
$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier: kj2mdrM/F61QqNXTy4ufRdog/Anooo/5WK0To3tJazQ=
Subject key identifier: DB:17:60:99:A3:FF:5F:06:AD:3B:D2:72:11:85:ED:65:F1:95:20:EE
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number: 0233
Signing time: Wed 25 Mar 2026 02:04:29 +0000
Manifest this update: Wed 25 Mar 2026 02:04:29 +0000
Manifest next update: Wed 01 Apr 2026 02:04:29 +0000
Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: Lmg6WVuiEn+uTisRVuKHrxu3myicMLHwicnMPQtCDKE=)
2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: /K4XbNVu4etnNSZ7BxaN1k4jj6OscZNd232IO+CgOm0=)
3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: KoscC2+CKPk9KEZZ95MIfhzhcgEnyjRIFFpZQcedXxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Validity
Not Before: Mar 25 02:04:29 2026 GMT
Not After : Apr 1 02:04:29 2026 GMT
Subject: CN=69c342ad-4260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bb:21:6e:9f:bc:52:77:8c:e8:f8:2b:9b:4f:
bf:db:7c:65:f6:4c:4c:39:bf:1d:69:0b:f9:41:6a:
cc:03:f0:10:ad:30:4c:36:51:46:b9:c1:0d:c5:4f:
30:8a:04:17:23:4f:52:1b:80:85:a7:69:1a:9f:c3:
82:2e:3e:50:5a:0d:41:3a:6d:5f:dc:d0:98:e4:f6:
03:c1:94:56:dd:18:f8:a4:98:65:b2:0d:86:40:00:
2f:e2:dc:4a:a7:2d:7b:94:62:f9:d3:6d:5c:79:47:
ff:d9:56:72:38:d3:4c:2a:d7:f4:75:ae:56:2c:5f:
de:54:b8:48:e1:0b:5e:ba:b7:ff:f2:46:19:c6:85:
45:2f:d0:df:23:7c:7f:07:df:bd:67:02:44:12:0f:
69:a9:7c:c4:9a:bb:88:a8:b7:bb:ea:99:e1:10:2d:
97:b6:19:82:d5:9a:43:a8:b1:26:be:ba:e6:3c:0a:
f4:8b:c9:91:56:f3:7c:b6:6c:e5:38:bf:9d:68:5f:
72:88:9c:52:bd:21:e1:96:0b:75:98:3d:db:d3:24:
49:69:03:be:32:b0:05:f1:0a:0e:8e:5f:b2:88:0f:
c5:e5:7b:b9:4d:14:9b:ad:ae:90:85:11:6b:d0:8d:
3c:20:62:24:d2:30:a4:68:a8:09:06:dc:c4:6d:d8:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:17:60:99:A3:FF:5F:06:AD:3B:D2:72:11:85:ED:65:F1:95:20:EE
X509v3 Authority Key Identifier:
keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:bf:f2:f8:59:c6:39:d9:58:f1:4a:8e:39:92:9b:27:dd:5d:
7a:2f:87:82:be:2a:05:9d:c5:56:a5:4f:87:d0:81:f1:12:0d:
26:89:59:fc:95:b4:eb:b4:89:bc:ef:54:3f:87:9c:3e:76:86:
4e:3a:7f:69:07:e0:5b:15:e2:80:23:12:c9:a4:88:bb:38:bf:
0f:c0:24:6a:75:75:00:6c:f2:2a:bf:ba:e9:05:3b:de:a6:b1:
48:e2:9f:12:f9:3b:c0:bc:6c:76:42:40:e9:f4:3b:46:3f:30:
56:a1:d4:6d:7e:1e:e7:0b:91:67:72:26:92:f3:8a:79:0c:e9:
28:ad:5c:9b:c7:3d:88:a5:73:f3:fc:3f:13:4b:cf:62:e8:a6:
f1:4a:a1:bd:01:66:50:0c:6d:ce:3a:e2:90:77:de:08:90:7c:
e5:f2:96:2f:8c:33:96:d2:dc:80:fd:02:a7:b7:c5:53:cc:3f:
be:e4:5b:17:7a:cc:30:bc:d9:ed:59:f0:02:7b:48:37:43:87:
5e:3b:4a:9a:3e:0a:88:e5:8f:55:98:0c:40:39:03:8a:d6:76:
38:51:80:6c:af:9a:38:f6:1f:d3:a2:53:a1:ac:03:81:b2:d9:
f9:1d:0a:c7:58:f1:a4:c0:cd:d1:a7:33:e7:eb:4d:f9:77:14:
42:0c:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:15 2026 by rpki-client