
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
File: uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft (raw, json)
Hash identifier: gpwdi4QBIdf2aUp/hed4WVJxJa/BZEd9ufsmowGIdgM=
Subject key identifier: 49:91:B5:A2:C2:B3:39:CA:8A:F5:FC:C3:C6:7B:DC:A5:F9:FD:EC:67
Authority key identifier: B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
Certificate issuer: /CN=A91103CF/serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Certificate serial: 048D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
Manifest number: 0482
Signing time: Thu 24 Sep 2026 23:55:22 +0000
Manifest this update: Thu 24 Sep 2026 23:55:21 +0000
Manifest next update: Thu 01 Oct 2026 23:55:21 +0000
Files and hashes: 1: uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl (hash: a01yu+PqS69J7wXuQlQcSsGhZH4q6cUv344pBxC5GEQ=)
2: 931A51C07F5811EE82ECE456C4F9AE02.roa (hash: iqRn8MuwHOm1OeP7OiaBzMQDUZroez3UjhhvxuLDGhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl
rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91103CF, serialNumber=B8AD8D916CD9482B6DA55D307CE95C07A95B2F74
Validity
Not Before: Sep 24 23:55:21 2026 GMT
Not After : Oct 1 23:55:21 2026 GMT
Subject: CN=6ab5b86a-5dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:b9:9e:9e:d5:d1:66:07:fa:0a:25:8c:a4:
ef:66:bb:46:0d:5f:14:53:30:0f:11:a0:5e:48:b9:
ec:6b:e6:26:45:b5:ec:ed:20:23:f2:50:58:d5:09:
83:1f:5b:3b:7e:8f:c4:ea:36:b8:20:45:49:fe:01:
1b:df:a4:1e:ec:d1:93:fd:dc:f8:1f:be:d8:a3:ff:
2e:7c:ed:d8:1d:de:dc:19:0a:ad:68:61:7d:ca:f8:
be:36:5a:37:e8:7c:cf:4d:4d:4c:33:9f:bf:8a:9c:
71:a5:5e:41:1a:a0:64:58:34:26:ec:6c:2a:94:80:
eb:ec:ce:a8:8b:3b:5c:39:a4:d5:89:a8:39:93:d8:
8a:78:1d:5c:d3:74:f9:77:60:8c:59:ca:87:58:f1:
7d:01:18:23:07:ad:34:68:43:56:50:f1:5b:5c:d0:
b1:8c:23:a3:f0:19:e9:58:f1:0c:7a:35:77:0b:4e:
2d:c6:48:3b:98:70:f5:97:b8:28:68:27:89:93:0c:
c5:f6:74:24:4f:de:0a:62:ff:fc:0f:76:c9:aa:4a:
0c:87:80:e2:82:de:8c:83:30:ca:b4:8a:b1:d5:fe:
a8:87:94:50:89:3c:6f:34:8a:7f:68:21:70:26:50:
1e:39:ea:61:2e:52:40:b7:38:5c:cb:06:3b:f4:9a:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:B5:A2:C2:B3:39:CA:8A:F5:FC:C3:C6:7B:DC:A5:F9:FD:EC:67
X509v3 Authority Key Identifier:
keyid:B8:AD:8D:91:6C:D9:48:2B:6D:A5:5D:30:7C:E9:5C:07:A9:5B:2F:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK2NkWzZSCttpV0wfOlcB6lbL3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91103CF/17D6E4C2A68A11ECA9A63551C4F9AE02/uK2NkWzZSCttpV0wfOlcB6lbL3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:a1:0d:33:8a:b1:61:32:9a:81:f1:44:ba:3c:63:ce:c7:d9:
9b:0d:ca:37:31:ab:74:32:84:7f:59:16:26:31:93:c1:00:fd:
5b:72:56:e3:b7:cc:d7:5c:64:81:8a:97:88:d8:46:e4:95:22:
cb:5c:a8:1c:1a:53:c3:d6:3a:ea:a4:90:3c:26:12:4f:7f:c1:
c6:c0:1a:e0:38:9d:05:d1:b4:00:7e:42:d3:64:98:ca:e6:9e:
2e:37:60:ee:c3:61:bd:2e:2e:9a:ff:9f:a7:aa:40:d4:c1:21:
98:a8:78:2a:d4:8d:81:75:90:06:e3:c2:a0:ad:f5:cc:41:26:
35:e2:dd:f3:25:1d:37:fa:be:c2:26:b9:64:68:53:a3:ad:51:
4b:d0:fd:c7:9e:c1:25:98:69:bf:9a:1d:ad:d8:88:eb:e4:bd:
31:e5:ca:bf:36:ec:c6:cd:b4:e7:22:7d:66:63:ad:b4:78:b5:
cd:d7:a0:9b:b9:b3:44:4f:87:82:3f:d1:b2:56:f0:17:f6:bd:
14:26:53:db:94:c6:d6:43:e8:3a:b4:b0:6c:06:f4:63:1d:30:
a7:66:85:ba:ba:a0:ac:00:df:3a:68:cf:06:07:21:d3:03:3b:
34:64:39:e4:63:28:30:2b:9b:46:c6:a6:c6:64:d2:32:01:0f:
2f:63:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:17:49 2026 by rpki-client