
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File: Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier: isAWsKr+ig0U7RHLDXojNxCicGbLiv2RoMAC07kVABc=
Subject key identifier: A8:8B:64:62:31:13:F4:37:7D:2E:D4:6B:EF:D5:B6:5C:64:F0:B2:FF
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer: /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number: A6
Signing time: Thu 01 Oct 2026 08:39:57 +0000
Manifest this update: Thu 01 Oct 2026 08:39:56 +0000
Manifest next update: Thu 08 Oct 2026 08:39:56 +0000
Files and hashes: 1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: RoKu1LUmSZXb9566WBTccxnrVSyurMqVmc9MMXM7bSQ=)
2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 08:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Validity
Not Before: Oct 1 08:39:56 2026 GMT
Not After : Oct 8 08:39:56 2026 GMT
Subject: CN=6abe1c5d-8877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:22:87:e5:d3:9f:63:d1:a8:34:46:a3:4d:
5e:df:83:3b:96:46:34:20:f8:87:fc:b1:bb:e2:36:
aa:c6:d3:58:18:c1:a6:02:dc:a5:83:dc:f8:2a:57:
0a:35:d5:ca:90:07:2c:b3:81:ac:38:12:ff:4c:bc:
8f:cc:7e:70:ad:a8:87:e8:ff:89:cb:dd:b1:4c:40:
38:d7:15:0a:27:c4:23:e2:57:ac:05:4d:2f:a1:b9:
d5:6c:2e:9d:7a:31:81:3f:82:ce:23:64:8b:87:96:
7f:d2:db:c8:f6:a7:8e:c3:27:04:cb:ed:a8:bc:a8:
1d:88:f6:f7:f2:49:ec:5a:aa:31:47:47:a4:54:d1:
f8:5d:4b:5d:f3:97:e6:6a:e5:47:db:27:cd:52:b0:
97:cd:5b:f5:a8:22:ef:3a:a8:ee:f0:73:f4:a7:3c:
ea:b9:ae:8d:e6:04:1f:54:9b:ef:e4:d6:a7:5b:4c:
4e:0e:fd:03:3a:be:6a:86:33:40:7f:8f:47:2f:ce:
ea:c1:d4:18:2a:52:df:53:93:9e:7b:eb:71:2a:4e:
44:2f:42:8f:c6:a5:bb:64:8d:9b:c4:5e:61:21:aa:
25:7c:42:fa:93:25:ae:e0:67:74:a7:11:5f:33:d4:
67:76:7c:74:eb:68:a3:db:6a:6f:8a:f0:a3:85:85:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8B:64:62:31:13:F4:37:7D:2E:D4:6B:EF:D5:B6:5C:64:F0:B2:FF
X509v3 Authority Key Identifier:
keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:b3:95:f8:0e:62:f7:b4:ce:ed:b0:11:f1:2b:2c:b8:4e:
4e:38:db:4d:bf:f2:e8:d3:98:49:16:8d:d1:f0:7b:a1:f3:db:
ab:04:b5:32:7f:07:d6:a1:b2:ad:63:53:4e:11:7b:74:bd:06:
12:9d:69:55:39:4a:42:5b:fd:ea:95:be:02:0b:66:5f:93:90:
5c:38:d4:21:a3:59:ce:0a:97:9b:8e:f5:1b:44:84:ba:4b:87:
c2:32:92:e3:92:72:f4:7e:97:21:47:7b:bb:a3:50:de:a6:d0:
65:72:fb:f4:ae:65:b4:58:c0:97:ad:a8:66:d8:8a:7e:bf:8a:
94:8b:40:3f:ea:39:e3:52:03:66:71:a3:d8:72:b5:3a:a9:ef:
79:75:28:be:df:11:50:29:12:e6:d5:c1:1a:d8:fa:bb:20:f3:
2c:82:98:be:0a:e5:27:db:47:eb:05:32:3c:9c:39:6e:b7:70:
23:3f:55:1d:50:fc:a8:e8:ea:eb:29:87:11:08:28:84:6d:2c:
d6:6e:7a:5d:86:9b:9e:77:7e:79:ff:33:a0:88:90:b6:60:80:
66:b7:39:96:49:48:1d:b1:f2:75:29:64:61:05:7a:cd:36:87:
75:75:a9:74:6e:b6:6c:fd:90:c2:8d:d2:2c:2d:6d:70:3e:c6:
c7:8a:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 04:43:35 2026 by rpki-client