
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json)
Hash identifier: 9fxGGaNu1Hco97hC4TEFhNhbROVv4JFW1wxxCns9Ggo=
Subject key identifier: 91:0F:B6:91:FF:5C:E7:04:CF:C2:7E:77:78:AA:EA:A1:F2:29:9A:6D
Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
Manifest number: 01F7
Signing time: Thu 21 May 2026 03:15:43 +0000
Manifest this update: Thu 21 May 2026 03:15:42 +0000
Manifest next update: Thu 28 May 2026 03:15:42 +0000
Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: /W2ZgDqtb1ZgVecIYXrHX2vIz/ehtRamypMVabzUY3I=)
2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: iJfAgLJy+g3Oehdiw4mUqVHSdHvhiECeSkPYC9Jkfxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Validity
Not Before: May 21 03:15:42 2026 GMT
Not After : May 28 03:15:42 2026 GMT
Subject: CN=6a0e78df-869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:33:9d:5f:28:ec:c2:08:a1:dd:ed:54:4c:
4c:77:85:95:a0:e9:bd:ef:82:e9:42:2b:9f:ba:39:
cb:0a:40:cc:2d:fd:f6:35:b4:bf:d6:09:75:b7:47:
20:3c:1a:fe:6f:d3:b8:63:e7:db:22:d4:4e:9c:3f:
a7:24:b8:f5:c1:38:60:9d:f7:fb:7b:2e:0f:68:55:
08:06:96:04:51:f7:31:42:98:d3:0d:6e:ae:ef:d1:
20:94:59:41:90:47:14:c1:b8:4f:16:8a:e8:6f:f1:
df:95:c6:43:54:b7:d1:f7:96:9b:ec:b7:5b:96:93:
0b:bd:28:8e:3f:52:20:0f:45:f4:ce:78:38:e9:06:
57:dc:86:6f:56:87:72:b5:ff:c9:9d:b7:36:ed:b8:
6e:4a:bf:2f:a5:de:9e:c2:64:12:49:48:77:64:84:
43:1e:8b:a6:fd:89:87:c3:c5:7f:85:5c:14:2c:ba:
49:aa:b0:5c:91:f4:86:c5:a4:bc:8d:d2:3e:3a:50:
21:03:c8:e7:10:76:37:9e:a1:4d:5c:d3:de:69:de:
d3:e2:ee:45:49:ce:3c:74:24:b6:ce:ba:04:55:d1:
65:0b:c7:bd:a7:0f:ec:54:da:33:71:1d:f8:02:64:
93:08:54:3e:08:70:fa:ea:ca:35:56:bf:f2:e4:c0:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:B6:91:FF:5C:E7:04:CF:C2:7E:77:78:AA:EA:A1:F2:29:9A:6D
X509v3 Authority Key Identifier:
keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bd:2d:7d:24:76:93:82:c4:7b:31:ac:5f:38:6d:8f:6d:b2:
7e:49:65:7f:19:3b:45:26:7c:dd:9b:c6:a7:94:1b:4d:1b:43:
86:94:a3:de:61:a3:ee:00:03:d0:64:9e:c6:4d:f2:59:14:ea:
74:94:03:47:c2:86:f2:00:d5:92:65:40:f3:69:bd:71:b6:b5:
e8:63:71:71:b5:f0:40:9f:9b:a3:4e:48:00:ac:4c:26:30:f7:
2b:c7:3c:8c:60:96:d9:d1:33:e6:5f:0f:be:e5:67:fa:65:a3:
3a:b6:28:26:1f:10:10:70:19:a8:05:80:d1:cf:41:74:01:18:
0b:39:ca:79:90:5e:c4:7d:ca:df:90:be:67:3c:ab:d0:53:69:
78:80:3f:d5:42:9a:b0:c0:5d:29:62:93:c1:b8:e4:19:a2:09:
30:f2:83:31:a3:1f:ad:c9:5c:65:b5:8d:50:c3:c8:29:e0:b7:
8f:e7:b6:c1:11:cf:83:6c:36:90:c1:2b:07:dc:5c:31:b9:d1:
a7:2e:98:d5:b2:ad:93:65:cd:b1:23:4b:e7:24:21:ca:1f:89:
18:50:b8:44:4a:48:4a:47:a2:ee:8c:3e:b7:2f:84:9d:1f:26:
9f:a0:83:e5:d0:e7:59:46:b5:f1:67:de:5d:c1:cb:75:d6:15:
51:d1:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:18 2026 by rpki-client