
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
File: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft (raw, json)
Hash identifier: AHHDLr4CQvW3YmbW2HkShsd1X8pbjJXSWpb7Q8oeAIg=
Subject key identifier: 54:22:5F:63:ED:5B:02:24:AB:91:39:11:1E:D3:F1:30:32:FE:5B:5D
Authority key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
Certificate issuer: /CN=A91201F1/serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
Manifest number: 22
Signing time: Wed 25 Mar 2026 08:06:56 +0000
Manifest this update: Wed 25 Mar 2026 08:06:55 +0000
Manifest next update: Wed 01 Apr 2026 08:06:55 +0000
Files and hashes: 1: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl (hash: xEU/kRk05d283wzMxgkKwR8QQIRKaN3O6iyTQE5mWDw=)
2: D93132D6019811F1B6B26F14666F56BC.roa (hash: Kdauw0gJZUlOd9cLWCyN/Fmo1Dvhpdel9pLxOkR1eyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Validity
Not Before: Mar 25 08:06:55 2026 GMT
Not After : Apr 1 08:06:55 2026 GMT
Subject: CN=69c397a0-9cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:f9:0c:36:e6:8a:ed:4d:68:e3:d1:70:f4:
ee:2a:01:33:61:be:9c:65:b6:a2:4c:52:7a:9a:1d:
85:f2:e6:b0:f5:8a:35:b4:72:c6:78:9f:eb:9a:f8:
b2:d6:c6:f2:e4:a1:d4:f6:64:59:2e:f8:49:c4:c0:
79:7d:59:fd:00:79:0b:a7:29:02:e8:83:e6:10:b4:
eb:52:5d:17:59:f2:74:c9:bf:13:4d:8e:72:e2:16:
5a:e7:74:2a:eb:57:c7:8b:1c:3a:51:d4:f9:9b:70:
16:74:db:aa:a6:1e:06:01:43:47:01:f9:db:b9:61:
de:ae:2a:fc:52:0b:91:d5:a5:0b:32:bc:7f:14:9e:
7d:42:33:3d:a5:37:99:34:9f:e6:8e:73:88:2b:ed:
66:90:6d:e2:9b:9f:99:4e:be:88:ab:7f:b2:90:9a:
09:0d:84:b5:a8:b1:9e:1f:da:a1:28:f8:57:33:04:
0b:74:10:21:46:3f:1e:51:78:d3:ce:fb:58:68:0f:
85:4f:e0:90:7d:89:43:90:e5:db:73:19:60:70:57:
b0:a7:40:06:26:b1:d7:ed:02:cd:e0:49:41:1a:c2:
2b:10:67:a4:f7:3b:7d:f1:71:67:b7:70:b5:1a:93:
63:c3:42:9d:be:29:8d:4e:83:25:e0:41:ae:85:ac:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:5F:63:ED:5B:02:24:AB:91:39:11:1E:D3:F1:30:32:FE:5B:5D
X509v3 Authority Key Identifier:
keyid:51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:37:40:2e:80:ff:8d:31:92:8d:71:4a:ff:f2:3d:39:2e:78:
d0:09:44:f7:1c:57:52:a7:7d:77:c3:f5:00:28:c7:89:b9:35:
37:0a:6f:32:5f:cb:eb:f1:29:fe:38:07:fc:b1:3b:02:5a:21:
81:a2:99:e4:af:a9:0c:c5:18:7e:5d:97:99:07:5f:01:d6:57:
9a:65:e2:f8:5c:82:ec:8d:ff:d0:6d:85:28:4e:0f:38:57:91:
34:14:55:9d:dc:37:4e:ba:39:03:f8:06:56:2b:7c:74:2a:8e:
76:05:e0:a9:d9:3c:99:9d:b9:f1:bc:28:2c:cc:1c:5b:67:ac:
29:31:d0:cb:8d:eb:f6:b9:7a:79:8a:f4:bc:69:aa:f1:b4:f5:
f1:57:4e:cc:7f:5d:98:bb:0f:c1:b6:0f:36:6e:0f:f0:5d:aa:
9b:f9:23:2d:b0:af:d3:06:f6:33:5d:e5:dc:2a:1d:3c:37:cf:
50:2d:b2:3e:57:cb:70:4d:ae:da:03:c2:f0:f7:cf:36:b7:d7:
77:cb:81:45:c3:80:f0:02:46:be:96:ca:95:77:6f:bf:a4:de:
3d:be:d9:5a:6f:33:a0:80:fd:ee:f6:8f:3d:fd:d8:af:78:85:
a1:d8:dc:d3:5e:dc:18:7d:05:5d:b7:c1:79:e9:93:1e:85:e1:
80:13:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:53 2026 by rpki-client