
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
File: uLVa9atmqP-naRykPaKmtJuiRUA.mft (raw, json)
Hash identifier: C53zxWX0oOLpG/d97MHpKToV1bY9hjxgOg7G+3671rc=
Subject key identifier: 3C:29:22:7D:96:E7:B1:E5:A9:4A:30:DC:01:6E:00:98:45:2A:F1:8A
Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
Certificate issuer: /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Certificate serial: 0CFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
Manifest number: 0CF3
Signing time: Tue 06 Oct 2026 18:32:27 +0000
Manifest this update: Tue 06 Oct 2026 18:32:27 +0000
Manifest next update: Tue 13 Oct 2026 18:32:27 +0000
Files and hashes: 1: uLVa9atmqP-naRykPaKmtJuiRUA.crl (hash: GD2F/U7prlO6u53C1oXRtl8+99dCtUxm6kGqi8e7meU=)
2: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (hash: 3OqTGjIgsHVDPUYnbHar2FaPmlN2uunJHFoJ3j2NcEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3325 (0xcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Validity
Not Before: Oct 6 18:32:27 2026 GMT
Not After : Oct 13 18:32:27 2026 GMT
Subject: CN=6ac53ebb-d5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:6c:17:e7:4a:76:ee:78:48:c6:22:bf:a4:
3c:dd:f4:d4:93:cc:6d:32:a1:00:b1:00:71:ea:4d:
36:7e:22:c4:4a:68:10:9f:9d:6b:8b:13:b8:41:8b:
a7:5d:03:b4:6c:19:15:91:a0:e1:ee:98:5f:db:d3:
35:bd:62:97:99:73:81:31:4d:15:dc:20:0c:9a:6b:
fe:1b:ae:b6:f6:b9:30:e9:1b:f3:01:59:e7:9a:c0:
7f:96:10:61:ac:45:a2:e6:6b:5e:c7:6e:0b:58:de:
40:6d:20:e4:12:69:39:91:aa:7d:e7:6b:a5:16:8f:
52:44:3d:cf:66:6c:60:c4:4e:2f:55:26:28:e9:a9:
62:0f:7a:3a:ea:8e:fd:9b:68:9a:7e:c3:cf:50:37:
1d:c5:cb:72:1e:97:84:c5:8d:a6:b7:fb:1b:b0:31:
8b:85:90:aa:6e:a5:ef:02:6d:bb:39:a7:c4:c3:70:
fe:78:bb:9c:a7:76:71:b0:79:22:9b:98:95:e6:9e:
9a:14:91:89:ca:87:59:c2:6c:34:61:28:82:5d:3f:
05:1b:d2:9a:e9:fc:8b:49:27:20:21:0a:4b:31:de:
01:e7:84:6b:3a:f3:84:22:21:ca:6a:5e:77:67:f2:
a2:26:b8:da:60:30:e3:cd:8b:a3:19:c7:bb:70:01:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:29:22:7D:96:E7:B1:E5:A9:4A:30:DC:01:6E:00:98:45:2A:F1:8A
X509v3 Authority Key Identifier:
keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b8:9d:40:50:5b:f0:76:63:a4:a8:07:59:91:52:0b:d3:b3:
7e:10:bb:ee:d7:fa:49:e9:0f:84:c9:ce:f5:c8:1d:7d:29:81:
9b:66:8e:b3:7a:ef:91:83:b6:73:b0:c0:98:a7:d3:20:c0:04:
47:f4:56:7f:e3:f1:eb:10:61:9a:fa:22:d1:14:5f:38:ea:1a:
3c:8f:77:e7:40:ae:e0:e0:83:70:6d:fc:96:05:32:d5:25:59:
6d:3a:b0:57:1f:c4:42:bd:0e:49:f8:20:24:3d:61:3d:d8:39:
ed:1e:f0:ac:97:8f:6a:bf:d7:d7:b6:e9:1c:7f:18:12:9c:69:
cc:ad:e6:6c:39:3c:c7:d1:a6:90:67:0e:2e:f4:a5:24:bd:ad:
e1:e5:f7:c9:1f:43:1a:d1:1b:3a:10:fc:02:93:bf:14:d0:0a:
29:17:e2:05:98:06:2a:1e:d1:1a:b0:5b:bf:51:47:81:15:fa:
6b:82:e6:1c:cd:83:ad:e3:37:0e:08:d7:7b:a2:f0:fe:b2:4b:
31:de:7e:b5:71:f3:2c:a1:50:e1:c8:0e:5a:1c:6f:92:dc:72:
f0:f9:18:cb:ac:4a:a4:3a:3b:3a:cb:71:96:db:7a:1a:3a:65:
71:69:87:10:00:73:b2:a8:e6:98:bd:7f:ab:f3:79:af:07:d9:
ab:eb:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:30:20 2026 by rpki-client