
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json)
Hash identifier: 914mrzrHPgft3htbJFb+eQuK8+tSpK9UummQdiX6h5k=
Subject key identifier: C5:27:3A:8D:7A:7F:18:5C:7F:59:76:0A:5C:BE:D7:23:AA:AE:13:6E
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 0889
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
Manifest number: 0874
Signing time: Tue 12 May 2026 20:49:17 +0000
Manifest this update: Tue 12 May 2026 20:49:16 +0000
Manifest next update: Tue 19 May 2026 20:49:16 +0000
Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: fsWgBjPkGTckAWKpGbg5LHUVJr8xiWupkRE6VUMUbUc=)
2: 3FA536CA38EE11F1A0707106A9833773.roa (hash: mUiOI8EcFxg0okwr3CRT18uhCpuSgMbB1bMOukLtLrw=)
3: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (hash: pKtga/er1/h2JIAsQEMOIlundhuuAOO6gPVgXaRRQH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: May 12 20:49:16 2026 GMT
Not After : May 19 20:49:16 2026 GMT
Subject: CN=6a03924d-304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:09:3b:5e:2c:60:32:1e:90:c3:4f:db:17:
03:c5:71:12:f6:a7:d1:28:50:aa:4b:a1:a7:56:95:
9e:10:bf:40:76:14:c8:22:4a:6e:5b:64:2f:9e:49:
6e:0d:8f:c5:62:84:98:24:7d:5f:bb:90:a7:c1:b9:
c4:80:eb:7b:15:f5:5b:60:18:32:01:13:49:36:67:
41:6d:9a:7c:00:5b:b2:5e:04:b6:b8:e9:08:3a:75:
c0:65:78:f8:3a:3a:e2:70:b5:10:d4:05:45:b8:87:
d8:f7:f5:d2:d6:b3:b2:55:c6:28:00:1e:dd:37:c7:
99:8f:60:4b:36:ee:40:33:81:26:8b:17:65:f4:8e:
0d:36:72:39:c4:1e:7c:41:20:24:69:a8:f0:93:b2:
cc:62:3f:af:e2:d3:f0:cc:a6:24:0b:87:ba:74:14:
17:b3:df:fe:06:6a:b2:7c:eb:89:7d:cc:3c:00:60:
4f:c2:60:b0:51:a3:f6:a3:1b:dd:23:56:3a:05:79:
d1:7a:3a:c1:f0:81:91:ef:b7:69:3f:23:46:65:1d:
81:31:e5:42:82:cc:ff:05:9f:3a:67:1f:2b:ac:a0:
8e:58:06:80:70:b6:97:df:52:9c:07:83:be:ba:45:
df:fb:fa:60:6a:d4:19:e2:e3:3e:0b:f4:3d:84:e8:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:3A:8D:7A:7F:18:5C:7F:59:76:0A:5C:BE:D7:23:AA:AE:13:6E
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:66:85:0a:f3:c9:1b:39:6d:24:e8:f3:19:c7:20:47:56:f8:
5b:f1:24:ea:98:47:f9:55:eb:da:53:85:8d:f8:93:f1:f8:1f:
ac:48:76:14:b9:cd:04:57:89:98:84:3f:08:43:e1:77:c2:35:
7a:4b:d3:ba:9d:df:66:3a:70:8b:54:5c:ed:b6:04:03:31:3f:
a1:e2:34:19:77:f8:07:4b:b3:5f:9f:7d:c3:1e:a6:6f:4e:0f:
e8:d6:d9:12:65:58:f5:ce:86:31:6d:ca:53:5f:3c:21:f3:f4:
28:b9:a6:20:5a:f5:6f:19:0a:a0:ca:78:ea:9d:d2:63:87:05:
be:19:39:2d:49:6d:cb:35:23:65:ca:38:20:d6:38:eb:dc:e5:
66:52:ec:c9:6d:55:cc:72:d6:a1:ea:09:49:b4:a3:47:ee:31:
72:9b:c7:70:ea:b6:13:9e:0b:94:49:47:9b:66:ad:a5:2c:fd:
1b:1b:07:b5:7b:56:a3:c8:58:aa:65:44:74:8e:32:56:88:ee:
c8:07:f2:e2:70:e4:6e:31:b3:3e:0e:e8:99:7b:d2:f0:80:50:
9c:43:a5:fd:a6:41:53:9b:90:e7:25:9d:8c:0d:21:4b:90:29:
65:be:a0:e0:3a:86:4e:93:64:ec:89:eb:de:ce:c3:52:6f:f9:
d6:dd:bd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:16 2026 by rpki-client