
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File: uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier: 9tOkIkCSu+E5/7EOsUbpmyecOyNlFaqAO43CuztkEyc=
Subject key identifier: 5D:59:93:48:12:F4:06:27:65:29:BD:BC:ED:DE:CE:42:1A:5B:29:7B
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial: 0863
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number: 083B
Signing time: Wed 20 May 2026 21:04:20 +0000
Manifest this update: Wed 20 May 2026 21:04:19 +0000
Manifest next update: Wed 27 May 2026 21:04:19 +0000
Files and hashes: 1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: yu4VPo8MbdVudTh1f3CAvFfJYcDoVPJo2AhE2qSxo/o=)
2: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: IQn111u6z6qLHojmECWDC2x1tW//DdSaFa0X28b5D0o=)
3: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: S+/631V5EbLVHMkrVq986tOSiufFr1O8QILyGk6Ead4=)
4: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: azgOtcYeMQ+jRphVpaVCAHBgs8PE9LLzlZ+oLtFAePc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Validity
Not Before: May 20 21:04:19 2026 GMT
Not After : May 27 21:04:19 2026 GMT
Subject: CN=6a0e21d3-9eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:b2:16:39:92:49:77:d0:9f:06:c5:64:ff:
87:80:b5:1e:a1:21:18:01:db:ae:2e:22:0b:d0:ed:
d6:e6:8b:dd:46:a4:2c:24:75:3a:6a:27:57:37:a3:
7e:8d:93:aa:e6:b1:2f:ec:5e:22:c5:9b:71:1f:ff:
7f:0b:7f:9b:e0:f3:99:36:d3:50:fe:54:8c:02:38:
eb:24:e9:4a:0d:3d:0f:5e:52:0f:e5:62:85:0a:5b:
fe:7c:46:c1:cd:aa:47:0a:7b:52:9f:b0:51:87:1c:
0a:90:08:23:af:c9:59:98:f5:57:e3:70:51:98:55:
fe:0f:45:6c:42:09:ac:99:7c:6b:e1:6e:4c:94:5b:
14:d7:6c:3c:ab:ba:29:71:78:36:1d:b4:60:ad:38:
af:ab:c5:fe:71:df:07:dc:8e:60:fc:57:b6:2b:22:
37:f6:dc:63:f0:15:d1:8c:bc:f9:2a:b8:03:da:e6:
b7:91:d9:67:a7:0b:49:75:25:69:29:2f:e7:86:17:
2f:63:8d:62:b2:a3:1c:23:d5:1c:e3:4d:74:6a:52:
af:fd:30:dc:97:5d:67:40:d5:d1:f4:25:9f:1b:06:
80:2c:54:8a:f7:3e:12:94:77:9e:e0:29:fc:f1:c4:
a4:4f:a3:b8:2c:3b:8b:44:1d:52:17:96:4f:62:b6:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:59:93:48:12:F4:06:27:65:29:BD:BC:ED:DE:CE:42:1A:5B:29:7B
X509v3 Authority Key Identifier:
keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:91:d6:f5:e0:d9:4a:c1:81:d3:3c:e7:be:7c:a2:e7:8c:
78:c0:2e:d9:90:b2:e9:f1:f1:a1:88:94:2f:0a:c6:fe:c1:fb:
ec:94:4c:60:f9:90:46:cb:d7:c8:2d:10:3b:c8:91:cc:4f:dd:
86:a8:36:2c:4c:17:1d:3d:73:d9:45:94:35:98:cb:d7:7a:86:
19:d1:de:f9:ec:98:0d:99:34:58:92:c5:87:13:30:ac:82:b9:
01:fa:f3:cd:d5:8a:4c:d4:ec:30:0d:0f:dd:45:83:c4:4a:64:
c1:02:71:c5:a6:4b:06:1d:2b:b3:dc:a4:47:9c:52:5c:5b:55:
4b:0e:61:a3:b7:57:7f:aa:e8:0d:aa:75:41:16:bf:57:9e:d7:
97:d6:9f:59:20:c6:c9:82:17:db:58:32:2d:db:8e:2f:06:89:
aa:24:2a:d6:44:5d:f7:8a:5d:90:63:18:d9:14:b6:68:58:34:
38:f7:b6:2f:c4:97:32:86:d0:bf:87:60:48:2e:9b:05:08:b7:
22:a8:6b:a1:c1:ae:0b:a1:f9:26:2a:ea:90:42:d1:d8:c4:a9:
41:77:25:bd:f1:f5:15:02:52:f0:e2:dd:10:c8:57:01:16:90:
b5:d5:c1:13:a0:f8:80:ba:d3:f3:9f:97:27:19:7c:1c:a8:2d:
a4:03:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:47 2026 by rpki-client