
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json)
Hash identifier: iLHxgYO0aPXjnLJXug8ZQem3ZRO0clWwp1J/I32qRVc=
Subject key identifier: FA:05:C5:78:72:76:95:50:8A:1A:FB:A9:67:11:E2:26:68:47:1A:EA
Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Certificate serial: 0F12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
Manifest number: 0F07
Signing time: Wed 20 May 2026 17:37:28 +0000
Manifest this update: Wed 20 May 2026 17:37:27 +0000
Manifest next update: Wed 27 May 2026 17:37:27 +0000
Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: twojRWQo/hCdmNL1N8D6bWyaNCCoM7c6Ft2hBbcRR0k=)
2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: n9GvWb/+SrjUGxKELdg2q8EQPS5cGnIEX61vaZ7cU2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3858 (0xf12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Validity
Not Before: May 20 17:37:27 2026 GMT
Not After : May 27 17:37:27 2026 GMT
Subject: CN=6a0df158-c663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:43:c6:6c:80:70:8a:55:32:a6:79:40:1d:
84:2e:13:03:57:a3:a3:0b:bd:09:54:40:9f:77:9b:
7c:e1:72:2d:fa:87:89:aa:23:cd:fe:c7:b3:dc:d5:
81:74:a9:38:ed:1f:9d:08:d9:1e:e6:a6:a1:1f:f6:
3a:9b:99:cd:74:b7:a1:2f:ea:82:2a:06:25:9f:25:
32:2d:4f:96:2b:0b:18:2c:e7:45:8a:89:1c:6d:1e:
fa:5a:d4:ed:98:09:18:ca:b5:59:15:7c:8e:9f:ff:
70:6a:d1:88:54:19:d6:17:47:04:e5:c2:6f:d8:27:
4b:5e:e8:50:0a:b5:72:1e:3b:29:89:b8:ab:10:87:
2e:a0:ff:e6:31:d2:b3:8f:bb:bf:a5:e0:78:ca:31:
51:32:43:18:70:f9:39:66:61:ee:da:f6:63:b9:54:
f3:a0:84:19:a2:b2:06:e1:a4:f0:d3:25:d4:3a:a1:
aa:f0:40:79:2e:3a:9d:ff:dd:a1:4c:70:94:6e:9b:
aa:84:7e:2c:48:5b:ee:22:fa:72:e0:88:b9:86:36:
f4:33:62:aa:ef:ae:44:56:62:82:ad:72:00:21:c2:
78:d4:8c:73:02:ef:f6:dc:c9:7a:65:5e:dd:bb:73:
75:61:2a:99:3f:33:d4:ed:04:61:77:f2:d8:b3:e0:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:C5:78:72:76:95:50:8A:1A:FB:A9:67:11:E2:26:68:47:1A:EA
X509v3 Authority Key Identifier:
keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:b3:a1:fa:1e:2e:78:c4:86:a8:48:d0:8b:c8:e9:70:54:
72:c0:ff:b9:6a:c6:4f:96:7b:6b:88:25:af:14:e3:c0:07:f5:
2e:c8:23:03:32:75:17:ea:82:1e:14:d2:f7:db:76:3d:55:2e:
dd:0e:84:a7:6f:00:87:a0:62:ff:5c:40:08:9b:46:93:9e:1d:
5b:82:6c:a0:6d:68:d2:b5:b0:9d:b1:7b:00:50:e0:57:61:8e:
51:9e:d2:d6:dd:27:b3:b8:52:51:ee:e5:b2:30:3d:c0:48:0a:
7d:5e:0a:2b:1b:17:61:37:bb:4c:e3:59:49:9c:ad:8d:cf:f7:
ea:a4:f4:e8:9b:3b:20:c0:59:e5:01:63:37:dd:bd:23:de:3a:
3b:38:e5:d6:9e:4a:0a:35:ba:a3:a2:82:21:8a:50:e7:fd:dd:
cd:92:ec:c4:05:8f:59:4c:24:7d:11:2b:ba:71:d3:2c:11:24:
3f:3d:6b:ab:77:5f:77:bf:7e:39:f7:87:c4:f5:de:57:bd:49:
b0:66:28:81:af:ee:02:de:ef:29:ea:f7:9e:85:6c:c1:f1:87:
0f:aa:d4:9b:48:e9:5a:cd:91:cf:14:f8:53:cb:7e:eb:25:19:
54:46:d2:46:a4:2f:2d:70:61:c0:50:2d:a3:2d:e3:0d:9e:56:
fa:00:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:35 2026 by rpki-client