
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File: uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier: oBQ3y0dmA7nJ8sVjDkwAWEvqynEP5/ZTLsLBEpLw9TE=
Subject key identifier: 60:1D:AB:DD:41:EE:CA:EB:45:3F:32:5C:17:37:6E:B9:EF:F4:71:28
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number: 0159
Signing time: Mon 11 May 2026 05:07:25 +0000
Manifest this update: Mon 11 May 2026 05:07:25 +0000
Manifest next update: Mon 18 May 2026 05:07:25 +0000
Files and hashes: 1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: +zT48iai2uA0MbNoprXJ5BEb5an89eT05YLXgoKIKKk=)
2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: kULCLxEgjb2/Cw5xY/yIQe75Fjnphtia6sfeO3P34Os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Validity
Not Before: May 11 05:07:25 2026 GMT
Not After : May 18 05:07:25 2026 GMT
Subject: CN=6a01640d-73b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:35:8c:8d:a8:32:bd:bd:b3:56:6d:ed:f3:
15:4d:63:08:24:18:9d:05:7c:f2:69:23:db:b1:c2:
91:53:2b:fe:b6:b7:46:94:1c:76:8d:d2:41:7f:7a:
f7:5b:2e:b6:00:e9:4b:58:57:15:29:87:bb:f7:f6:
53:23:0a:d5:33:3c:88:45:c0:41:8f:0b:07:8b:b1:
c6:07:47:1e:b2:a4:33:83:e9:a4:43:50:74:9d:c2:
6c:39:90:2e:87:30:fa:e4:5c:8a:d9:84:5e:13:f5:
1a:36:84:a1:c1:dc:3d:f1:ff:28:49:38:6a:a3:10:
87:81:f4:70:ce:c5:24:48:0d:85:80:e2:3c:1b:86:
90:db:62:13:31:71:11:0c:4b:81:d4:ce:3d:f2:60:
52:dd:bc:66:b9:92:b2:6e:99:1c:63:61:4f:cb:2d:
f3:af:ef:17:f5:f5:f8:95:c2:d3:25:65:0a:06:45:
df:e3:36:63:73:3e:1d:1a:ee:76:23:57:cb:5d:92:
a0:53:52:69:bc:99:e7:84:97:ef:d4:90:2e:63:05:
f6:f0:61:87:8c:52:6c:63:69:eb:98:6b:e7:bc:0b:
e2:6b:9d:31:bc:6d:00:68:ef:07:1e:35:cd:45:3f:
6e:5b:72:13:5a:3b:8c:d6:bc:d6:c8:02:00:21:97:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:AB:DD:41:EE:CA:EB:45:3F:32:5C:17:37:6E:B9:EF:F4:71:28
X509v3 Authority Key Identifier:
keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:7c:ee:54:7f:54:29:b2:83:99:1a:a0:ed:4b:38:32:d1:e9:
dd:00:03:4c:3e:9a:b4:76:29:5d:9f:65:ec:30:c5:e6:b6:73:
6e:a7:f8:ef:22:d7:d3:9b:7f:2a:48:f4:d4:85:90:08:c6:87:
1f:0f:f5:55:bb:14:36:50:9c:5a:68:ed:9d:e9:df:81:12:50:
a5:17:c3:90:3a:5a:78:80:4d:e6:f3:2b:73:d4:54:2e:be:e0:
cb:f3:3e:90:e6:bd:66:64:3e:fc:d4:1b:19:c0:e1:84:ae:8b:
ba:2c:94:bf:66:78:3f:a3:af:1a:0e:5c:ab:8e:7d:90:07:f3:
c2:e5:45:a3:7b:d0:ef:ac:5d:bc:8c:f5:3b:89:df:29:29:b2:
fb:60:31:26:90:86:24:31:9f:8a:30:6f:80:17:c7:02:1f:20:
40:a4:b5:f3:95:94:77:b4:32:50:83:f6:21:77:83:bd:41:f6:
48:c7:1a:39:63:9d:a1:b6:24:4d:1b:a1:6d:ef:90:8d:dd:3e:
b0:f3:dc:1d:f4:cb:17:b6:42:11:84:11:71:5e:67:94:72:68:
94:c9:17:5e:fe:8e:e1:08:4b:88:8e:d9:f4:39:e8:70:af:67:
dc:ab:7a:90:9c:4e:b3:1a:ff:98:77:68:85:9a:5e:ae:aa:26:
f3:01:7e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:17 2026 by rpki-client