
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
File: Uf5h3GUzbaj92bxJe_pfniMuDMY.mft (raw, json)
Hash identifier: tEVfIwkI+P+SqBSfJXTZaelEbdEh7Mgim9B6CXuPduI=
Subject key identifier: 19:6A:B0:C7:7B:FD:E1:44:F8:88:C3:D1:77:D2:5A:9B:62:14:2E:30
Authority key identifier: 51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
Certificate issuer: /CN=A91A4CC3/serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
Manifest number: 46
Signing time: Wed 25 Mar 2026 07:39:02 +0000
Manifest this update: Wed 25 Mar 2026 07:39:01 +0000
Manifest next update: Wed 01 Apr 2026 07:39:01 +0000
Files and hashes: 1: Uf5h3GUzbaj92bxJe_pfniMuDMY.crl (hash: brl1he5DGm7MqGiuvt28v/p1mgNQ2bzlg/6XbQHCYVw=)
2: BFBA7E0ECC1C11F081ABD12EC4F9AE02.roa (hash: hCMmvjgg1m2ptErKuXEGlk3734h9tjSYvhrOfHka3Xo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4CC3, serialNumber=51FE61DC65336DA8FDD9BC497BFA5F9E232E0CC6
Validity
Not Before: Mar 25 07:39:01 2026 GMT
Not After : Apr 1 07:39:01 2026 GMT
Subject: CN=69c39116-9365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:b4:20:55:5c:7e:cc:ac:60:50:9b:79:71:
c1:89:50:6f:a8:e9:24:b1:03:0f:e1:ab:d9:28:81:
91:d8:b6:17:0b:c8:c9:53:42:4f:9c:57:62:d3:11:
43:9d:c8:38:1b:81:5b:54:06:2f:9a:f1:bf:4c:92:
5d:e1:c9:df:c1:50:c9:26:66:a8:10:af:5a:a1:68:
a2:9c:a5:30:25:52:2e:40:4f:7f:98:f7:71:74:9c:
c3:37:1d:a4:c7:36:d5:f5:52:25:13:2d:6f:d7:13:
9b:2e:30:8e:39:61:bb:6a:ce:29:46:d1:4e:31:c4:
80:66:39:6b:16:7e:80:64:0e:b2:71:7e:12:04:95:
e8:db:11:c2:4c:9c:dd:f3:ec:e0:5c:dd:af:0d:95:
16:6b:23:25:60:79:2e:72:f6:69:65:2b:4e:b4:ce:
06:92:02:84:cd:2a:ac:c4:64:40:f1:c8:43:7a:8d:
23:5d:ea:04:82:94:13:6b:1d:86:0b:22:11:bb:22:
6f:22:66:f5:88:36:b1:0e:46:37:49:15:0d:aa:f2:
91:21:65:94:dd:90:5a:8a:e9:f3:0f:31:0f:b1:44:
56:43:55:61:c3:d6:36:43:c6:8f:d9:ab:1a:45:68:
81:ea:90:47:f1:bd:38:87:73:ff:b2:7a:a6:18:cc:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:B0:C7:7B:FD:E1:44:F8:88:C3:D1:77:D2:5A:9B:62:14:2E:30
X509v3 Authority Key Identifier:
keyid:51:FE:61:DC:65:33:6D:A8:FD:D9:BC:49:7B:FA:5F:9E:23:2E:0C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uf5h3GUzbaj92bxJe_pfniMuDMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CC3/89899B9CCB6011F09F9EEF0FC4F9AE02/Uf5h3GUzbaj92bxJe_pfniMuDMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9e:74:97:93:ef:13:dd:24:8b:08:e0:08:9b:bf:93:2a:93:
b1:a3:eb:d6:f7:a2:0c:bc:e1:fd:6f:08:48:2b:91:23:0f:c7:
f9:2e:51:c1:89:4e:ff:d5:d1:4d:5d:30:4e:46:7c:b0:42:be:
8b:8c:58:9c:be:d2:fb:72:84:9e:a6:1b:4d:dd:29:d6:cb:09:
a1:ad:ec:37:40:1d:48:97:bd:26:c3:eb:f8:25:97:30:9f:ac:
cc:e9:6e:42:16:ec:1a:90:1b:2e:63:34:28:cb:27:16:1d:39:
c4:77:2c:52:95:4b:3a:11:a6:b0:c1:d4:8c:1f:aa:86:21:78:
cb:af:e5:39:97:66:a6:62:9f:57:17:30:a3:3a:d0:9a:0f:4d:
4f:25:c7:28:5b:37:ca:a3:75:2d:22:0c:03:0f:31:03:e8:32:
1c:a4:7e:d5:5c:59:c6:7e:0b:06:22:73:c3:9b:ca:fa:a0:44:
fa:c5:1a:1e:1e:c9:29:37:f1:20:8e:71:8b:19:c1:08:75:77:
2d:90:0c:32:2f:f5:8b:87:3d:8b:d5:cf:0d:c0:06:ff:52:c7:
79:9e:f0:d3:dd:9c:cf:e9:e4:c6:73:6d:fb:63:f0:a0:eb:04:
0b:1b:77:9a:aa:a9:cc:6c:cc:12:0f:81:f2:dd:66:0b:ce:65:
5d:89:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:37 2026 by rpki-client