
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier: OewzF+NbNmU3TFW/L2ImvqaBHDYtHNI9eCzkQ3ZwOF0=
Subject key identifier: A1:7F:19:6A:AF:0E:86:B9:6D:29:0C:EB:25:D0:AB:99:80:3F:C5:12
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial: 084D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number: 109B
Signing time: Tue 18 Aug 2026 21:18:26 +0000
Manifest this update: Tue 18 Aug 2026 21:18:25 +0000
Manifest next update: Tue 25 Aug 2026 21:18:25 +0000
Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: NNa7AY1VmdxzsgENhOQHaEYYuixUptnYEVV+xxJyiZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Validity
Not Before: Aug 18 21:18:25 2026 GMT
Not After : Aug 25 21:18:25 2026 GMT
Subject: CN=6a84cc22-41fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:06:4e:eb:95:7b:d4:64:0d:e5:f6:63:25:
af:a1:ae:36:32:89:f1:dc:df:69:cf:68:d3:0f:cc:
1c:34:12:f2:58:23:38:a6:5c:37:37:bf:ba:bd:67:
bc:32:a7:dc:52:d2:0c:c8:e0:00:22:6c:f7:5b:9c:
6a:e8:68:2d:c9:1c:32:5d:26:12:d0:84:27:bd:c9:
2b:31:78:0d:a8:ae:a0:57:d9:0b:63:39:5e:9f:a5:
f8:ce:a0:7a:3c:70:26:a2:8d:09:03:45:18:5c:f4:
81:4e:d5:ab:49:f7:63:00:5e:fe:51:ef:11:7c:c7:
99:7c:28:eb:a7:37:95:d6:e6:f9:f0:ca:80:b2:26:
22:d2:4a:6c:fa:cb:be:9e:a2:19:52:b2:33:72:e2:
a0:c3:50:65:ef:79:81:e1:ae:04:65:2a:ba:b4:70:
e9:41:58:aa:1f:1c:58:39:74:bf:3c:5b:c8:9f:ff:
07:63:3b:b1:2c:cd:dd:ab:e6:7d:37:4c:20:27:7a:
c4:60:21:9b:9a:12:b6:a9:f8:42:14:d9:f6:5d:ea:
04:85:ef:79:d7:8c:61:35:36:00:f6:d3:8a:39:9f:
16:69:09:48:d4:f9:79:d0:f2:6e:d1:a0:02:76:67:
78:15:4e:e5:39:8b:2a:0e:ed:f3:38:38:77:27:c6:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7F:19:6A:AF:0E:86:B9:6D:29:0C:EB:25:D0:AB:99:80:3F:C5:12
X509v3 Authority Key Identifier:
keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:41:fa:ca:65:d7:06:07:4d:40:1d:48:fe:ea:43:13:8d:62:
05:6d:b4:22:f1:4d:7a:e1:e6:c0:41:c5:fd:9e:91:bf:71:cc:
43:c2:81:3c:1f:5f:b5:59:52:df:45:9a:18:bb:85:be:1c:21:
44:9f:4d:2a:42:d1:10:cb:0a:e0:c3:31:6e:88:64:75:c5:22:
91:71:b3:69:09:5d:ec:07:83:4b:03:94:43:65:dc:ba:86:ae:
7a:62:fa:fe:d1:67:bb:d4:52:d1:df:c5:08:6a:2f:c6:90:99:
97:5c:bc:a4:4b:b1:88:4c:f8:c6:7b:00:95:20:13:cf:ab:c1:
e4:58:a9:30:c1:6f:d3:dd:4e:77:96:86:b6:f7:8b:22:db:b7:
f5:d2:f6:28:ee:5b:fa:b6:f7:7e:23:67:4e:67:b3:b8:7c:50:
f1:6e:32:e3:83:53:e9:67:14:8f:5a:44:b6:32:24:d6:fd:ba:
cb:00:04:05:37:01:2d:34:52:1a:05:6e:f9:b7:9f:ed:6e:64:
8f:f8:09:31:a5:9b:bb:69:3a:b7:5c:40:b7:e7:94:0d:5a:55:
37:c2:3f:97:bb:b5:10:43:f0:ca:ed:bb:f8:4b:2f:28:31:9b:
41:ec:89:b6:e0:41:72:1d:74:36:b6:ef:63:dc:08:f2:e2:50:
96:5f:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:40 2026 by rpki-client