
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json)
Hash identifier: 5kK2OqQCQ43h09CJeDiNUycGDvfJmoQ5d4E97XCj1P4=
Subject key identifier: AC:C6:82:7F:A4:24:3C:DC:7F:57:12:05:86:D0:BF:EE:58:5D:D0:04
Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
Manifest number: 01B0
Signing time: Sun 11 Oct 2026 04:37:29 +0000
Manifest this update: Sun 11 Oct 2026 04:37:28 +0000
Manifest next update: Sun 18 Oct 2026 04:37:28 +0000
Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: UZq5HsFhh4rQ26kU2fKJnpH7JgU4Os/ABVZIkfbAAis=)
2: 24142938343C11EFA0165876C4F9AE02.roa (hash: Z0tUYsaLLhYR1loSuOnvSOEnvhlMPsdBTvhsEmSm5Ko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91774FB, serialNumber=5296BC801402C73909F591E19095F22465414324
Validity
Not Before: Oct 11 04:37:28 2026 GMT
Not After : Oct 18 04:37:28 2026 GMT
Subject: CN=6acb1288-3ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:a5:7d:d5:05:ad:1e:b5:af:3d:45:f1:0c:
f9:93:e7:e6:5f:dc:86:54:dd:e7:65:13:ca:bb:b9:
ba:b7:a6:64:72:50:91:79:52:9b:72:36:93:37:fc:
b0:cd:da:6c:6c:50:b5:86:f2:16:6b:1b:19:d5:af:
15:fe:97:bb:30:9a:02:2c:32:ae:c3:2f:3e:c7:3c:
a3:20:1f:4c:50:b4:da:75:ab:39:22:a3:77:4d:a2:
8a:bf:c5:c0:33:54:69:98:4f:07:62:f5:4e:db:52:
4a:a5:5e:a8:cd:de:b7:a1:1e:71:5a:a6:bd:f1:9d:
5f:0c:ae:34:86:fb:f6:51:91:71:17:0f:d7:f2:c7:
c0:5b:a9:ee:12:84:51:12:50:42:1e:5c:a7:83:a1:
e3:0d:57:66:34:a1:68:79:69:79:a2:b0:37:40:79:
e6:64:c7:da:ca:51:2c:75:29:4a:91:5a:b5:44:9f:
7c:bd:4e:c1:61:02:50:4b:54:56:ef:34:1f:3a:9b:
cd:65:4a:4c:d6:1a:96:23:af:6f:25:4c:72:a6:2b:
8a:5c:d7:7a:23:e1:8f:08:81:8b:39:f0:3c:18:02:
a4:7c:cd:66:24:9e:b7:74:21:5f:f6:d5:bf:cf:de:
60:1f:fe:01:4d:30:42:5c:13:98:ec:7c:ba:ed:9c:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:82:7F:A4:24:3C:DC:7F:57:12:05:86:D0:BF:EE:58:5D:D0:04
X509v3 Authority Key Identifier:
keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:98:18:8d:fa:92:e4:8e:58:db:7b:3f:f2:5b:b0:22:92:2e:
52:63:3f:92:0c:62:9b:b4:6e:4e:ce:bc:39:e7:cf:c5:35:31:
0c:96:c7:5e:81:b3:65:50:82:4f:8e:d7:ec:38:ba:4c:07:0b:
7b:27:1d:75:16:92:9e:ae:25:ff:3e:3f:d8:f9:ff:11:65:c9:
fe:74:3e:d8:43:b7:cf:85:a4:05:ca:0c:0a:ce:66:5c:fc:8e:
2e:fe:3b:a5:af:27:66:ce:53:f8:fa:5d:bb:dc:8d:4b:f7:8b:
ff:fd:c5:dc:8d:97:67:a2:c9:1b:fb:c7:9a:8b:79:7c:04:d5:
4f:f9:12:94:a7:55:cf:0f:61:82:b3:42:84:86:37:23:6b:e0:
14:f0:44:5e:dc:4a:df:d3:41:4e:23:7a:80:68:7f:9e:32:04:
d1:bb:db:1d:6a:93:6a:75:75:cd:06:40:88:b9:b6:fb:86:89:
71:08:42:fc:17:72:41:34:01:36:77:44:31:74:64:56:13:f7:
a5:51:dd:1e:32:38:81:2d:90:a2:5f:6c:4a:ea:c8:33:3e:f5:
3e:38:28:2f:ef:ea:10:7a:29:4e:d6:fa:a3:9b:55:06:09:c5:
0b:b7:45:92:be:37:ea:2e:9f:4b:a2:a8:4e:74:76:20:1b:f2:
e6:32:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:32:27 2026 by rpki-client