
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json)
Hash identifier: tjP2lddBokG/cKf2HqVXZUfYuHqFmp2OoEfh+epZMZU=
Subject key identifier: 70:9F:7C:C2:D8:DB:CC:22:DB:84:0E:47:7C:3B:C8:57:56:33:DE:9B
Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
Manifest number: B1
Signing time: Sun 03 May 2026 07:26:53 +0000
Manifest this update: Sun 03 May 2026 07:26:53 +0000
Manifest next update: Sun 10 May 2026 07:26:53 +0000
Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: CZcDlRmRyAVXe982q0VEY/UazNRHeRDQKJwOiLMxsNE=)
2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: p+/O/N2cnrVHm7O6YEqosl6vnHVBYYkRwfwZCmypB2U=)
3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: C4Pv7/ZcXpfnIfO2ZraIiYNBzqr9mEhRQSdvTyPYip4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl
rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Validity
Not Before: May 3 07:26:53 2026 GMT
Not After : May 10 07:26:53 2026 GMT
Subject: CN=69f6f8bd-5db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:9f:b5:09:92:7f:98:da:2c:a7:4b:59:1d:
2e:fa:0f:09:4e:d9:01:66:7d:66:51:a0:41:a7:e3:
0f:15:ff:26:6e:f5:b8:8f:f3:e0:6c:7d:14:48:58:
dd:c9:2f:d0:96:05:d7:15:25:f9:1e:41:f4:31:91:
ed:4c:a6:e5:da:74:4a:3d:d2:d1:a3:13:10:61:94:
ce:36:aa:b4:ed:54:65:4e:ae:ca:25:42:72:59:6c:
f1:b7:a0:c0:e8:4b:39:c1:75:7b:58:2c:d2:e9:fe:
2c:41:b4:1f:30:e2:3b:9f:3b:4f:eb:53:76:88:a4:
0c:00:50:31:ac:fb:c5:85:97:65:72:5e:32:11:e7:
ed:bc:96:35:3d:f6:ce:b6:98:aa:88:97:58:95:38:
6a:39:19:c6:b3:4d:88:22:7b:38:2c:f3:46:9b:2d:
72:3d:2d:2c:64:db:fd:e4:c3:92:cb:90:5f:9e:8b:
91:2e:8a:68:c6:b4:ce:1f:d1:61:77:b6:35:38:69:
e4:97:7f:9a:3c:64:47:ca:e5:ce:ce:4e:2a:5d:d3:
f4:15:cf:61:d4:b0:0e:41:49:15:fe:aa:06:de:78:
bb:a3:3d:37:9b:a0:bf:23:87:7e:0c:20:12:43:c8:
84:b0:d7:e1:48:f0:6e:7b:a5:c0:39:6f:c6:a2:34:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:7C:C2:D8:DB:CC:22:DB:84:0E:47:7C:3B:C8:57:56:33:DE:9B
X509v3 Authority Key Identifier:
keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:20:7d:58:05:a3:ef:c6:97:a4:93:09:06:de:4f:7d:d4:64:
f5:d1:47:14:58:7b:d4:45:dc:e0:fd:4c:90:fc:8a:c8:7a:d4:
e0:f9:ff:ab:09:2a:82:33:f8:2d:49:1f:29:aa:59:dc:6c:77:
a4:b9:77:b9:62:42:83:83:e1:17:4a:ca:df:f2:83:54:c7:b4:
34:bc:dc:d0:ce:ab:9c:e9:b2:b1:ba:38:d3:3c:7b:bc:06:15:
10:b8:e6:20:13:cc:99:f5:11:9d:84:61:b6:54:8f:0d:6e:a6:
b7:e0:98:85:81:f6:90:7a:b8:06:a4:3c:d3:fc:51:86:86:13:
6e:4a:5a:ca:a6:53:23:62:fa:7c:35:c4:39:ab:dd:31:4f:ce:
79:60:7d:7e:cd:46:91:f3:bf:82:17:04:cf:68:6b:19:52:23:
7f:37:2d:ed:95:22:23:e3:ec:49:0b:72:4f:d3:92:c0:27:d6:
10:22:5a:af:35:2b:b5:87:f0:05:71:db:9e:61:a0:0c:d1:9f:
81:7d:d2:e4:85:a9:25:03:55:c2:ed:15:5d:fa:53:86:73:e4:
13:ae:34:bc:9a:63:d7:70:69:76:35:b8:bf:0d:75:be:b9:c2:
55:c7:87:33:52:1f:ad:db:ab:ee:9d:22:a1:3c:c5:48:2e:b2:
d4:6b:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:16:45 2026 by rpki-client