
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
File: uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft (raw, json)
Hash identifier: y4aSkcQB0EEtiio1c7VUsx+LQ1KgXciZEm4yE+3w3zE=
Subject key identifier: 01:D5:7F:91:F2:B4:40:2A:A4:D0:C1:EC:6F:E1:60:B2:51:AF:7E:FD
Authority key identifier: B9:95:17:14:DA:42:AE:01:83:6F:04:42:1A:3F:7E:5E:0C:18:68:F0
Certificate issuer: /CN=A91A84E4/serialNumber=B9951714DA42AE01836F04421A3F7E5E0C1868F0
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 10:36:14 +0000
Manifest this update: Thu 23 Jul 2026 10:36:14 +0000
Manifest next update: Thu 30 Jul 2026 10:36:14 +0000
Files and hashes: 1: uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl (hash: oxyncud7uDFX0sgQBXRjHXyp3dzPvNwe2ukViNctiy0=)
2: 9FD3C6EC45EB11F1A29385B097833773.roa (hash: dExHyhgqfE8zJdmuf/00Aoqy7D6f+M0i059P4+A2NUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl
rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A84E4, serialNumber=B9951714DA42AE01836F04421A3F7E5E0C1868F0
Validity
Not Before: Jul 23 10:36:14 2026 GMT
Not After : Jul 30 10:36:14 2026 GMT
Subject: CN=6a61ee9e-d589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:3b:16:0e:93:6d:a9:aa:89:b2:d9:21:30:
a1:78:d8:3a:6d:b3:c9:9b:3f:a1:aa:dc:ac:97:25:
5e:c1:85:a0:1a:c8:db:10:94:ae:df:3c:30:75:64:
2f:84:57:37:23:d8:a6:63:4b:77:3e:2c:5f:97:b1:
6e:04:ba:da:df:de:d5:24:b0:78:18:0d:d9:24:e3:
60:4f:d8:05:53:cb:10:cd:5e:49:f9:73:e2:29:f7:
34:5b:52:d5:09:a4:ea:ff:eb:8f:2c:40:b6:51:3f:
31:e3:12:ad:d9:24:4f:0f:00:1d:0c:52:93:20:68:
06:5a:18:c7:90:22:7d:3a:4d:08:13:46:09:57:a7:
8f:c6:49:b0:44:b1:59:d0:d9:bf:19:dc:25:fb:d4:
00:a0:96:9e:4b:cc:9f:ce:ca:f4:e8:bf:43:aa:ef:
85:8f:75:03:c7:3c:a8:6d:82:58:d5:53:5c:73:14:
8d:41:f5:38:69:36:ef:e4:b9:ef:8a:29:82:6d:95:
f3:2a:55:5c:c7:0b:b3:7d:47:2b:d4:0c:bc:2d:e2:
bd:43:2f:d0:42:32:b3:d9:d7:ad:67:7e:93:5f:c5:
9b:2d:60:b2:7d:17:68:6e:7e:ac:6f:b1:8c:2b:da:
6f:36:58:90:3e:ac:31:bc:2f:9d:f2:b1:da:b1:cf:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:7F:91:F2:B4:40:2A:A4:D0:C1:EC:6F:E1:60:B2:51:AF:7E:FD
X509v3 Authority Key Identifier:
keyid:B9:95:17:14:DA:42:AE:01:83:6F:04:42:1A:3F:7E:5E:0C:18:68:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uZUXFNpCrgGDbwRCGj9-XgwYaPA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A84E4/6E880EA230C111F1A63E9B46A6833773/uZUXFNpCrgGDbwRCGj9-XgwYaPA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:59:b8:f1:9a:0f:32:c8:84:84:4f:3a:f7:58:11:bd:d5:81:
c9:dc:07:e3:4f:9a:16:86:2c:7e:f5:d8:55:95:ad:21:22:a9:
02:6c:a2:d1:b8:06:ec:77:43:36:53:27:44:81:b2:3a:31:2c:
27:28:9e:9c:4f:76:b9:86:d9:c8:d9:2c:d4:2b:3a:22:df:30:
e2:a7:b7:27:ed:fd:19:1d:00:76:44:49:4c:0a:aa:d8:8d:81:
54:70:f4:c2:59:51:ba:4a:e2:1f:11:f7:f4:21:db:70:aa:9b:
39:e5:57:51:49:90:43:ad:d8:f3:71:b7:70:43:81:bd:2e:bf:
79:bd:eb:b4:13:40:c6:86:ca:11:b3:dd:06:4c:6c:0a:c1:da:
2a:10:4b:45:97:64:ff:df:04:26:ff:5a:49:e6:bf:87:06:af:
8e:08:53:eb:83:a2:00:19:04:83:87:b1:1e:d3:93:00:c8:c0:
9f:82:c4:26:d8:97:4f:f5:0e:c3:a9:90:e3:15:0b:9a:cc:25:
e3:c6:8b:96:94:73:6c:15:08:51:02:3d:e6:18:99:23:9f:e8:
dd:a4:c6:b5:ab:f7:cf:de:d0:0c:5b:73:9c:ce:9e:e9:7a:64:
d7:4c:52:3c:dc:aa:bd:9a:df:9d:76:d2:d4:aa:86:97:9d:d7:
87:82:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:43:03 2026 by rpki-client