
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json)
Hash identifier: gqDgmiW6p61OSljIz+aI/J6Oe90FsvQsBlwyi/JakaU=
Subject key identifier: 81:70:8E:8F:A1:49:7E:77:2C:82:CC:03:4B:C5:7A:3B:CD:9D:A3:FC
Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Certificate serial: 0C10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
Manifest number: 0BE7
Signing time: Sat 26 Sep 2026 19:05:23 +0000
Manifest this update: Sat 26 Sep 2026 19:05:22 +0000
Manifest next update: Sat 03 Oct 2026 19:05:22 +0000
Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: I23QKdbRIUUmbrxL+iufSbnQTqoq+v0DUbqW1750EVU=)
2: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc=)
3: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Validity
Not Before: Sep 26 19:05:22 2026 GMT
Not After : Oct 3 19:05:22 2026 GMT
Subject: CN=6ab81773-62f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:e9:34:d3:d9:aa:d7:9d:ea:d9:28:a8:2e:
98:a1:be:21:5b:a0:12:09:7d:d2:9f:4e:de:e5:c5:
14:e0:4d:e4:0d:7c:9b:68:8f:2a:ef:ea:62:8f:55:
72:0e:25:8d:92:3d:9f:3f:06:3d:e1:8a:e3:c1:6e:
c0:98:f0:50:3a:81:aa:32:58:ad:57:ac:6a:22:ac:
1b:c9:ce:a8:68:8a:a3:d7:03:9c:87:3c:ca:a2:81:
4b:45:c4:dc:89:0b:05:67:d6:1f:c9:80:1f:12:34:
3c:9e:f3:82:3b:9e:17:23:83:7f:9e:1f:95:51:8a:
a3:1b:b8:c4:1d:16:f3:8a:8e:fe:5b:75:38:45:5c:
cb:da:08:1e:b2:1b:2a:d0:7f:bd:e9:54:74:af:5b:
2b:6a:6f:e4:9b:bb:b9:53:ad:df:7e:82:69:2b:0b:
60:0b:b7:bd:09:9c:03:01:b0:44:2d:82:50:e6:29:
d2:ae:6e:f0:d1:ee:d5:f9:2d:92:92:a5:c5:dc:a0:
06:74:51:20:cd:83:be:30:bc:6c:1f:d0:54:19:50:
5f:b1:c4:cc:a4:44:25:e0:3f:35:b6:99:a8:6f:3e:
dc:d9:c9:70:d1:5b:a7:1d:b5:21:3c:f3:6e:7f:db:
a7:95:70:cc:d8:b6:f2:57:66:d3:2e:9e:95:1a:43:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:70:8E:8F:A1:49:7E:77:2C:82:CC:03:4B:C5:7A:3B:CD:9D:A3:FC
X509v3 Authority Key Identifier:
keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ab:cc:b2:50:fa:d3:8a:59:8d:84:35:8a:3d:44:a8:34:10:
8a:05:1d:d0:48:81:a1:b1:4d:ee:fd:40:4a:1c:1f:2d:36:1c:
4f:d0:67:30:cf:e9:d9:2a:05:a3:39:64:9f:ca:e8:73:6c:2d:
db:49:c5:e4:e0:2f:6f:41:71:67:5a:d4:b7:06:23:4d:59:d7:
87:9e:28:db:a5:fb:0d:8f:81:d9:45:7a:0d:6a:e4:cc:30:de:
59:d7:66:ca:64:7b:f3:dd:ca:55:48:c2:c1:40:99:48:14:24:
94:13:e8:1f:6a:a9:fa:d1:24:d6:ac:50:4c:e2:94:c0:2a:22:
83:f6:37:fd:bf:da:f9:5f:e0:f2:16:35:68:18:e5:5c:65:3e:
47:fc:33:4c:52:3f:ad:c8:46:ca:89:e9:3a:89:df:87:ae:21:
ae:09:34:1f:dd:bc:1e:a1:ac:18:46:36:af:6d:06:60:4d:68:
f8:7e:93:56:06:d4:45:1e:d0:99:4e:36:95:3a:48:24:7c:3e:
50:68:66:90:93:d6:27:24:19:24:85:f7:71:62:bd:a2:28:7f:
0c:d7:74:5b:8c:a8:89:ee:9c:9e:db:29:ae:22:d3:91:03:4d:
fe:86:bb:60:29:e3:bb:e5:f7:02:8c:18:fa:1a:5f:e5:93:6e:
2f:cb:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:35:47 2026 by rpki-client