
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier: oYDdFN2/um4dqCj6nu2sIbaMc7SH2x5q8mW2/InSoIQ=
Subject key identifier: 8F:9E:15:3C:74:01:46:D3:A5:8C:CA:3F:C2:B6:72:16:75:BF:82:A5
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 040E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number: 03F0
Signing time: Wed 25 Mar 2026 00:11:21 +0000
Manifest this update: Wed 25 Mar 2026 00:11:20 +0000
Manifest next update: Wed 01 Apr 2026 00:11:20 +0000
Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: aZqBXYQDCX5160UOcGvqhMOqKfMu53jNGd36UAnpco0=)
2: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=)
3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=)
4: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Validity
Not Before: Mar 25 00:11:20 2026 GMT
Not After : Apr 1 00:11:20 2026 GMT
Subject: CN=69c32829-e31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:67:a1:87:2e:c6:78:11:d1:ef:c3:e9:ac:
48:1a:a6:7c:90:4c:05:d9:7e:85:dd:50:81:3e:6b:
6c:9b:0d:ce:68:0f:e0:a1:fd:79:7e:ad:ac:1c:3d:
84:40:0a:72:04:7c:50:78:84:c3:41:91:16:67:7f:
97:5a:a6:ad:4b:4f:ef:67:46:06:74:71:0d:53:d1:
16:f5:05:47:94:6f:21:91:29:ca:e7:87:f8:26:17:
ea:07:91:fd:32:82:8e:cd:ee:5c:81:b9:6e:b0:03:
a9:f4:34:c0:d3:de:c2:57:d2:ad:ff:c1:43:97:ea:
4b:c4:45:dc:f3:89:f6:0f:62:0e:10:b1:e0:9c:f6:
54:e0:ad:69:ca:74:e3:fd:a8:69:5b:13:bb:fa:9a:
64:1b:ef:a6:b3:e7:b5:1e:08:79:5b:26:c4:04:ce:
b1:b7:b4:09:f9:f0:a3:1d:78:0f:b7:e2:f0:d1:1b:
18:5c:8d:04:5b:6f:2a:c5:89:de:f7:5d:ad:18:8e:
81:3c:cc:8b:6a:ef:3b:91:69:b1:f9:7b:28:a0:12:
10:f6:76:a1:3f:4d:2a:ec:1d:58:5a:d6:30:c6:05:
8f:79:44:71:06:8d:0b:ae:4a:13:74:9e:f9:9b:c1:
43:69:4a:64:d8:05:2a:9f:ae:5f:98:c8:58:f0:47:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:15:3C:74:01:46:D3:A5:8C:CA:3F:C2:B6:72:16:75:BF:82:A5
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:de:79:37:fb:cf:b1:b0:88:0d:c6:5a:1a:72:3a:3f:69:78:
1c:3a:2e:d7:5b:83:70:4b:c4:d5:96:0d:e1:17:04:75:ed:a3:
8b:69:40:50:7c:ac:60:80:9c:52:a4:f5:ee:24:da:7c:77:a7:
17:ad:81:a3:30:62:30:ad:51:c6:5d:6e:ac:e0:ed:43:88:f5:
fd:03:d8:1a:82:14:17:84:24:fc:04:0b:b8:37:58:f9:83:ef:
b2:3f:30:60:c6:cb:41:56:b8:e8:12:cf:03:1d:75:28:4d:ae:
e0:3e:58:bf:01:d8:18:e3:c6:87:6b:d0:48:72:e0:14:34:16:
ed:0d:74:20:a9:17:37:b7:8c:10:c0:8d:49:a1:24:9f:f4:eb:
ba:0c:eb:6f:3a:48:b2:6b:d4:b1:9f:e6:e0:d1:de:f7:55:73:
37:90:e0:7b:60:d0:db:fa:17:94:0c:b4:57:c6:5d:c8:1b:a6:
5c:9f:32:4b:17:58:53:c8:22:70:26:d2:e3:49:f1:29:0c:9d:
2e:7c:c0:95:47:91:a1:f2:14:b9:27:d7:35:58:c0:97:8f:a9:
00:af:d1:9b:6d:8d:0c:85:64:e0:06:f6:7b:78:0d:75:23:4b:
a7:e5:b6:f2:2b:8d:a3:4a:d9:50:58:cb:5d:2a:41:eb:50:42:
bb:a9:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:36 2026 by rpki-client