
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
File: uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft (raw, json)
Hash identifier: UF5/HQ36/D9s7Sw2xIby8mMEXbcRF3adS92kPU+zwFg=
Subject key identifier: 09:27:58:D4:A9:44:B7:09:B7:23:AF:40:FC:24:79:B5:C1:BD:56:88
Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
Certificate issuer: /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
Manifest number: 87
Signing time: Tue 03 Mar 2026 02:57:03 +0000
Manifest this update: Tue 03 Mar 2026 02:57:02 +0000
Manifest next update: Tue 10 Mar 2026 02:57:02 +0000
Files and hashes: 1: uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl (hash: 2usasbgIf9kGMZy/YktmFm+FsjKG8MclW4CIbUj3hcM=)
2: 7CC500A86DEC11F0BD1BF429C4F9AE02.roa (hash: ZaIebFS4/8vVvAF/zkH7WP2QeQVx2pb6rObiWL8nH0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 02:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Validity
Not Before: Mar 3 02:57:02 2026 GMT
Not After : Mar 10 02:57:02 2026 GMT
Subject: CN=69a64dfe-db40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:29:47:d4:23:5d:00:33:8e:7a:ea:34:e9:b2:
ed:9c:8b:66:ff:a1:52:75:db:33:31:28:19:fe:6c:
79:d6:dd:d1:e4:ce:ac:d4:84:31:91:d9:de:a9:3d:
f9:11:4f:cb:1b:ee:f3:60:15:a7:b9:a7:b5:96:4d:
bf:05:ae:da:27:02:a5:ca:29:04:a3:ec:27:b7:97:
7a:c8:ec:ac:76:bc:d9:73:07:24:04:bd:f1:84:c5:
19:50:52:5f:6a:57:31:51:13:6a:1f:e2:1e:a8:4a:
87:87:a3:4d:c8:a1:d6:88:e8:dc:81:81:af:43:2f:
58:d7:02:c1:66:40:6d:5e:48:d7:a4:6a:ca:4e:75:
76:9f:7e:dc:e0:01:69:89:ef:af:07:59:55:3a:b0:
0f:35:95:15:57:72:dd:7c:a8:8a:ef:44:7b:3c:23:
fe:28:ff:a9:35:c0:b8:48:58:ac:e4:d2:07:a8:c2:
33:5b:a6:dd:c7:34:53:f3:49:a3:c8:af:8c:83:9c:
fd:8b:23:de:29:20:be:8c:bb:5f:57:fb:03:55:d6:
27:83:ce:34:d4:4a:7d:e2:7d:6f:9e:c0:69:99:7b:
e6:c7:4d:0f:da:b2:62:a8:da:4e:e5:21:d1:94:cc:
56:2d:23:e9:bf:a0:14:0f:3f:2c:30:91:9e:14:44:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:27:58:D4:A9:44:B7:09:B7:23:AF:40:FC:24:79:B5:C1:BD:56:88
X509v3 Authority Key Identifier:
keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:4b:81:b2:0e:ec:43:bd:6c:9c:e2:cc:32:16:bb:5b:a7:55:
78:2a:2c:1f:74:53:5d:bd:48:fa:0a:d8:a1:65:6b:07:ac:5c:
5a:fe:50:2c:db:0b:fb:fb:0a:f1:13:08:03:47:df:97:5f:4a:
c0:f0:0f:39:9c:ee:2d:b8:26:a3:a6:b5:59:45:d8:78:a5:38:
0d:00:ad:8b:de:59:ae:5a:25:28:c6:80:77:06:89:ae:57:e1:
bc:e5:45:19:90:22:44:88:78:1d:c6:11:72:86:ec:51:5d:36:
4b:86:1e:e9:3d:c8:e4:03:39:d4:b7:29:a8:f9:48:e0:e9:d2:
13:8d:c4:97:6e:58:30:05:57:8d:58:10:b4:07:8b:6e:a2:36:
56:36:97:9a:89:4f:6f:1c:e7:de:7f:43:14:81:56:d8:2b:5f:
3c:c6:c5:e2:8a:de:b2:43:01:0c:f6:c5:23:ee:10:d3:f9:3a:
75:44:4f:56:5f:ec:22:49:14:4f:a0:ac:ac:3f:30:60:db:e3:
97:e5:ed:06:24:af:d3:bb:5e:34:78:3a:da:e1:c6:1c:da:77:
96:cd:28:26:16:1f:4c:07:1b:cb:13:67:17:9c:ee:54:a0:c3:
40:57:eb:a9:9a:91:c2:e5:b3:90:ef:5f:15:58:83:d8:82:74:
d4:3e:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:43 2026 by rpki-client