
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json)
Hash identifier: Yu3QT67qEiCq7i2gwYLrm1nwLv50WoAVqcLq9mkBsyY=
Subject key identifier: CD:C2:B3:6B:50:03:77:E2:E6:C4:6B:76:EB:55:58:CF:FF:8A:93:72
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial: 092E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
Manifest number: 2146
Signing time: Wed 22 Jul 2026 16:35:53 +0000
Manifest this update: Wed 22 Jul 2026 16:35:52 +0000
Manifest next update: Wed 29 Jul 2026 16:35:52 +0000
Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: gCsp+o32XTDOuIB9itpOgk586gRY9NdF/FEcNQHER7M=)
2: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: PBLJA9vTnSqLFKqa8yTCLUG6Hs8vS1xLoBEx3PILni4=)
3: 172C2B96197711F0A993397AC4F9AE02.roa (hash: lb+BPDjdwrxY+mR7ffmWi7Y0mAsMf7sgTDdoH5P1Hcg=)
4: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: k8+d1DCJYguUEuKGeaVEQEsaVWfLEy0RXOjk8DQKTNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350 (0x92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Validity
Not Before: Jul 22 16:35:52 2026 GMT
Not After : Jul 29 16:35:52 2026 GMT
Subject: CN=6a60f169-28d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:94:00:d6:c3:28:a1:4f:20:59:e8:66:97:
3a:cb:f0:ec:00:4c:2e:51:c0:ad:8e:d9:39:0f:fd:
7b:a6:26:dd:65:49:6a:14:d8:69:c2:9c:19:ec:74:
f5:6a:00:83:db:f9:77:50:23:95:8a:b6:72:2c:58:
c6:18:be:b6:f9:76:03:4f:ea:43:57:45:1d:ae:aa:
df:99:ba:3f:67:f1:ae:4e:d8:0d:0d:e0:a8:e4:2f:
b8:6e:40:78:17:46:a1:d4:f0:fc:a5:52:1b:4b:09:
ec:48:a4:28:ab:57:e8:f8:f5:0e:36:4f:ce:98:cd:
45:98:31:dd:61:fc:55:c9:15:eb:c1:fe:87:9e:c9:
57:48:77:0b:3a:d1:3e:93:2c:90:78:02:73:82:d6:
24:e1:41:95:dd:47:83:aa:e3:c5:26:7e:d6:c6:72:
d0:2c:df:2f:ae:e0:14:34:bd:18:16:a7:4b:e4:71:
fb:05:a0:7c:f0:b8:f5:ba:9f:4d:70:0b:50:e9:39:
86:28:83:68:ea:29:d4:4d:3c:cd:f1:80:43:b7:b6:
4f:88:72:fb:22:0b:61:34:f7:c5:69:ae:82:c9:55:
be:2b:23:14:53:79:7c:24:05:78:3d:6d:7a:3b:0d:
d9:3a:fb:8d:55:7e:5c:5f:5b:c4:1d:91:7c:6d:a2:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:B3:6B:50:03:77:E2:E6:C4:6B:76:EB:55:58:CF:FF:8A:93:72
X509v3 Authority Key Identifier:
keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a9:d9:68:8d:67:35:f1:84:a3:ea:30:8e:04:70:ed:35:23:
76:8e:d5:e6:71:1b:c3:07:80:77:4b:3e:18:59:12:f9:76:3a:
15:ee:84:43:db:7a:7d:c1:d4:f9:42:8f:31:aa:76:fd:cd:59:
4e:c1:00:fa:d0:96:48:20:47:ee:d5:7e:89:11:01:62:6a:80:
a2:c3:ab:9f:61:b1:66:b2:87:8d:37:35:a9:45:f5:92:6f:bd:
aa:a2:b6:cf:13:81:58:a2:c0:e2:c1:a3:64:7d:12:91:27:45:
42:a8:f8:05:43:f2:f1:d3:7d:9f:fb:b6:4f:14:d7:da:81:df:
a5:ac:a9:5a:49:85:bd:0d:06:76:86:71:06:67:86:11:15:81:
04:5c:3d:ed:ca:58:c0:17:bd:2c:dd:3c:04:3d:bf:21:3d:0e:
d8:53:b3:7d:a0:47:6a:61:2f:e1:1e:f6:42:46:a5:e8:30:3a:
72:65:76:83:8d:72:11:d5:13:78:06:68:75:85:db:b9:b7:f9:
7c:dc:98:14:c1:47:87:cb:0c:0e:ed:c5:39:b8:68:26:91:77:
2b:10:b9:0c:09:b0:0b:8b:f8:70:d2:b2:0b:61:92:34:64:09:
a0:81:d5:cd:0c:e6:a2:d6:ea:cd:78:d9:a0:0a:77:2f:60:f5:
80:cc:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:06:53 2026 by rpki-client