
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
File: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft (raw, json)
Hash identifier: +UYcoesVfU24Bgl9gbOsEhyPx2cief3XtGd0reyjrOE=
Subject key identifier: 8B:2C:DB:85:62:56:BD:A9:28:00:32:9D:EF:27:49:D6:92:1F:3C:01
Authority key identifier: AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
Certificate issuer: /CN=A91B5BD4/serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
Manifest number: 028B
Signing time: Wed 13 May 2026 01:50:58 +0000
Manifest this update: Wed 13 May 2026 01:50:58 +0000
Manifest next update: Wed 20 May 2026 01:50:57 +0000
Files and hashes: 1: rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl (hash: /fiCd0y7X1F4j1KoOdZbta/nEetyIt52S+GxbN60bi4=)
2: C248DFA26DBB11EDB3635D28C4F9AE02.roa (hash: sOLSsdQvUAFIuwRy2JMiUb1p3y3QHnDAYC9uLmZDsqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5BD4, serialNumber=AD41FB827F93104B89FA6FA785F21150BE6F979A
Validity
Not Before: May 13 01:50:58 2026 GMT
Not After : May 20 01:50:57 2026 GMT
Subject: CN=6a03d902-d641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:af:c9:02:69:86:51:95:79:65:ec:b8:b3:
27:c2:5b:23:de:b5:24:61:ca:2d:e4:da:31:0a:17:
5a:47:ab:4d:31:c2:3f:33:90:80:45:94:54:a7:fa:
cf:22:c2:05:51:ee:7d:32:82:8f:51:6b:ae:5c:72:
78:22:e2:70:b1:5c:95:d3:7e:7a:86:7c:e8:12:60:
62:be:4f:99:d2:60:bd:db:d3:11:35:4d:29:62:0a:
4a:46:df:e6:71:b2:85:e8:00:68:43:37:57:fc:a6:
c5:20:91:75:e9:eb:57:7d:54:20:5c:2f:32:f4:ae:
f3:5a:58:c7:09:d8:34:e8:1d:9f:24:7d:a0:f4:ae:
fd:f4:0e:bb:d8:92:8a:87:16:5e:26:09:ab:9e:00:
29:29:9f:81:52:8c:86:25:a0:1c:22:51:20:a3:f2:
d0:04:90:15:87:5f:09:89:84:a1:bd:7d:91:d0:a1:
55:9e:d6:b9:de:22:bb:ac:b1:f4:c8:1f:c6:6e:3a:
3d:e4:1f:b0:5c:c3:00:61:d3:69:c1:c0:ae:62:82:
a0:ce:e3:fc:64:1f:7d:50:74:fb:ea:2d:dd:9e:a3:
d0:dd:26:66:34:c3:1e:eb:24:f7:fd:de:a0:20:b9:
dc:f0:19:43:59:ca:cd:0a:e0:69:fe:ac:6a:85:fc:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:DB:85:62:56:BD:A9:28:00:32:9D:EF:27:49:D6:92:1F:3C:01
X509v3 Authority Key Identifier:
keyid:AD:41:FB:82:7F:93:10:4B:89:FA:6F:A7:85:F2:11:50:BE:6F:97:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5BD4/08AD6D226DB811ED8833FA0DC4F9AE02/rUH7gn-TEEuJ-m-nhfIRUL5vl5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:65:4f:5f:f1:89:e5:a6:fb:ca:6f:68:f6:8f:df:b0:0d:c6:
a2:14:70:ef:75:e9:4c:80:12:61:1d:d1:3b:78:a3:70:f2:f3:
91:80:b4:96:35:25:b0:84:be:37:c7:4b:70:fa:5e:4b:e0:fb:
d8:3e:88:21:c9:7d:27:b0:af:9d:78:ab:8c:37:b6:42:dc:a3:
40:18:a2:af:fb:77:0b:a6:59:33:6b:66:57:08:bd:a7:29:ad:
96:49:7d:bf:6c:7f:0b:39:81:84:91:0b:ad:53:b6:9d:1d:62:
61:16:a1:33:bd:29:86:a9:7e:c1:1d:dd:85:29:c8:1a:de:b3:
1f:2b:f5:c5:03:ce:3b:5b:05:e4:dd:44:f5:b4:f2:74:3b:93:
c5:c3:43:0f:9c:f1:48:94:1d:d9:8f:da:cc:2f:16:8d:ad:e3:
65:ad:0c:2e:9f:40:ef:3d:e8:9b:ec:cc:82:8f:ca:29:9f:51:
a7:bf:10:74:a1:f7:a6:04:79:a9:3a:b1:72:f1:05:69:96:66:
62:f6:f7:09:60:3f:62:16:73:96:ec:91:9e:9d:8a:c6:6d:3c:
a9:de:88:e0:e3:5f:00:9d:23:75:28:4f:10:d1:12:93:93:e1:
46:f5:81:40:d4:13:33:96:3e:76:38:a6:85:df:0b:91:e8:5e:
96:30:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:53 2026 by rpki-client