
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
File: UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft (raw, json)
Hash identifier: 7qJkxVIxqe6DGsagfgBBkRn5ucqaVB2flDmVL2AhPxk=
Subject key identifier: 0D:23:35:B8:23:1A:F9:53:28:AC:10:82:30:AF:21:74:C8:3E:B9:34
Authority key identifier: 52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B
Certificate issuer: /CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B
Certificate serial: 0A75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
Manifest number: 0A6D
Signing time: Tue 24 Mar 2026 19:23:33 +0000
Manifest this update: Tue 24 Mar 2026 19:23:33 +0000
Manifest next update: Tue 31 Mar 2026 19:23:33 +0000
Files and hashes: 1: UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl (hash: dkhOCjddZiCGimAzCW0QzC2kqoAtqtPyGYoj/FMtbh8=)
2: 21028CF67EF811EAAD47CD30C4F9AE02.roa (hash: JFcci2znca0vHiIk+UWEW9yz/LlVcRJaRvUq96O997U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl
rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2677 (0xa75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A459D, serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B
Validity
Not Before: Mar 24 19:23:33 2026 GMT
Not After : Mar 31 19:23:33 2026 GMT
Subject: CN=69c2e4b5-bee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:4c:8d:56:67:e2:e3:5a:81:f7:52:c2:f6:
c0:06:bd:44:3f:83:03:40:46:c2:eb:bc:9a:30:e9:
52:35:cc:fa:cd:46:2e:02:2a:51:cf:15:3d:dd:e0:
8b:c2:9c:8f:df:89:89:a9:27:3f:8c:47:af:a2:a9:
a4:5d:83:e0:96:e9:1d:49:5b:8d:c6:ff:e7:23:b6:
d8:d8:37:d0:a6:3f:bb:e9:83:e6:13:22:56:44:2d:
94:22:80:f1:33:66:bf:49:19:9a:34:c8:24:24:e3:
67:72:80:aa:fc:e5:04:6d:b5:96:bc:b1:fc:b5:e0:
56:19:2e:c6:da:44:78:42:96:16:af:83:95:94:7e:
32:e8:e8:57:43:f9:dc:21:48:d0:f9:2e:c7:da:b3:
5e:db:03:4f:f4:5d:e6:40:6b:47:da:08:54:2a:bf:
81:a3:1e:a5:d0:ba:8e:8b:43:ec:fe:ba:ab:85:62:
ba:de:d3:5b:9d:70:69:ca:81:fc:12:be:21:85:08:
97:c6:b1:de:37:81:7e:c4:83:f6:16:bc:d3:1e:90:
51:92:82:1a:ac:41:23:fc:f0:1c:4b:79:56:b7:33:
01:3b:a7:4c:aa:42:ac:9c:f2:93:b7:7d:f5:78:89:
f0:31:7d:c5:51:72:8b:93:b8:24:cf:81:57:c5:dd:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:35:B8:23:1A:F9:53:28:AC:10:82:30:AF:21:74:C8:3E:B9:34
X509v3 Authority Key Identifier:
keyid:52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cf:e0:22:db:68:94:fe:8f:39:e4:cd:5e:ae:3a:e9:93:c5:
de:8f:f4:8f:76:f5:a7:3e:ba:7a:b1:d1:9d:1c:e7:85:f2:c9:
a0:c7:5b:3a:75:1f:20:3c:ff:10:f7:f8:e1:39:80:a8:58:3d:
2d:39:1f:1e:6c:df:48:03:37:e6:1e:20:70:a4:5f:01:d7:43:
73:bb:67:35:2b:7a:29:39:22:8c:f9:0e:a6:00:bc:0a:24:86:
19:d2:59:39:ff:5b:c8:1c:bf:30:59:66:fd:62:b1:b5:cb:ec:
2c:47:4c:42:23:b3:16:6e:9b:d8:23:3a:4a:a4:09:a4:7a:f1:
30:1f:b5:43:cb:13:62:44:09:bf:b0:8f:d2:44:d7:1e:bb:df:
d5:8e:02:ae:ec:1e:03:83:73:fa:e3:cc:59:ee:97:32:c3:1c:
b9:d3:e5:1a:90:18:5d:8d:21:be:dd:a1:cb:fa:a6:c9:87:12:
b0:aa:70:55:cc:48:c6:7e:b5:30:c0:05:c5:0b:d5:58:22:79:
d1:77:ed:00:e3:9e:5b:01:b3:d1:17:b9:da:a3:de:1f:10:d7:
5b:5a:f3:ed:6f:d8:6d:a4:fe:e6:c1:ae:ab:73:f6:8b:be:d8:
3e:d3:0b:81:d9:c1:a0:c6:64:b2:9b:72:01:0e:36:ab:93:30:
23:ba:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:25 2026 by rpki-client