
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
File: UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json)
Hash identifier: kuaUOJQNdOprhCV+hle4dg7S0EQoNwGbIwI/EZkzlGY=
Subject key identifier: C0:0C:32:16:F2:B6:19:20:F7:94:9E:CE:49:4A:30:99:C8:48:BC:E6
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
Manifest number: 0103
Signing time: Fri 09 Oct 2026 07:01:04 +0000
Manifest this update: Fri 09 Oct 2026 07:01:03 +0000
Manifest next update: Fri 16 Oct 2026 07:01:03 +0000
Files and hashes: 1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: /d14Lqp2tGxmD8VjRQ/hJxJNXo9uSrmQ7AYs43NnFqw=)
2: C577E392D0F711F0BC02385AC4F9AE02.roa (hash: u1r3Je4qZRnxg/RZHpWI2PjYiwMKESZ7cb2kwwWNTUs=)
3: 3B2E80F84C4C11F198B679C5B8833773.roa (hash: ygzPBbzcPNKgKBn3Takd4OFJZsQA58vlX72w9BdEaDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Validity
Not Before: Oct 9 07:01:03 2026 GMT
Not After : Oct 16 07:01:03 2026 GMT
Subject: CN=6ac8912f-3c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:ab:d1:2d:9b:d2:b9:5b:4e:80:37:d9:02:
06:eb:00:30:7e:df:a6:3b:68:2c:ac:b7:b7:45:76:
92:54:55:08:26:d6:22:a2:8d:ff:a5:21:5f:ad:b6:
b7:ba:0b:d6:97:2a:50:8a:50:38:9a:91:67:99:3b:
b5:9c:b5:66:0e:f0:3d:64:c7:02:51:e0:c9:06:d2:
af:b0:36:51:61:d7:17:30:d4:ef:a8:81:0c:b9:50:
e1:28:ee:13:5b:f8:3a:d1:54:c0:72:af:79:9b:c1:
16:17:1e:69:55:4f:e6:7d:82:00:59:52:25:7a:64:
9c:74:d2:63:77:91:ec:b0:01:80:9c:4b:e0:ee:2e:
4b:da:9d:73:ae:86:b7:36:f5:97:e4:93:c5:b3:a2:
14:42:1e:6d:47:5e:d9:46:52:6f:a9:78:49:c3:f3:
7b:96:e8:71:d7:c8:37:8e:07:31:8f:bd:dd:fc:5b:
19:0d:de:3a:88:4d:a6:fb:bc:64:cc:68:b6:36:52:
fa:80:48:bd:cb:f5:c1:c7:17:b8:19:bf:8f:95:51:
6e:50:56:c6:d4:60:13:c5:f6:4f:83:02:d4:8f:db:
5e:cb:d5:c6:45:77:1a:ae:92:14:87:1b:44:65:17:
cb:93:13:62:6d:19:a4:2a:ad:8c:5b:33:da:e7:71:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0C:32:16:F2:B6:19:20:F7:94:9E:CE:49:4A:30:99:C8:48:BC:E6
X509v3 Authority Key Identifier:
keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:4f:05:bc:e3:c9:6a:a0:34:9b:e5:8a:44:99:f4:5e:bf:38:
76:2a:c5:92:34:f2:3d:21:27:9d:db:7d:4b:47:dd:47:8b:51:
a6:0d:9d:88:32:d2:3a:46:1c:c1:cb:dd:6a:5e:81:53:6c:13:
21:28:b1:5f:0a:54:28:68:9f:c3:fa:71:21:80:22:1b:f0:2a:
8c:dc:7d:2f:64:c0:55:e7:b1:9d:b4:dc:4f:65:d9:7f:46:c8:
ff:30:60:86:01:5e:f9:22:13:5c:8b:97:14:09:2d:95:53:33:
d4:69:be:48:ba:36:e2:be:2b:dd:7c:33:17:21:7d:7e:30:72:
e2:a3:84:85:52:a1:77:9f:da:56:82:d6:95:93:17:ea:3c:17:
a6:51:98:cd:ce:68:8b:81:58:b8:6a:63:2d:bc:9e:17:6c:ec:
8c:05:d1:f7:81:ed:df:2c:79:06:ce:4c:c7:ed:4e:98:18:68:
53:5d:87:a9:47:a0:15:45:4c:70:f5:f8:06:42:67:52:24:0b:
3c:1d:48:78:96:3e:94:95:61:86:a8:de:6b:bd:01:20:8d:36:
ee:63:84:c1:1b:df:8d:27:d1:22:ba:28:69:0e:d3:61:49:d2:
de:14:8e:f4:4d:e4:a3:df:fb:6f:c1:f7:38:8f:05:ac:61:bb:
b1:19:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:29:35 2026 by rpki-client