
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json)
Hash identifier: Hhz9jsuqXu6I/9F0sRqvNxJ7HLasUHQ6BBZlCjCpO7k=
Subject key identifier: C4:A8:29:F9:69:85:DF:0E:9B:91:CA:B2:99:1F:B1:A6:97:6F:99:FB
Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
Manifest number: 01C9
Signing time: Tue 23 Jun 2026 04:01:57 +0000
Manifest this update: Tue 23 Jun 2026 04:01:56 +0000
Manifest next update: Tue 30 Jun 2026 04:01:56 +0000
Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: THwXZEP17iPFCBArABe46pN7/vsYRLEji05Sv9BbmHg=)
2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=)
3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Validity
Not Before: Jun 23 04:01:56 2026 GMT
Not After : Jun 30 04:01:56 2026 GMT
Subject: CN=6a3a0535-e877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:cb:7a:66:85:d1:eb:eb:de:21:2a:99:a1:
c2:73:4a:43:99:68:f9:e4:0b:ad:c9:22:b1:1a:53:
a8:a3:97:cd:28:43:e0:57:97:ba:e0:44:7e:fd:d8:
ba:7b:19:fc:c9:7e:2b:7d:99:45:a8:3e:77:1e:ea:
ef:29:26:58:68:e2:a3:e7:59:2e:28:6a:29:e8:ee:
6d:d8:5e:70:01:c4:1e:90:da:26:de:43:c0:3d:90:
7f:ba:4b:15:0e:cd:21:b5:1d:b9:5d:7d:63:c5:a6:
bb:c9:90:9a:f3:af:ce:d1:39:bb:18:10:2a:14:42:
77:a5:e9:1b:04:21:a1:bd:ee:52:0d:5b:ac:1e:1f:
60:5e:62:b6:19:b3:d2:d2:5d:83:d5:06:ab:c6:0b:
63:45:17:3c:00:96:2d:6b:44:f6:50:6f:f3:dd:72:
ca:da:e1:5c:ec:5a:56:a3:e1:54:87:7f:ba:a3:22:
57:c1:3f:76:a7:88:a6:ff:df:e3:f1:a5:bb:4a:f0:
df:b3:cc:f4:84:27:e3:3b:52:0c:6f:19:d0:75:42:
83:d7:4d:95:dd:77:14:9a:8e:fb:40:cd:3c:f9:18:
62:12:b4:ba:0e:70:2c:55:a1:40:45:f0:90:cf:e8:
59:96:8e:ff:49:cf:83:e0:e9:1b:a6:f0:a6:a7:f1:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:29:F9:69:85:DF:0E:9B:91:CA:B2:99:1F:B1:A6:97:6F:99:FB
X509v3 Authority Key Identifier:
keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:9e:c2:23:0e:36:a3:15:4b:7b:d0:1e:b4:d0:aa:20:7c:ca:
af:e8:01:60:05:a2:fd:f0:65:07:c9:68:22:35:7f:bc:39:26:
12:06:ea:2e:c8:72:c2:e7:d3:1c:6f:c2:7f:97:3c:71:00:73:
6e:2b:7f:4b:ad:56:7e:08:ec:97:5c:25:97:ae:f5:0d:3c:f5:
11:d2:2d:e4:15:59:6b:76:d8:3a:cd:a6:9b:94:b5:42:0a:6e:
26:58:2c:26:8d:34:75:6f:cd:ae:7f:ca:34:94:a2:80:d3:56:
26:ab:3e:93:e2:83:18:a8:cd:69:87:98:57:8d:ab:ad:d1:1e:
4e:eb:b6:e4:a1:b1:a3:79:5d:a8:3c:96:af:65:02:6b:6a:3c:
86:a1:f9:03:85:68:3e:c1:0c:98:d4:1e:6c:10:51:73:87:8e:
7c:63:18:e0:2d:af:16:8f:4a:89:e3:a4:69:70:52:2c:5c:cd:
1f:7c:8f:1a:fb:e5:7f:5f:aa:ec:25:de:69:53:62:75:54:20:
d7:25:00:55:16:c8:cc:96:b5:cf:68:5e:d3:c1:34:44:d1:15:
90:ea:99:33:aa:dc:b5:6a:18:4b:b0:82:02:29:93:f9:ca:6a:
58:db:d4:1b:6d:ff:a3:17:8e:85:6e:bc:24:b5:19:b3:ef:4b:
3d:95:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:00:41 2026 by rpki-client