
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json)
Hash identifier: PYaEEpRGBXXE9MxmUhZPzvDy/MOYNwOvbA1JLrlLwns=
Subject key identifier: 32:ED:72:A3:EA:83:B0:C0:29:44:65:1F:82:A5:07:87:F0:05:C2:29
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
Manifest number: BC
Signing time: Wed 19 Aug 2026 07:38:37 +0000
Manifest this update: Wed 19 Aug 2026 07:38:37 +0000
Manifest next update: Wed 26 Aug 2026 07:38:37 +0000
Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: gHXvf5JF/OzjCCR4n4lq/8dIGBlGWIzWA+sR6W2gjLg=)
2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: VRMri+JmyP84ggb4uS0Bz/xwX6nfPL1abCeEWonYac4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Validity
Not Before: Aug 19 07:38:37 2026 GMT
Not After : Aug 26 07:38:37 2026 GMT
Subject: CN=6a855d7d-c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:55:72:bb:37:fb:14:96:f7:78:54:82:f9:
4d:77:a6:28:9b:04:b0:d8:f3:b4:70:0e:88:78:3b:
b6:a6:02:40:f2:a0:0b:af:57:f8:66:c1:65:da:f8:
ae:e9:41:3e:47:f5:dd:d4:91:b6:06:c3:43:47:cd:
38:d4:74:dd:dc:58:ee:25:54:72:af:f4:f3:66:4a:
f4:77:c6:15:00:ac:f3:a7:08:b4:10:55:2e:b4:b2:
b9:f9:61:35:fc:ce:bd:12:bb:af:3c:25:89:3a:64:
68:83:6d:39:ff:35:d9:5e:56:f0:39:f0:98:76:27:
96:f3:c1:69:9c:29:fa:90:07:67:aa:b7:63:74:40:
6c:c5:2d:95:6f:14:5b:ce:7e:03:0a:53:27:8b:4f:
c7:fe:8d:b8:bd:c0:7e:d6:ec:ba:62:3a:6a:34:02:
07:ba:77:53:e0:59:a2:63:16:34:4b:47:b9:d0:fa:
26:86:6d:a1:2f:aa:41:c6:3b:de:62:b0:7a:be:62:
49:39:88:13:f4:9d:31:22:1d:5c:4e:90:e9:3e:da:
86:4a:6e:74:50:0c:52:bb:10:e5:f1:a2:d1:c8:04:
88:f7:ff:2e:5c:d4:72:98:7d:03:0e:7d:2d:22:36:
a8:83:96:33:b5:53:6d:cb:a0:13:be:af:aa:fd:6d:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:ED:72:A3:EA:83:B0:C0:29:44:65:1F:82:A5:07:87:F0:05:C2:29
X509v3 Authority Key Identifier:
keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:5e:43:01:c9:e5:60:da:77:fd:95:a7:e8:f2:49:ac:1d:5b:
84:15:d4:60:74:42:64:10:c4:1e:73:25:36:1a:d4:ee:19:d4:
03:21:51:e0:35:45:f5:3c:be:1a:88:58:37:04:ac:2a:b8:00:
19:94:f8:2e:7f:fd:f7:8d:3a:59:3b:81:34:aa:1c:ce:f0:13:
7b:54:fe:6f:30:8e:94:cb:0d:68:8f:43:9f:ed:af:4e:56:04:
80:84:3a:08:2f:37:82:38:f9:af:61:77:87:34:0a:25:02:b1:
85:ee:6f:64:66:03:6f:7a:d4:c0:06:d6:63:bc:3d:53:2e:86:
d6:f0:ef:80:c6:ba:16:fd:86:2a:3e:8c:6f:33:a2:26:b2:30:
c5:57:f2:63:9a:c5:17:66:a2:88:03:a1:81:d6:ee:47:e6:49:
2f:dd:43:76:a9:75:72:b7:d1:b7:7e:6d:a7:f4:f8:ec:bf:ea:
b6:19:57:94:49:ee:5f:97:9c:fb:2c:6f:5c:76:fb:09:14:55:
a7:22:1c:02:cd:db:34:1f:6c:63:47:c1:02:60:2c:4c:ec:e1:
41:cb:30:f7:7d:7b:c8:50:ad:14:56:ab:ba:2e:c4:f0:65:18:
e3:dd:86:2c:45:c6:0a:b6:3e:e5:1d:0e:5c:7c:52:aa:19:ec:
83:95:74:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:40 2026 by rpki-client