
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json)
Hash identifier: FHM6lVKuVpLUEds7ahDbSFCsidadbCdfCF3y3UOVBy4=
Subject key identifier: 9E:F9:A3:2E:B4:18:58:8F:F6:EB:4B:67:0C:DC:85:28:FF:5C:83:27
Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97
Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397
Certificate serial: 093C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
Manifest number: 0932
Signing time: Fri 02 Oct 2026 20:27:56 +0000
Manifest this update: Fri 02 Oct 2026 20:27:55 +0000
Manifest next update: Fri 09 Oct 2026 20:27:55 +0000
Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: tTld2OGjM8AvA3I/rqPIRI2gkAkYUHULDjwhF0YyZHY=)
2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: x4kWnFqqajZTHQ2ljg81sWUMtKfZzm4EBKfFyEjnDQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl
rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2364 (0x93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397
Validity
Not Before: Oct 2 20:27:55 2026 GMT
Not After : Oct 9 20:27:55 2026 GMT
Subject: CN=6ac013cb-ba48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:50:e1:24:fd:ef:c6:91:f1:c2:11:f3:04:
92:c3:b6:25:c1:10:0d:71:59:c2:2d:36:8a:d1:75:
5c:82:94:88:2f:99:36:c1:e3:01:9b:a5:83:72:e8:
88:68:3c:b0:f4:ec:97:d6:b4:c3:f4:f5:f9:6f:60:
bd:93:32:7f:81:c3:87:8b:b1:da:cc:c8:f6:c7:53:
53:8c:68:62:a4:29:d5:6f:8a:0c:28:96:c7:6c:5f:
d1:bf:11:ea:60:aa:28:c5:e8:6e:43:9b:b7:30:85:
07:93:56:0f:57:25:f5:c0:7b:d4:52:e1:bc:6e:7d:
36:6a:62:9c:ed:fe:6d:4b:d7:49:5a:7a:70:96:8c:
fe:c9:00:de:e0:e7:3f:23:d4:84:b5:8b:a7:bb:3c:
38:f4:9e:5e:91:b2:d8:4c:ff:14:b0:4e:79:0a:79:
af:17:a3:6f:3f:fc:f1:cd:c3:e4:cf:7c:29:4e:72:
50:ec:f8:41:9a:c4:8b:db:49:28:92:54:8f:e9:2b:
94:8a:0a:12:c4:97:d1:95:c6:a3:94:0e:f4:82:22:
bc:e3:8e:77:f0:2f:d9:7f:15:08:0a:b2:f9:d7:c1:
fb:39:1c:08:5d:97:2f:46:af:4e:a7:b0:9f:93:9f:
32:09:d1:9f:27:c6:85:70:1e:ef:3d:26:3c:2c:f9:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:A3:2E:B4:18:58:8F:F6:EB:4B:67:0C:DC:85:28:FF:5C:83:27
X509v3 Authority Key Identifier:
keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:c1:cb:8c:f5:74:13:b4:fd:30:6b:e0:96:80:67:b9:75:57:
90:f3:95:3c:81:ae:80:91:14:68:73:57:82:31:db:6d:41:41:
e4:86:cf:ed:fb:fd:3e:29:37:85:25:56:2c:62:fc:c8:ab:23:
d5:9d:43:76:ab:75:20:fb:42:90:8a:54:81:f9:1d:7f:b2:4c:
4e:b8:b4:3b:bf:7e:ac:13:4b:c5:7b:e3:3a:4f:39:98:db:01:
b3:ad:55:19:53:fd:f2:d2:40:17:c0:3a:b9:36:c9:3e:33:28:
c6:ee:0a:d3:de:80:a0:1b:2d:71:b8:37:78:e9:56:27:4b:be:
c8:66:aa:33:f7:b1:bd:a3:78:12:2f:dc:47:e5:44:b3:f2:cb:
5b:6b:41:e2:36:e8:25:16:ac:bd:d7:0e:c5:71:0c:f2:f6:8d:
28:e5:f8:eb:20:d5:53:3d:7b:96:3a:1a:6b:38:fd:f1:0e:ba:
1a:3f:43:e6:22:b5:5d:af:93:50:56:64:60:b8:56:cf:9d:77:
4a:04:de:86:44:65:a1:f0:ae:b6:e7:89:3e:00:07:b1:fa:6a:
6f:6a:e6:6a:ef:67:ce:a3:a9:a2:b2:a2:bd:01:a5:71:ae:b4:
c1:34:6e:b9:cd:65:bf:f5:de:76:c1:95:66:aa:ea:4e:19:e4:
da:e4:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:02 2026 by rpki-client