
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
File: uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json)
Hash identifier: 3Aqc7j8w6dpuUYeTQs7rcLd+v43g+G7ZWzLtAlvrtOM=
Subject key identifier: C7:DE:06:0D:2E:D1:19:05:F8:45:78:C2:43:0D:70:EF:35:AA:A4:E5
Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Certificate issuer: /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Certificate serial: 040C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
Manifest number: 0405
Signing time: Fri 27 Mar 2026 00:13:16 +0000
Manifest this update: Fri 27 Mar 2026 00:13:16 +0000
Manifest next update: Fri 03 Apr 2026 00:13:16 +0000
Files and hashes: 1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: EzXgxF5mZTzzIsVR6BzQCnJaqHgRstP9KDniqK1ZkZA=)
2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: epKRw41KBWpJS0cS06bdYab65bSZPCjDLsCD9m8JyLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Validity
Not Before: Mar 27 00:13:16 2026 GMT
Not After : Apr 3 00:13:16 2026 GMT
Subject: CN=69c5cb9c-52b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:d7:cf:6f:41:9f:cd:ef:02:18:b4:f9:36:
dd:06:98:82:cf:fd:e0:79:79:38:d9:a8:28:5f:cf:
d3:6e:e3:38:ac:eb:07:84:0d:b5:9b:1c:e6:80:ea:
ae:32:6c:19:0f:fa:bd:dc:98:4a:4d:49:0d:10:63:
57:67:8d:02:1a:fc:0d:74:e9:bf:01:b3:2d:39:51:
88:25:e5:3d:5a:83:de:24:91:b6:fc:49:28:d5:c1:
ae:b2:b6:58:33:fa:df:8a:b2:80:00:76:8f:8a:a7:
48:17:b4:cb:76:8c:9b:bf:08:8d:fa:01:71:fa:50:
3a:7f:d8:76:f0:3a:33:45:54:a6:79:ab:54:46:8b:
49:89:05:ef:b4:04:e1:88:ab:25:dc:a0:0c:13:bf:
e3:10:5e:40:03:c5:a8:6d:a8:de:8c:ad:3b:4e:82:
12:50:f2:0a:ac:33:74:aa:c8:7a:b8:77:57:7e:b5:
81:a4:63:67:95:fd:ae:95:b9:17:9e:19:b8:33:04:
07:00:5d:a9:b6:28:31:e2:d9:c3:ea:70:75:80:9f:
0f:71:ac:db:c5:0a:7d:09:42:ce:2e:df:80:22:ce:
0b:f9:e6:e4:9e:2a:35:87:46:04:d9:01:47:60:17:
50:92:dc:6f:82:23:bb:ac:1c:eb:5c:47:db:8f:90:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DE:06:0D:2E:D1:19:05:F8:45:78:C2:43:0D:70:EF:35:AA:A4:E5
X509v3 Authority Key Identifier:
keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:e0:4d:36:33:e3:59:08:e7:da:31:90:ce:ae:17:16:0e:d8:
a3:e3:1b:92:d5:64:1a:e0:94:6e:49:4f:4b:bf:8e:72:12:98:
ac:1f:16:fa:ae:a6:db:2d:07:1b:6e:fa:36:ed:a6:99:8e:c8:
16:32:5e:c5:e6:a0:d6:39:ce:62:fc:3e:8a:93:6b:a9:da:19:
18:23:1c:c0:62:15:ee:a3:3d:31:23:7d:af:06:5e:4d:0a:ca:
4d:f5:8d:8f:96:17:2a:70:bf:e7:0e:8d:6a:e4:13:8d:39:d3:
1b:08:82:8f:e3:55:d3:b0:df:94:1a:41:c3:48:b8:87:8d:ef:
90:2b:ea:d8:ce:86:3f:89:f0:1e:66:42:d7:11:c7:1b:6e:3d:
e9:ce:e6:84:0f:99:63:aa:7a:fa:97:2a:72:2d:52:72:71:06:
ed:b1:85:54:d4:bc:9c:82:6e:a4:10:d0:07:c1:21:4c:dc:2b:
ce:35:91:52:5e:ac:4f:87:d8:1d:66:80:00:bb:08:f6:dc:c9:
ce:e3:e0:18:88:d5:d0:d7:e0:2e:0f:4f:95:6b:34:88:ab:12:
2f:a0:d4:cc:2e:b6:ac:fd:6b:ec:0f:98:d5:38:bf:22:74:75:
19:03:7a:da:da:fd:78:91:22:f5:3f:6f:07:69:3a:30:cc:84:
68:79:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:03:05 2026 by rpki-client