4:74:ea:1a:a5:89:a1:92:04:26:9d:f6:24:c9:99:
0a:61:7f:99:1a:6a:c2:0b:26:d2:08:ae:e9:96:89:93:ae:79:
07:9b:30:23:5e:db:af:37:3b:63:07:32:33:9b:08:f0:56:34:
33:6c:19:80:28:37:e6:88:9b:c0:5d:4d:61:ca:d1:bb:3e:41:
6e:a8:59:e2:68:91:14:3d:6c:15:5a:9f:01:d0:c5:f1:0c:cc:
16:8c:86:0e:37:19:64:04:25:c1:af:ce:b7:13:f6:67:e1:19:
26:a7:bd:d0:bd:12:c0:75:b9:f0:bb:d7:cd:7b:ef:6e:22:dd:
5e:2e:fd:0e:f5:ac:d6:c3:f9:81:58:68:32:7d:40:12:d9:90:
e2:31:be:db:22:52:5d:7a:1b:69:1d:b0:d9:0d:3a:9b:83:dd:
36:fe:54:20:31:1d:2e:6a:36:a0:f7:b9:02:0f:74:39:44:9f:
d5:85:ca:3d:fa:6b:57:7e:eb:ec:07:40:4b:b3:9c:56:c2:1b:
16:0b:7b:cc:63:a9:75:00:92:31:4f:4b:10:7c:45:1a:5d:4c:
6d:d7:fc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:50 2026 by rpki-client