
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File: uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier: udnIPiTvYv70vVhzfH/48CRl+mohP3QcgdGM4/igTkQ=
Subject key identifier: 1D:6C:26:5D:7E:E8:9C:8F:58:AB:F4:4D:1D:55:E4:B6:CB:70:D0:39
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer: /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number: 0135
Signing time: Sat 21 Mar 2026 04:34:20 +0000
Manifest this update: Sat 21 Mar 2026 04:34:20 +0000
Manifest next update: Sat 28 Mar 2026 04:34:20 +0000
Files and hashes: 1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: ORNkEoUdMpA5CJct1bdoP6NFP0GL/NdkhOL4IT2HKEQ=)
2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: QYDMiyLsJUluSn0j67IjTBM2ewHLlzSGUigM47qc2ug=)
3: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: XW/veL+aykLoqzCS1Skl+u7OuNFXArsA4MwYWRJWYT4=)
4: 4749FE2AE9EC11F09B751112686F56BC.roa (hash: qQlTF9dTZWLs/G09Pvw0hcRd0j+bTrN8gGIowS7qYUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Validity
Not Before: Mar 21 04:34:20 2026 GMT
Not After : Mar 28 04:34:20 2026 GMT
Subject: CN=69be1fcc-065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:4d:b0:9c:85:9b:b8:45:2b:3a:49:65:24:
28:13:1c:b7:10:ec:d4:7b:af:e9:cb:c1:95:0f:c9:
4c:0a:aa:f6:61:b2:86:db:b7:5f:97:47:e5:4c:36:
a5:7a:ff:e4:88:66:29:e7:50:46:a8:00:49:1b:90:
b0:c6:d7:aa:1c:88:4c:50:3b:74:7b:3c:a8:06:0f:
23:ee:25:a7:84:c3:8b:27:18:f1:70:ea:8a:c4:47:
a5:44:88:bd:25:15:78:1d:ab:14:97:74:fb:fe:d2:
e4:6e:58:fa:8f:e9:e1:37:e2:21:41:b7:a7:cf:ba:
67:2f:31:ca:55:da:ab:ae:b7:a5:bf:19:fc:e5:6b:
13:24:1a:a2:d1:b9:7d:ad:42:a0:04:b3:68:20:41:
1b:7d:26:b1:bc:10:fa:1e:f4:42:90:e7:e8:39:ce:
24:b2:e1:75:c9:cc:3c:69:be:c2:d3:08:03:92:90:
5b:6c:9f:b9:bd:5d:e6:92:41:f0:56:fd:9f:c9:b3:
61:71:6d:1b:ce:04:9e:34:4e:dc:18:e6:ba:c7:8c:
ea:f8:60:ef:39:a8:79:57:32:9d:89:0a:bc:37:41:
47:2f:d8:fc:43:85:53:72:5c:88:a1:cf:b0:f6:54:
ce:6a:a3:4c:c2:2d:7d:4d:05:43:34:b8:f8:7a:4c:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6C:26:5D:7E:E8:9C:8F:58:AB:F4:4D:1D:55:E4:B6:CB:70:D0:39
X509v3 Authority Key Identifier:
keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:50:13:06:35:11:70:84:1d:44:9e:f5:3e:77:99:40:72:1c:
51:32:a5:d3:f8:26:02:7c:17:89:03:c5:75:b9:95:43:f9:d6:
60:60:47:40:fc:02:7e:78:3a:be:1c:d6:b1:aa:3a:77:19:a1:
be:f9:7b:44:d3:57:07:4d:5b:b5:35:ac:0d:8d:d3:bd:99:40:
e2:74:87:a2:51:1a:d6:a9:9f:84:c2:6d:32:81:70:6c:40:e0:
06:60:3e:a3:e7:e7:2f:84:9e:0c:c2:fe:6d:da:0c:a7:25:e4:
b2:9b:b0:d6:c6:e1:6d:b9:1d:a8:3a:a5:5c:48:79:f1:06:10:
9f:18:64:2d:50:a4:13:02:84:07:6c:6d:06:6d:ec:43:4c:1b:
a9:ac:a2:74:ac:84:78:dc:2f:c7:8b:6f:2c:35:f2:33:6b:aa:
ea:03:ea:9b:0c:5f:2a:50:34:c6:97:1a:b1:4f:b1:72:8a:6a:
9e:b6:64:31:ca:c6:a0:79:ae:72:85:83:a1:35:7e:af:62:49:
fb:9d:8e:06:4e:49:67:f7:62:de:86:a9:84:d3:d4:dc:1a:9f:
7a:3a:fb:e8:e7:de:b4:b2:84:16:5a:74:34:38:58:3c:55:27:
3c:20:60:aa:0c:91:dd:d2:d4:81:62:e3:35:d9:19:2d:85:f5:
32:f3:3f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:45:16 2026 by rpki-client