
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier: XPYw9SLgSwVVKFvv1xpIzK91/FUhr+3HDAvSMjl1w2c=
Subject key identifier: F6:A0:3C:5E:31:92:C3:D8:E9:F6:46:E1:75:FB:43:32:5A:16:7F:17
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number: 023B
Signing time: Fri 25 Sep 2026 02:35:09 +0000
Manifest this update: Fri 25 Sep 2026 02:35:09 +0000
Manifest next update: Fri 02 Oct 2026 02:35:09 +0000
Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: F08JLsYnNrg/n/yQB2/Y+Z33IXks0TZ6BxQr89qq90s=)
2: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: wkL9CF0tWviJGwpOeaIeOvLdz67meR8gKKt1qekLsxc=)
3: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: vDdvCJ7Ilkj6j3EyUUG3A6VDOaQ9973VRteQFzrr2bg=)
4: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: INjKAtHT4YuZWArnvT5bdAmB2cAd6K4hrQ+j15TPHmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Validity
Not Before: Sep 25 02:35:09 2026 GMT
Not After : Oct 2 02:35:09 2026 GMT
Subject: CN=6ab5dddd-c068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:7f:6f:c6:18:95:bb:9d:20:82:e2:63:5c:
11:aa:52:7a:7b:fd:72:d0:28:09:3c:a7:fc:da:bf:
31:4c:7e:f4:15:32:d1:06:ee:1a:d3:02:c3:cd:76:
c0:35:d0:6a:a4:f5:e0:3f:94:6d:d4:10:b9:63:98:
fe:3c:b8:81:4c:47:39:e8:f7:8c:0e:a8:19:91:c9:
92:d4:fb:af:f9:ee:00:d8:19:af:b6:ea:95:78:14:
11:4c:58:d2:3f:04:0d:c3:9d:1a:bc:c0:77:b6:1b:
d2:81:18:2d:e0:ea:07:54:cf:e6:ca:af:f8:fd:28:
08:4f:9e:97:cc:ce:b5:17:80:f3:f5:71:3b:e5:59:
9b:a2:0f:db:16:be:d4:1d:15:af:b2:d0:d4:23:10:
9c:b8:9b:18:66:42:a3:39:27:f7:28:03:a9:52:20:
df:e0:d6:d5:cb:da:8c:3f:57:eb:01:b2:58:ee:28:
9e:95:77:66:c4:05:f8:f4:92:43:e0:60:28:dc:10:
3d:4c:38:e7:0a:2a:78:a3:64:2b:f6:83:a7:b1:df:
b5:79:9d:ed:3e:92:b6:a3:da:2d:96:fc:5c:5d:f2:
9b:30:b4:d1:48:0d:a3:a1:6d:cd:fc:38:ec:8e:0f:
c3:4c:1a:61:5f:72:33:62:6b:3a:f2:0a:7d:32:ad:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A0:3C:5E:31:92:C3:D8:E9:F6:46:E1:75:FB:43:32:5A:16:7F:17
X509v3 Authority Key Identifier:
keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a4:3b:ad:41:bc:72:26:73:e0:97:58:81:0a:c3:33:3c:db:
17:ef:b0:02:cb:5d:9d:93:c6:b7:14:6a:70:57:2f:ad:eb:7c:
d9:a5:45:cf:5d:c4:0e:77:95:7c:32:c3:c6:fb:c1:c9:7c:17:
2d:66:36:69:34:33:6e:74:1e:83:ee:9a:5b:79:74:25:86:26:
59:4c:6d:8d:04:f7:d5:38:c6:28:ef:92:a4:fd:38:72:b8:b4:
0f:37:66:93:51:88:cd:bb:26:fd:ba:4f:b0:45:74:49:e1:50:
c3:a4:b3:b3:d8:3c:db:a0:21:02:1c:40:58:30:69:5c:a5:19:
52:db:20:c8:fc:d5:6a:5d:b1:c0:fa:76:5a:27:ad:0a:24:aa:
2c:85:26:e9:e1:24:8c:32:ea:cd:6f:c6:52:70:86:1e:db:31:
a6:a8:27:fa:ad:89:50:56:d1:98:b4:52:6f:45:27:42:5f:bd:
58:f9:00:be:b9:84:5b:5b:3d:29:45:05:33:10:79:59:4a:24:
e0:10:15:55:9e:f5:64:73:5a:88:e0:a6:3d:fe:79:cc:11:5a:
40:17:79:4d:97:92:8b:83:21:7d:e9:9a:c2:1a:02:89:c8:09:
18:f3:61:3e:77:1f:ee:08:86:f2:ca:f0:cf:6c:05:fb:80:bb:
15:23:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:33:17 2026 by rpki-client