
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json)
Hash identifier: L/P0Mvw+Swdg/Zb5I/65e+JvVEiQl2H5Que4p+VIt/U=
Subject key identifier: 18:68:CC:D7:B1:51:69:3E:33:11:DD:3D:90:4E:73:02:07:DB:56:1C
Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7
Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
Certificate serial: 0A0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
Manifest number: 0A0D
Signing time: Sun 04 Oct 2026 19:48:27 +0000
Manifest this update: Sun 04 Oct 2026 19:48:27 +0000
Manifest next update: Sun 11 Oct 2026 19:48:27 +0000
Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: jsPJSV566n1M4b2UtDvopfjl0P8PmL2AqKdYEhgpKHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl
rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2573 (0xa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7
Validity
Not Before: Oct 4 19:48:27 2026 GMT
Not After : Oct 11 19:48:27 2026 GMT
Subject: CN=6ac2ad8b-2dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:b2:29:3a:66:ce:cf:8b:9b:08:26:c1:e2:
11:0d:6b:b2:94:65:cf:68:cb:ae:c4:f5:56:b7:e3:
a5:27:6b:37:f5:1c:0c:87:60:13:56:93:d0:95:12:
ce:82:9e:be:73:65:63:8e:fd:60:5c:2d:51:45:ef:
b6:c4:ec:a8:74:b4:89:dd:53:52:4c:40:ea:cb:b4:
b2:3f:a7:1c:88:d3:af:8d:8a:9f:eb:84:c2:8a:1c:
5c:50:85:31:3e:95:a9:de:ed:db:b2:12:7b:05:61:
c6:99:a2:81:7b:25:1f:96:d4:61:3d:d0:b4:df:2f:
75:e0:f7:1b:24:da:46:74:4e:bc:ea:d6:24:d2:eb:
7d:5a:58:01:23:7a:49:79:c3:c4:e6:4a:b5:2e:97:
d2:59:f0:a4:ee:35:50:83:5e:3c:85:04:4d:2a:9f:
19:24:50:99:93:0a:f8:69:4f:5b:70:d4:bb:51:ab:
cb:4c:2d:1a:ab:14:c3:c6:8d:b5:ba:19:3a:06:f4:
82:d6:58:f3:11:62:ac:d3:19:fb:64:dc:74:fd:60:
92:63:cf:be:21:da:f8:7a:9d:a1:f5:47:f2:8d:5a:
a7:3e:2f:af:b1:ff:75:26:cd:9e:b0:3f:f5:f8:8a:
b3:03:c4:26:b2:61:a5:37:62:03:2d:b3:16:1c:42:
ec:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:68:CC:D7:B1:51:69:3E:33:11:DD:3D:90:4E:73:02:07:DB:56:1C
X509v3 Authority Key Identifier:
keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:52:25:b7:4d:fe:e3:0b:87:a0:db:18:d8:1e:a1:85:60:
0b:82:ef:27:e1:09:ba:6a:6c:5c:17:90:3f:dd:ba:f1:be:18:
5a:c6:64:54:0b:12:f9:1e:46:3c:c5:c5:94:53:7d:5c:72:0e:
c5:fe:f6:b7:f4:3b:bd:02:52:cc:d5:ee:c9:18:20:71:79:e4:
a1:fb:c4:d6:88:2b:43:9a:c2:53:5c:6f:43:35:7f:5b:94:89:
02:b1:96:f2:ad:18:b5:f9:91:84:55:0a:f7:fd:b0:bf:76:56:
ba:f1:fe:f8:2c:21:41:e6:f7:51:98:25:2a:d1:9c:ae:0c:ff:
fc:11:15:fd:7e:d3:51:44:e2:16:9c:66:74:a5:46:42:b7:a2:
db:48:c2:c3:f5:63:b6:c5:cf:4c:90:dc:dc:2e:09:c6:73:09:
24:60:ce:a7:f6:89:11:9c:61:ae:7e:f4:5b:83:1a:0b:7c:ae:
f3:05:9b:5e:48:bf:23:5e:2f:5a:b2:26:27:fa:2e:7e:26:ac:
72:90:c9:48:e7:59:89:06:90:3e:fe:c6:79:44:2b:b4:6f:be:
ab:02:ed:21:20:6f:54:0c:16:04:78:c6:4a:c2:0e:58:2d:77:
9c:6a:de:b1:9e:a9:77:09:fe:b0:19:89:ad:0f:18:7c:47:36:
ba:1e:90:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE
QTUyOUU3QzcwHhcNMjYxMDA0MTk0ODI3WhcNMjYxMDExMTk0ODI3WjAYMRYwFAYD
VQQDEw02YWMyYWQ4Yi0yZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApnOyKTpmzs+LmwgmweIRDWuylGXPaMuuxPVWt+OlJ2s39RwMh2ATVpPQlRLO
gp6+c2Vjjv1gXC1RRe+2xOyodLSJ3VNSTEDqy7SyP6cciNOvjYqf64TCihxcUIUx
PpWp3u3bshJ7BWHGmaKBeyUfltRhPdC03y914PcbJNpGdE686tYk0ut9WlgBI3pJ
ecPE5kq1LpfSWfCk7jVQg148hQRNKp8ZJFCZkwr4aU9bcNS7UavLTC0aqxTDxo21
uhk6BvSC1ljzEWKs0xn7ZNx0/WCSY8++Idr4ep2h9UfyjVqnPi+vsf91Js2esD/1
+IqzA8QmsmGlN2IDLbMWHELs2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhozNex
UWk+MxHdPZBOcwIH21YcMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1
MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO
cmVXczNJTDAxWkxhVXA1OGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAApRSJbdN/uMLh6DbGNgeoYVgC4LvJ+EJumpsXBeQP9268b4YWsZkVAsS+R5G
PMXFlFN9XHIOxf72t/Q7vQJSzNXuyRggcXnkofvE1ogrQ5rCU1xvQzV/W5SJArGW
8q0YtfmRhFUK9/2wv3ZWuvH++CwhQeb3UZglKtGcrgz//BEV/X7TUUTiFpxmdKVG
Qrei20jCw/VjtsXPTJDc3C4JxnMJJGDOp/aJEZxhrn70W4MaC3yu8wWbXki/I14v
WrImJ/oufiascpDJSOdZiQaQPv7GeUQrtG++qwLtISBvVAwWBHjGSsIOWC13nGre
sZ6pdwn+sBmJrQ8YfEc2uh6QDA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:35:08 2026 by rpki-client