
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json)
Hash identifier: OFbR+2W3BNwdxJZGfix6bkSzpte6S2gSudyLuBfUiAU=
Subject key identifier: 31:99:F5:C0:1B:98:AA:9F:2D:4B:A9:AD:CD:74:BF:1F:6A:7F:61:45
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial: 0A5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
Manifest number: 0A3D
Signing time: Tue 12 May 2026 19:49:25 +0000
Manifest this update: Tue 12 May 2026 19:49:25 +0000
Manifest next update: Tue 19 May 2026 19:49:25 +0000
Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: uRd1jt/M1h+W5MeenG5Ji0IYu5o6e/0+6/n498Gh3zM=)
2: 927EC59C44C311F19F7AC93DBC833773.roa (hash: Uip/d0lY6t/tDJTRGALx+RqeZPX54RJt3D0no2I+Gis=)
3: 561D611CF05411F083286E06586F56BC.roa (hash: Pzy68Gxe7Cgy7ZMSa/XSvfRVRJvhlPPH9RiVHUl4ol0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653 (0xa5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Validity
Not Before: May 12 19:49:25 2026 GMT
Not After : May 19 19:49:25 2026 GMT
Subject: CN=6a038445-e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:23:46:5d:ff:67:89:7b:13:2a:a3:3c:49:
59:ae:ac:09:12:d8:64:45:ff:bc:ba:60:18:89:08:
70:91:b7:23:48:05:2d:cb:0d:f7:85:fd:d3:62:57:
09:3e:be:90:e8:d4:f3:f5:b5:d9:34:b7:64:50:f6:
5f:34:e5:dc:85:29:d9:45:58:5e:fe:74:ce:7e:37:
2f:f2:bd:4f:7a:2d:b1:72:f3:e7:e1:85:b1:d7:87:
c5:55:26:90:72:ce:d2:e5:51:2a:56:c8:cf:ab:40:
2b:07:7f:94:95:aa:bd:46:50:72:61:d1:b1:b7:66:
77:2b:d6:29:9a:bd:d3:5c:a5:63:f1:23:f7:4a:7d:
0d:81:8c:29:34:19:ed:78:22:4b:28:01:fc:b2:5d:
74:25:73:fe:08:bd:61:17:73:b6:81:fa:76:5e:ef:
ce:a2:fe:f2:d0:b8:c6:48:00:ff:42:e5:d9:f7:85:
7f:1f:7c:a5:ec:1a:9a:ce:1f:6c:db:0d:81:56:91:
ce:9a:f3:70:a8:5b:9d:4e:eb:f7:41:75:37:a7:48:
b4:a8:3d:e1:2d:56:7c:54:51:6b:8b:50:33:3f:a3:
6c:06:7a:52:64:3e:a4:57:9a:9d:f8:c6:a4:e2:b5:
cc:b4:cc:97:45:44:5c:1e:4b:ba:54:ad:0c:b8:ff:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:F5:C0:1B:98:AA:9F:2D:4B:A9:AD:CD:74:BF:1F:6A:7F:61:45
X509v3 Authority Key Identifier:
keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9f:be:ef:7f:55:9c:eb:74:0a:cc:1a:7f:6c:c5:1a:bc:36:
87:0c:46:76:68:44:b8:1b:86:30:0a:74:61:02:43:93:69:74:
82:a3:5d:37:a9:25:97:8f:fa:32:d6:29:fb:31:0b:dc:54:df:
8e:6e:71:34:d0:10:ef:5f:4a:ac:fa:43:e9:95:88:44:e2:22:
49:1b:91:93:b1:2f:e2:8a:cb:88:27:89:27:e7:ba:4c:b8:b4:
94:b2:9b:ae:14:87:22:db:92:5f:6e:98:a2:33:5e:43:d1:3a:
2b:0b:3b:07:0f:88:ce:97:40:90:66:0a:50:ac:b8:4d:95:a8:
a1:f7:c8:11:38:cb:f2:61:82:d8:0f:28:f6:f2:6d:70:51:05:
a6:ba:5f:e7:68:17:89:c7:76:68:14:83:f3:73:11:94:bb:ef:
4f:ad:3d:e4:1b:c9:ea:52:6c:66:01:3b:42:9b:57:fb:31:1e:
38:97:0f:97:65:af:19:3b:06:b5:83:f9:c9:8b:ff:ae:7c:0c:
da:05:82:cd:8f:52:6d:c2:45:27:83:53:b0:cd:f2:54:46:36:
ab:a0:70:4b:8f:42:ca:61:a2:6b:e8:43:ae:c0:ac:a7:1a:34:
83:37:db:01:ed:d3:b2:45:a9:c0:7e:78:e6:07:75:f4:8e:63:
88:6b:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:54:31 2026 by rpki-client