
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json)
Hash identifier: 4BpWdwBARMwh2SFIa2HbPk8BSkXJ/2XbuSPSCs8E/Ek=
Subject key identifier: 50:53:12:21:D0:67:4E:20:C6:C5:67:57:A2:14:9C:9A:1B:FE:77:F6
Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Certificate serial: 0D30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
Manifest number: 0D1B
Signing time: Sun 04 Oct 2026 18:24:22 +0000
Manifest this update: Sun 04 Oct 2026 18:24:21 +0000
Manifest next update: Sun 11 Oct 2026 18:24:21 +0000
Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: 8RoxnhwypMAPkO6xMNymlT6A9IH0S+lQA4YWKuej75s=)
2: AE7AAA289A2111F1968C5E625611F970.roa (hash: gDBQEQVUCY5T7erXr+BeD7gkL/4ClPU+FUbuxRfS0R4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3376 (0xd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Validity
Not Before: Oct 4 18:24:21 2026 GMT
Not After : Oct 11 18:24:21 2026 GMT
Subject: CN=6ac299d6-cbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:53:3a:34:ac:01:e8:e9:d2:24:f6:50:f0:
b0:e2:45:67:27:38:b7:aa:ec:9b:8b:7e:65:d3:21:
86:29:0e:a5:65:d3:66:74:9c:38:ef:85:e5:af:49:
9d:93:7c:fd:96:c6:d5:a2:e5:c5:86:83:24:86:cc:
31:9f:f8:95:c1:d5:d4:64:da:e0:0d:a0:8a:ef:ec:
be:3b:ba:15:d9:24:1c:44:e5:98:bf:c7:fa:c6:62:
19:67:2c:82:7b:d5:29:15:a8:aa:91:4e:6e:9b:10:
11:6c:36:69:81:7a:6f:50:45:d4:6a:d1:93:21:9c:
d2:97:1a:1b:74:95:1c:56:20:66:a7:0c:f2:a0:c4:
0c:53:28:0f:5e:e9:c1:d7:e5:05:d2:04:8e:b5:28:
ab:1e:11:d1:51:a4:21:bb:a1:fa:4e:c4:9b:25:43:
49:ca:8e:19:15:02:8a:c7:bd:aa:a3:51:84:f2:5c:
8f:06:88:15:c9:8d:56:1b:de:ce:2c:db:c3:af:eb:
6a:38:ee:14:01:b8:ef:93:7f:d0:4f:3f:f3:ea:68:
0d:f4:58:f4:b1:0f:a0:99:41:e4:66:62:09:1c:e8:
ad:c3:3c:cb:04:8a:cf:fc:c6:f0:02:fe:40:68:09:
3c:7b:b3:ca:b0:b3:3b:c9:df:93:e3:9d:86:d0:ba:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:12:21:D0:67:4E:20:C6:C5:67:57:A2:14:9C:9A:1B:FE:77:F6
X509v3 Authority Key Identifier:
keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:80:02:36:15:25:e2:82:dc:b1:1c:d8:c9:16:d9:74:e0:f3:
29:f9:00:9a:09:49:10:27:b9:6d:81:9b:70:83:54:75:a2:0b:
7f:2e:7a:9b:1f:73:fa:c4:1f:5c:21:f2:a7:fd:b2:b4:2c:0f:
d3:76:c1:e2:72:84:10:97:82:5e:e2:30:a5:a3:02:5a:8a:9a:
fd:07:0b:27:9b:53:c9:01:04:7c:ad:cc:ed:6d:7e:ee:2f:98:
d3:27:5a:ac:81:98:b8:03:e1:08:6f:7e:13:0d:07:22:bb:8f:
28:58:54:e9:bb:16:50:fd:de:d8:9e:f3:8a:b3:e6:5f:02:00:
40:8f:09:4c:05:09:38:ee:97:b3:52:e3:c9:f8:d5:f8:3c:07:
69:de:7f:3a:2f:60:c3:59:fc:3e:69:c6:61:7d:b4:75:3e:c1:
ce:b9:5f:72:da:d3:08:be:8b:0c:21:a5:75:2d:cf:f7:c9:09:
c1:e1:f9:74:c3:a4:78:a6:25:09:50:fd:c9:fb:13:87:75:71:
88:69:32:9b:17:47:cb:50:52:07:0a:f2:5d:c8:33:de:2e:fa:
ea:c8:db:8d:d9:d6:ba:db:38:60:74:22:b0:a0:0c:42:ca:c7:
c0:29:3c:af:6c:cf:a7:7e:4d:5e:ed:fd:8c:f5:14:b6:e5:4b:
df:ff:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:31:27 2026 by rpki-client