
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
File: UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json)
Hash identifier: GdBm1g4pynVUY/5L1f14pOe/2tgOM3S5QGkUac0t2OQ=
Subject key identifier: 56:9B:AC:83:75:3F:BD:81:7B:D8:EF:57:AF:C7:EA:FD:FD:3B:54:DF
Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
Manifest number: 0143
Signing time: Mon 11 May 2026 05:25:39 +0000
Manifest this update: Mon 11 May 2026 05:25:39 +0000
Manifest next update: Mon 18 May 2026 05:25:39 +0000
Files and hashes: 1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: Zn3p3ZCCDks+AK5MBn+kmuVYbMY3aDyQu/zyZRYK1YM=)
2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: aqdbrD7OJ2blLWFWLyQljkln+OcPA1d2ry5HZh2PUb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Validity
Not Before: May 11 05:25:39 2026 GMT
Not After : May 18 05:25:39 2026 GMT
Subject: CN=6a016853-112d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:ff:5d:03:b4:12:99:18:b7:ce:4d:f8:d9:
f4:db:34:4a:6a:38:22:43:52:14:da:9a:00:e5:ad:
70:61:73:89:4a:41:bc:e0:93:76:8e:61:e1:0a:08:
ea:9a:ce:9c:86:8b:92:db:71:46:c9:fa:d0:a5:84:
7d:7f:b8:3d:a7:fa:ef:db:50:9e:be:36:e3:0d:af:
4e:ed:b7:98:c9:18:a5:70:5b:da:7f:a5:12:c6:f6:
79:4c:f5:98:41:5b:62:bf:19:7f:93:a8:96:09:f6:
77:e1:f9:bb:eb:cd:10:cc:77:48:16:11:79:fa:4e:
6b:c3:91:47:d2:32:66:b1:0a:08:5d:f2:30:b6:7b:
eb:1d:89:25:6f:2b:fa:c7:5a:7d:0c:13:8b:c0:88:
8c:3e:e8:24:04:95:07:94:3c:7a:d5:a7:3e:37:5d:
a0:46:6a:73:2d:21:05:17:1f:e0:07:4e:31:ae:d3:
cf:27:9c:e9:48:b2:08:f0:4b:29:75:af:19:63:cf:
1a:93:df:ec:c7:c0:3b:e2:e6:29:8f:76:b3:92:08:
b3:15:1a:f8:ba:86:12:88:24:bd:ff:41:3e:7a:fa:
1a:7c:cd:7e:11:0e:71:2e:95:1d:3c:2f:ee:ba:98:
ec:81:20:6f:f2:24:f7:93:13:c0:88:88:5e:0c:ad:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:AC:83:75:3F:BD:81:7B:D8:EF:57:AF:C7:EA:FD:FD:3B:54:DF
X509v3 Authority Key Identifier:
keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:be:59:82:71:88:dd:13:6c:07:a4:94:5b:47:8d:28:d2:c3:
11:79:3c:15:98:33:a0:d6:0d:c5:83:be:6d:b3:70:03:ca:72:
a7:28:10:5c:e9:3d:3c:af:2c:bc:80:de:5a:65:be:3c:f7:aa:
f1:42:e3:68:9b:2c:a9:d7:a6:a3:b5:14:95:4b:e7:d3:4c:4f:
89:44:71:68:c1:4e:42:2a:9f:34:52:c9:f7:69:c9:0d:df:28:
d6:64:8d:ae:0e:57:a7:ce:c7:1d:b1:03:d5:e7:9f:d2:7f:02:
5c:1b:6d:41:dd:d1:6c:c8:64:33:81:97:6a:f2:b6:bc:3a:49:
d7:cf:87:68:e6:f4:30:b3:7b:de:51:99:e3:98:9e:10:ed:54:
09:22:89:36:de:de:4a:fa:57:f4:0e:88:4a:6d:ab:85:6c:66:
87:90:5e:4f:a1:53:76:11:f8:b8:47:f9:cb:56:23:4b:8c:0f:
05:68:13:1d:52:6c:bd:b7:da:b3:cf:83:3f:ec:84:b8:9a:91:
f2:0d:d6:04:05:1c:18:4a:74:6d:7a:fe:e4:5e:87:4c:32:67:
bd:81:24:5d:d3:50:e0:24:f0:56:79:b4:37:4b:1d:66:77:48:
aa:2c:28:b3:a2:dc:23:6a:4d:cb:1d:a8:90:15:0b:1d:88:33:
ab:6d:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:54 2026 by rpki-client