
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
File: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json)
Hash identifier: 9S8U/H6QY59y+lMvqrA1/AYHS9MAyuKrYeENWH6xdgs=
Subject key identifier: E1:89:AE:20:F6:25:34:E5:A5:1A:40:5E:50:41:91:92:7E:AA:97:2A
Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
Certificate issuer: /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
Manifest number: 026F
Signing time: Wed 25 Mar 2026 01:32:16 +0000
Manifest this update: Wed 25 Mar 2026 01:32:15 +0000
Manifest next update: Wed 01 Apr 2026 01:32:15 +0000
Files and hashes: 1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: bdpdm8kZ6lYV7KwDzRdzBk8/fVykFR+tk+Kt21CxEKI=)
2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: clsZuFy5g+1emvntcOY/P2Vw/DD0Zep7TP+9f225EEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl
rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3D65, serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Validity
Not Before: Mar 25 01:32:15 2026 GMT
Not After : Apr 1 01:32:15 2026 GMT
Subject: CN=69c33b1f-d9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:0c:e5:fe:e2:60:aa:3f:24:f7:92:65:42:
38:f9:2d:4d:ce:42:b4:d5:e9:0b:0a:ba:3b:80:23:
36:46:2a:60:41:53:e0:9a:4c:e9:f8:04:77:91:c4:
26:05:67:41:91:df:9d:67:22:c1:48:c4:f3:e0:49:
84:60:8e:9b:7c:05:d7:8b:f9:cb:d4:a5:54:85:70:
61:51:23:27:bd:63:04:e2:2d:a0:b9:2f:6e:9b:06:
1f:44:69:dd:19:af:ec:24:6f:d3:c7:68:a7:d5:57:
b0:f1:97:dc:f4:23:ed:7e:7c:ca:a4:bd:e4:b4:a3:
cc:28:5a:53:cd:6f:b0:b0:b1:8a:75:f1:45:77:20:
e5:08:5c:9c:f4:e2:14:e9:66:e3:5d:09:05:e7:c0:
51:5c:13:85:aa:a1:c6:36:aa:47:c0:2a:5a:98:da:
0d:f6:9b:1a:bf:b1:17:72:09:ee:c2:a1:6a:21:75:
32:f7:7b:71:64:b3:fa:d0:59:fd:55:4d:c2:7e:3f:
f0:2e:29:4d:d9:6f:0a:c6:27:40:c3:27:51:07:97:
1a:7f:8b:d0:7d:73:16:61:f4:03:44:cf:31:ae:b6:
7a:9b:59:80:63:aa:c3:3e:da:41:06:92:28:87:8a:
a7:ed:f7:71:a0:fc:ed:52:d1:e8:c5:6c:cc:78:7a:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:AE:20:F6:25:34:E5:A5:1A:40:5E:50:41:91:92:7E:AA:97:2A
X509v3 Authority Key Identifier:
keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:fb:3b:d8:56:0b:06:6d:40:bd:2d:a6:dd:d1:b0:9a:47:45:
55:58:ef:62:f4:0f:2b:04:19:99:a2:b9:34:9d:8e:94:12:72:
bb:48:2c:c9:3f:e9:f6:74:c9:85:6e:e1:f0:18:bd:e9:d5:9d:
bc:35:90:b2:3c:1f:f7:79:04:77:4e:dc:3b:ff:6f:fc:4e:1b:
03:d0:42:e3:8c:33:74:d3:7a:ea:17:1f:47:50:17:6d:e4:a3:
70:a4:ad:f3:09:9f:4a:62:32:f8:17:21:32:cd:c8:e0:c1:b3:
58:7c:c9:c8:1d:a5:37:93:22:aa:2a:8f:66:94:f2:4c:99:7b:
54:7f:13:90:b5:8f:89:4b:a0:12:ca:96:7e:a2:73:9a:23:dc:
60:59:2c:22:ac:62:94:be:80:c6:1b:28:ea:f5:a6:52:0d:a6:
0b:91:fa:8f:47:33:ef:48:c3:89:55:9b:e9:b3:77:52:cc:95:
29:bb:91:bf:bf:85:08:18:76:50:7c:46:b0:84:fb:43:7d:84:
07:78:76:c8:4a:ca:22:cf:6b:37:1b:7f:dd:29:ce:58:64:38:
ae:c2:fa:a5:53:02:77:f8:f9:90:9b:ff:03:4e:76:d4:57:c5:
12:59:39:55:85:a4:72:c2:32:b5:f2:a2:5f:e5:fd:7f:3e:b3:
c5:62:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:46 2026 by rpki-client