
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft (raw, json)
Hash identifier: Dy8pOQMK8SaPe/y1dw1BN3LzAtI0uYtYLvv0z0C6GUM=
Subject key identifier: DB:DB:02:40:ED:8D:30:A7:D8:BA:E7:43:E9:F4:AE:17:EA:6C:2C:C4
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
Manifest number: 01CC
Signing time: Thu 03 Sep 2026 03:57:03 +0000
Manifest this update: Thu 03 Sep 2026 03:57:02 +0000
Manifest next update: Thu 10 Sep 2026 03:57:02 +0000
Files and hashes: 1: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl (hash: iXln3v0x69ttaLeEv2UfQQGxxUA1tsqr/KQFoFZgPAo=)
2: 99244E94FE0211EEB1F40344C4F9AE02.roa (hash: AhKlMEv2PuM9Bfvy73cb9Wj3F7xu3e3qXO027TlJaIs=)
3: 03BA6992ED7711EE9998FC11C4F9AE02.roa (hash: 4ltPjkJAsX+6JN5WYsYcJkqkB/QGduq8OB4qSY5kFTc=)
4: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (hash: mVKVwUNodXC2dILmuSgM+YaGamOWVYaoYaJr0bNv0L4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE959, serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Validity
Not Before: Sep 3 03:57:02 2026 GMT
Not After : Sep 10 03:57:02 2026 GMT
Subject: CN=6a98f00e-e481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:0a:55:1c:df:9c:07:d2:6a:0a:93:f2:a9:
df:90:32:0b:5a:ea:88:18:22:29:41:99:69:2d:ee:
ca:81:5e:ea:81:16:52:2b:3f:58:35:8a:6d:f4:42:
61:36:cd:8b:eb:59:be:e9:20:3e:c2:de:27:30:51:
9a:f1:ec:87:e1:b6:74:58:15:e0:08:b8:99:6a:60:
78:1e:d2:38:2c:54:db:be:ae:71:bb:ec:97:16:4b:
f5:70:92:0d:2c:9c:d9:8a:56:6a:f5:90:52:39:35:
87:53:ce:4e:74:33:c9:a9:81:14:84:7f:ed:e8:0d:
a5:fc:bf:22:3e:1d:e4:2f:24:67:22:4a:66:4c:9e:
58:af:94:af:9d:4e:4f:ff:63:aa:48:9e:50:41:b7:
1b:29:9e:07:c7:0f:e0:ba:9a:30:af:54:aa:10:ab:
85:7d:f7:ec:99:c2:66:66:f8:e8:cd:70:0a:c3:5c:
62:01:08:8e:66:34:21:7d:45:04:ac:bc:7f:d4:3f:
9a:5d:7a:7b:f1:2c:f5:94:6f:7a:9b:0e:1a:25:be:
a8:6b:a8:0e:54:5b:02:e1:7f:69:86:8e:0c:17:e3:
38:f7:a0:cf:c6:2b:c8:c6:7c:5c:4f:2b:67:d5:f1:
67:79:b4:28:59:cd:04:92:24:6f:58:f7:91:8d:ed:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DB:02:40:ED:8D:30:A7:D8:BA:E7:43:E9:F4:AE:17:EA:6C:2C:C4
X509v3 Authority Key Identifier:
keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:3e:f5:eb:ea:ef:d0:e2:25:01:f1:9d:6f:64:7e:67:21:fd:
ec:fd:e2:76:4a:2a:2e:01:08:ab:3b:58:40:79:23:37:2a:20:
b6:6c:f5:83:08:5e:27:28:b2:dd:06:70:bf:3a:ed:03:ca:58:
5e:8d:11:96:43:04:43:11:8a:2c:74:89:e5:c7:34:a5:48:22:
60:09:1a:74:2f:f8:54:0d:11:52:f1:ec:21:a2:ee:7a:48:53:
58:86:e2:ea:87:5b:88:8d:89:74:e2:75:27:56:d8:69:26:b4:
12:10:d4:05:fb:ce:37:f0:ca:9a:3c:dc:a9:80:44:9b:fd:8f:
ff:aa:83:df:d0:e3:25:75:28:78:8a:b6:51:1d:f6:ad:c0:35:
80:42:85:3d:66:de:c7:d1:b6:46:bb:bd:7b:3b:e2:1f:ac:20:
03:86:94:3e:5a:f9:b3:d5:74:2b:3c:ba:3b:5a:bf:5c:20:92:
6b:0c:e3:be:fa:75:09:d9:a5:93:9a:0e:a3:0a:72:9c:12:7a:
bd:84:55:3e:0e:33:fd:a2:17:f4:49:a1:97:2d:08:4e:bd:b1:
b0:fd:b8:4c:72:1e:67:8c:71:d5:d9:f7:78:27:2f:4c:3c:47:
3f:c8:fe:61:e6:18:c9:90:ad:18:3a:79:85:36:8d:28:80:3f:
fe:e1:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:40 2026 by rpki-client