
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File: UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier: VWVTDSMm5oRaMFGlsdKFrx0phL1P4hZl6Fo6zGo+vJU=
Subject key identifier: 43:1D:94:C8:23:35:BD:CB:9E:F2:B1:58:65:08:8F:E8:36:8B:45:84
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number: 3F
Signing time: Wed 25 Mar 2026 07:42:25 +0000
Manifest this update: Wed 25 Mar 2026 07:42:25 +0000
Manifest next update: Wed 01 Apr 2026 07:42:25 +0000
Files and hashes: 1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: Oi9S3oWyZTzW1B7veVa02zfNsth8Zqw1ppgHuOuSYO0=)
2: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: GaDjg2LGrHhGqPo1QDhu/WF1zoWXbcBF0LoFtrNXHC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Validity
Not Before: Mar 25 07:42:25 2026 GMT
Not After : Apr 1 07:42:25 2026 GMT
Subject: CN=69c391e1-1524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:20:61:a5:48:3b:ee:7f:fd:29:4f:94:e9:
16:e2:7a:59:90:5f:c5:6b:9c:82:21:eb:41:b7:62:
4a:92:59:00:7f:46:8b:c7:e9:76:2d:80:29:31:22:
4b:a0:80:99:9e:e5:58:8a:65:0c:c8:1a:ef:b8:f6:
89:a4:84:1a:61:cc:c6:75:1c:8f:c6:71:bd:e5:e5:
df:b7:70:ed:87:a9:69:83:2d:4a:7a:3d:f6:a0:5f:
87:0a:f0:08:ba:47:da:d1:cb:24:df:2f:93:c4:c9:
51:7a:95:8b:d5:28:a6:0a:48:7f:0a:27:67:bb:16:
75:6a:49:92:75:a9:fc:fe:4e:2e:ce:57:ff:5c:1a:
fa:0a:53:0f:80:02:ee:14:d1:e1:a5:d6:64:89:b7:
1f:7f:ba:7b:5d:13:da:71:29:48:0b:06:24:41:21:
09:49:cd:48:13:8b:a8:b7:b3:77:c1:39:fa:ff:b6:
ec:95:30:c3:09:d0:5e:23:cc:76:f5:83:8f:41:5b:
1e:3a:03:aa:60:4b:01:45:ed:95:a2:92:50:05:ea:
c5:ea:7c:43:79:84:f2:36:ba:a0:02:ba:b7:f4:16:
ac:35:51:bd:89:63:d8:5d:0f:97:86:5e:27:e2:66:
91:98:16:01:6d:94:71:15:f2:df:02:e6:45:29:75:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:94:C8:23:35:BD:CB:9E:F2:B1:58:65:08:8F:E8:36:8B:45:84
X509v3 Authority Key Identifier:
keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:54:63:c8:d5:66:14:40:56:1a:74:1f:d8:fd:07:ac:f6:77:
aa:30:fb:c7:22:23:1e:fc:87:d3:70:d5:37:86:d2:87:1b:f0:
53:29:72:79:3a:fe:d5:04:93:af:64:ab:cb:cd:61:02:27:8b:
c2:8e:8e:4f:d9:65:94:90:13:e4:80:fa:ed:8b:17:d1:84:f4:
4a:f7:2f:e3:e6:26:22:4d:c7:ab:e0:78:80:30:17:4b:82:57:
ce:00:a5:2e:68:9f:9a:5d:a3:82:05:f6:e8:89:9a:14:6a:e3:
b4:55:07:04:82:a4:26:f0:13:85:c4:db:22:c5:6a:8a:9b:07:
5f:62:02:c4:17:43:64:52:e3:f9:ca:e0:8e:79:5c:48:0c:4d:
11:d7:ae:68:27:90:91:cb:3b:fe:af:03:95:c4:96:e9:35:d8:
cc:cf:13:c3:4f:8b:ce:5e:e7:95:81:b7:43:1c:98:1c:36:cd:
da:6f:7b:c0:3b:88:4e:31:a3:3c:37:cc:3e:df:c4:f8:20:9a:
5e:e8:ca:f4:41:e3:e3:43:f1:26:9e:5d:cc:ae:e6:71:30:bc:
e4:ec:4f:f3:d4:7d:2e:30:cc:0b:65:d1:7c:00:00:d7:9c:0a:
e2:c4:c9:a8:6c:50:b7:f1:25:ef:5a:d3:22:72:18:b3:f7:49:
e2:e3:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:32 2026 by rpki-client