
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
File: UHRCEm0jxuW-SuMZdJsnbhcum1w.mft (raw, json)
Hash identifier: xT1eyzkcAhqCBF3VsQqU9ALEGQSyH6vyHqayWO6cF0I=
Subject key identifier: AE:37:8C:C8:33:95:09:D4:AD:7D:61:F8:BE:0A:88:A9:3C:3C:A6:E5
Authority key identifier: 50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C
Certificate issuer: /CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
Certificate serial: 0EE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
Manifest number: 0EE8
Signing time: Thu 26 Mar 2026 17:33:45 +0000
Manifest this update: Thu 26 Mar 2026 17:33:44 +0000
Manifest next update: Thu 02 Apr 2026 17:33:44 +0000
Files and hashes: 1: UHRCEm0jxuW-SuMZdJsnbhcum1w.crl (hash: +3quvZRnYm773nWrftYxjvfrjAgWANANpf2gPgXrKmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl
rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3816 (0xee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790ED, serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
Validity
Not Before: Mar 26 17:33:44 2026 GMT
Not After : Apr 2 17:33:44 2026 GMT
Subject: CN=69c56df8-f4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:88:c0:d0:93:5d:45:e8:86:f4:c7:2b:3f:
1d:b9:73:79:42:c4:05:70:fe:5e:b2:54:34:b0:1a:
58:9c:02:06:cb:d9:07:4c:cb:14:e3:70:47:ea:64:
45:d9:0b:ca:d5:47:92:74:b6:57:b7:a5:9d:34:f0:
d4:b0:17:65:2c:fa:39:4d:2c:62:fa:a9:53:2a:eb:
8a:2a:46:84:fb:a8:c6:21:b3:5a:51:a4:b9:84:a1:
a9:25:a5:9c:b5:4f:42:3c:b7:f5:b4:33:c2:d9:19:
84:1d:96:29:7a:a3:dc:07:2e:a2:28:ac:d9:4c:0c:
54:3b:61:b9:85:6a:56:cf:e3:8f:02:0a:3b:3c:e0:
bb:e4:8c:51:cf:c1:ce:54:3a:bf:64:bc:a6:d3:fb:
6d:94:47:a9:85:a8:bd:cd:e3:d3:e3:18:39:46:38:
8a:59:9f:47:ad:08:e7:9e:5a:29:af:31:13:a7:e6:
da:8c:4b:ca:d6:a3:2a:5b:29:5a:1e:72:55:8e:c7:
50:31:4e:c8:3a:99:f5:7f:6b:2e:53:4e:66:57:05:
27:a0:bc:17:f5:74:9b:f2:ec:43:3f:ad:10:60:e8:
e7:a3:4f:e3:c4:8c:95:04:98:8c:c8:4d:06:03:72:
d9:09:cb:ff:35:ea:c5:ed:85:33:05:ad:72:e0:af:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:37:8C:C8:33:95:09:D4:AD:7D:61:F8:BE:0A:88:A9:3C:3C:A6:E5
X509v3 Authority Key Identifier:
keyid:50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:42:af:8c:a8:d0:f1:85:c0:c4:cd:be:45:05:8e:16:2d:18:
63:f1:b9:80:2b:d5:16:ab:61:4a:e8:e6:b2:23:f4:74:06:90:
f0:56:14:02:1c:56:a9:2a:46:07:0f:45:9e:a5:d4:5f:06:0c:
92:e0:74:22:c6:13:ba:21:5a:2c:3d:68:50:58:21:96:54:c6:
55:10:d0:9b:59:74:56:7b:f0:98:d5:49:97:82:38:63:ab:32:
2b:1e:29:ec:20:a1:58:54:71:c5:8a:78:e7:18:c9:99:26:c8:
17:b4:a4:b0:8d:ba:db:ae:0d:5f:96:6d:0e:1e:dc:a8:90:11:
29:8a:7c:87:05:68:1b:4a:4b:3c:c1:79:1a:19:3a:9f:ae:93:
fc:8c:53:21:14:ef:0e:39:6d:32:ca:a7:35:e7:18:63:62:5f:
3e:f8:42:47:7b:3b:ad:9e:0a:6f:3f:91:df:23:3c:d8:4f:d5:
7b:c6:e5:ba:64:bb:aa:23:66:95:52:84:08:2c:e3:02:8e:61:
f4:79:c4:e6:10:8d:29:02:de:04:d6:aa:8f:43:1d:1f:3f:bd:
05:91:ec:9c:26:d3:64:c0:0d:3b:3d:2e:32:05:e8:1d:fe:4d:
0f:02:2e:f7:20:be:5f:fd:73:be:77:51:f0:f8:70:b4:45:12:
17:24:02:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:34:35 2026 by rpki-client