
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
File: uPcTXGBh-I9CraXVMMFwUK66jYU.mft (raw, json)
Hash identifier: 1PoD3wCFgjBECicMitympOQ+0TsAcaJtAHcttUlBVFk=
Subject key identifier: 72:34:F1:0B:DF:D3:77:50:0D:88:CA:B4:B4:06:89:EC:D3:FB:65:03
Authority key identifier: B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85
Certificate issuer: /CN=A91B7929/serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
Manifest number: 33
Signing time: Tue 03 Mar 2026 08:17:43 +0000
Manifest this update: Tue 03 Mar 2026 08:17:42 +0000
Manifest next update: Tue 10 Mar 2026 08:17:42 +0000
Files and hashes: 1: uPcTXGBh-I9CraXVMMFwUK66jYU.crl (hash: LzWNulZC8aFSNEZQrvP08PYHwOlfbH02zrbhOUIBlbE=)
2: 79376344DB2011F082375EAE87D3641D.roa (hash: /tgduaIQHeYLKjxq98YV75mrt+Wp7Usd8BI5OBX6xcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.crl
rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7929, serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85
Validity
Not Before: Mar 3 08:17:42 2026 GMT
Not After : Mar 10 08:17:42 2026 GMT
Subject: CN=69a69926-5d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:a1:d7:56:87:8d:7a:04:59:05:a9:43:4e:
a9:69:dc:09:74:ca:4d:09:44:d6:48:9a:38:2d:80:
70:46:87:7a:eb:13:56:37:20:59:54:74:2b:a7:69:
4d:f1:3a:b4:1a:85:7b:f9:d5:14:3e:ac:68:78:ae:
97:22:20:2d:03:5d:76:75:3e:2e:79:49:a8:14:77:
44:2f:1a:00:33:84:cc:55:c1:00:0e:26:3d:f1:19:
56:12:9a:40:4a:ad:69:95:75:b0:3b:43:f5:fb:4e:
ef:99:d6:30:3e:1a:f5:ea:17:a1:d9:0b:1d:44:b8:
03:07:9d:5e:c9:fb:12:75:30:7f:b5:c6:95:af:82:
03:10:92:72:91:3c:21:8d:99:cd:6c:71:0b:84:9c:
af:22:22:b6:52:e1:02:e9:f4:40:8a:1b:d9:0b:d1:
82:91:a9:ad:1a:64:3f:6f:2d:48:08:e6:f8:8f:16:
a7:db:87:eb:4d:33:ce:42:c4:cc:e3:65:b0:05:1c:
30:73:0b:51:50:a8:75:e1:77:64:ce:f8:07:aa:e0:
aa:24:df:a5:1a:d6:45:6e:81:9c:06:e6:a8:dc:b5:
3e:24:e0:63:55:52:ff:1c:d8:53:37:97:08:4f:c3:
40:26:29:d2:60:16:86:8f:c3:08:16:39:16:7e:e8:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:34:F1:0B:DF:D3:77:50:0D:88:CA:B4:B4:06:89:EC:D3:FB:65:03
X509v3 Authority Key Identifier:
keyid:B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:5a:8f:ff:c0:c0:ad:dc:4a:5b:de:c4:71:4a:9e:a5:af:
dd:95:9a:f7:e9:32:4e:29:48:9a:bc:55:13:57:d8:14:4f:ab:
1a:0e:3e:85:7c:79:b1:8d:83:df:a1:ec:36:a6:a0:da:48:3a:
69:ad:f2:1e:65:ae:66:f7:f0:35:3d:b3:34:53:46:a1:90:3e:
28:c3:c1:c7:3d:b0:0b:c5:e4:bf:be:92:37:43:26:f7:78:2e:
64:20:e1:3d:79:40:39:fd:b9:24:ac:05:f8:1e:84:44:1e:42:
34:98:cf:c2:ef:00:0b:69:70:c2:32:56:b1:2d:cb:ae:e7:36:
84:fe:47:94:f9:d6:9f:bc:83:eb:9a:5f:fb:43:ab:ec:7c:3c:
74:f8:2b:74:9d:93:de:82:00:11:11:7e:dd:9c:c1:ab:c6:87:
3f:3f:d1:56:c8:4a:d1:c2:86:de:7d:9a:04:f2:2a:09:c3:10:
69:50:6c:6b:6b:5b:a3:43:a4:e3:80:4f:b4:b8:a3:42:0a:b0:
68:75:c0:4e:e1:6a:71:1b:7b:8b:18:5c:45:a5:b2:8e:7d:a8:
f9:d6:09:f0:fd:b9:81:16:c0:81:08:49:d9:e2:3f:a6:e8:07:
fa:64:22:05:40:55:83:0f:0b:70:f0:fa:29:55:08:b0:51:98:
64:ff:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:29:47 2026 by rpki-client