
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json)
Hash identifier: tzm90fTfCf3kTUTvaXtXYQ0vjjdJEAgUBEoc8Y4iVks=
Subject key identifier: DC:F1:5E:D0:7B:E8:66:F7:5B:32:02:93:3F:19:34:C1:FF:47:45:FF
Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Certificate serial: 0CEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
Manifest number: 0CE0
Signing time: Sat 04 Apr 2026 18:09:07 +0000
Manifest this update: Sat 04 Apr 2026 18:09:06 +0000
Manifest next update: Sat 11 Apr 2026 18:09:06 +0000
Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: XFMLWNlEOYj4Aq0ZdnhKFcyR/7ONMjKSOFpV8W2U81w=)
2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: Ar9Bunxzx+IzrJnS3InP70mlYzYuHl3fsl1SQ+2WUx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3308 (0xcec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Validity
Not Before: Apr 4 18:09:06 2026 GMT
Not After : Apr 11 18:09:06 2026 GMT
Subject: CN=69d153c3-47ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:60:b1:1e:93:f9:65:3e:8d:25:04:00:6d:
b7:b0:92:f3:7f:41:81:3b:3b:66:bb:bb:87:a1:ec:
ef:40:8b:68:db:fe:c5:f4:13:e0:14:6f:d2:57:0b:
86:00:54:34:10:e0:34:ec:8f:f0:8c:85:e4:cc:20:
cb:0c:25:df:e4:4f:18:5c:61:96:46:fa:37:c0:9a:
bd:b0:88:ba:37:b2:cf:00:8e:e9:3a:f5:7f:40:7d:
c7:03:8b:37:02:a4:90:47:31:dd:08:c4:b9:da:2c:
1d:94:ec:01:57:c3:35:26:c5:54:90:86:78:d3:57:
f0:45:aa:4c:a4:6f:42:df:63:d3:f0:8e:2d:db:c5:
d8:8c:65:3a:b5:8c:4a:84:1a:b9:1e:f0:93:91:74:
6b:41:77:22:c6:ff:f0:f7:cc:bb:08:2b:48:b7:66:
2d:55:5c:44:85:78:eb:66:74:bf:0c:43:2f:48:3e:
58:4c:59:83:0d:75:12:2c:e8:65:f6:94:a3:04:ac:
3e:4d:79:ee:d1:88:5d:0d:e6:2f:5c:f4:b0:63:05:
a0:4a:15:fc:8e:e1:a7:96:f8:f3:31:12:1e:4b:c2:
44:7b:af:d8:95:87:ce:dd:ba:cd:ce:2a:2d:15:5c:
a7:6d:99:b5:ef:0d:75:ab:98:5b:79:e5:83:c2:8f:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:5E:D0:7B:E8:66:F7:5B:32:02:93:3F:19:34:C1:FF:47:45:FF
X509v3 Authority Key Identifier:
keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:02:9e:21:3a:76:7f:e8:87:8d:7b:2c:b2:89:65:c3:60:c0:
42:54:d8:64:ff:d3:6b:c9:df:42:d4:d7:4c:fe:50:7f:6d:73:
ba:6a:3a:b6:95:4b:f6:4f:0e:68:67:4e:c8:25:fa:97:ff:12:
ac:cb:d1:79:86:71:38:bf:79:d9:c2:99:8c:45:f8:0d:70:33:
47:24:9d:6c:f6:16:ec:e6:2d:95:6c:29:22:48:74:a2:53:9f:
53:3b:80:3d:17:76:51:50:10:c6:46:35:af:10:1a:a5:b0:18:
41:25:75:0a:55:75:af:2f:95:89:90:de:7d:7e:31:08:4b:aa:
58:42:77:9f:16:50:bf:d5:49:7e:b1:5f:f4:12:0c:bc:1f:2d:
6a:d6:e7:a6:38:2e:c3:72:44:94:43:1a:85:48:9c:57:dd:ff:
77:71:5f:04:c5:d2:27:44:45:24:a7:af:3b:01:61:aa:ec:f3:
95:08:98:5f:cf:eb:37:bf:88:e0:e6:6f:9b:0d:4d:60:e1:d3:
d1:1f:87:3a:a8:79:5a:35:b8:c1:00:b4:da:84:eb:27:50:eb:
3c:3d:16:34:3f:a6:0b:ef:31:da:21:3c:27:31:cb:d0:bb:81:
69:97:08:5a:6d:ee:5d:31:bc:7c:4b:40:6f:a6:28:6c:58:f0:
ca:c2:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:46 2026 by rpki-client