
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier: sR2ZIG2688Cm2+iuWM2sJDq8PGWgTf3xvoonafoLa6o=
Subject key identifier: B3:3B:8A:93:8D:01:E9:E8:0B:2D:14:3C:FF:A9:8F:D6:CB:5A:F7:C9
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial: 0BD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number: 0BC9
Signing time: Thu 08 Oct 2026 19:07:55 +0000
Manifest this update: Thu 08 Oct 2026 19:07:54 +0000
Manifest next update: Thu 15 Oct 2026 19:07:54 +0000
Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: xUGRJXW+rmjmQuwpf5pF33NEO0+SFUAsloB9iQa0l8s=)
2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Cslgx6TP1vwc2kxEUex+I7Q7tERor+Z4yAGOK7JvT0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3027 (0xbd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Validity
Not Before: Oct 8 19:07:54 2026 GMT
Not After : Oct 15 19:07:54 2026 GMT
Subject: CN=6ac7ea0b-a46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:59:76:48:4d:91:94:ed:a2:94:89:70:5d:
2a:2d:d3:88:1a:6b:a5:9a:95:77:f8:5a:37:7f:bc:
b7:bd:53:70:88:6e:1e:f8:40:a6:c6:a3:3d:9c:2d:
17:9f:4b:ac:c1:f2:33:e4:c8:21:51:15:a5:bd:1a:
73:18:6f:40:d2:ef:31:d1:df:88:f3:30:8b:ac:2c:
fc:2c:da:ea:b4:d3:39:f6:f6:e1:5d:c5:ac:93:97:
45:9d:0e:ab:75:e6:b9:c0:4b:d8:a7:33:26:86:f9:
a5:2b:73:b0:af:1d:ae:4f:f9:76:57:84:24:9c:0d:
e9:c7:58:f2:f2:c3:12:14:65:2a:b9:d4:29:a7:3d:
3d:83:e1:99:fd:e6:28:1e:a6:d0:51:40:f6:58:07:
6b:e7:7c:e1:de:ec:12:e9:2d:e5:b2:e8:8c:3b:73:
28:5b:c0:f0:70:79:6a:25:9f:c4:5e:c7:ec:18:71:
4d:ff:d4:c1:34:99:92:80:04:4b:ad:9c:31:c8:a4:
ad:28:28:0f:b0:eb:b1:d3:5d:f1:3a:ba:97:af:8a:
3b:4b:88:85:10:4e:b9:7d:fe:72:35:c5:4e:25:3d:
21:c0:24:c3:34:b2:9b:d1:5b:ca:ed:c1:fe:df:33:
b0:cc:fe:6f:43:2b:3d:31:5a:55:62:0b:ef:fb:44:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3B:8A:93:8D:01:E9:E8:0B:2D:14:3C:FF:A9:8F:D6:CB:5A:F7:C9
X509v3 Authority Key Identifier:
keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:da:b9:dc:47:34:4a:d0:ef:2d:d9:0d:03:10:ac:d0:0e:ee:
5c:27:40:a1:6e:8e:31:ad:b4:a2:14:77:c2:56:b1:bf:b4:05:
3e:3b:bc:e4:64:31:d4:96:1d:d2:71:96:92:ab:bd:0f:40:b0:
cb:33:75:77:89:5e:80:34:a1:be:fc:6b:56:6d:1e:83:2b:39:
9e:e5:7d:52:55:4c:7e:97:12:97:83:e4:67:7f:c6:a0:0c:5d:
b7:a5:17:0a:d4:f6:8b:f6:39:4d:60:f9:5c:ee:d4:72:5f:79:
72:d6:8d:15:49:23:14:8f:f6:a2:94:d7:f5:d1:09:9b:7c:95:
44:63:57:ab:49:af:72:9d:0e:74:e4:11:a4:c6:3b:4e:0c:70:
e2:4a:ad:8d:a1:e6:27:48:63:b7:7b:2e:5d:e0:96:c8:d9:94:
40:d9:8c:e9:1c:4b:fb:5b:9a:43:26:c6:eb:6a:39:33:3f:9c:
9c:60:19:65:a5:24:97:c1:68:e6:13:db:c2:da:34:46:17:cb:
8e:4b:2e:86:84:d9:26:d0:f1:26:85:e8:4b:2f:37:32:9e:80:
9d:06:ba:44:82:78:57:23:05:8e:0f:f7:fd:44:42:76:26:1d:
a3:d5:bf:63:db:87:29:7e:5c:1d:8d:fe:79:60:8c:05:d5:dc:
60:53:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:49:43 2026 by rpki-client