
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File: uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier: PQPd0nRyPytdwQ9xb9rNYFgFm4YARkMME+L73tmso4E=
Subject key identifier: F5:AB:CA:CB:06:1B:CB:62:71:9B:78:E2:A9:67:82:BF:6B:51:6B:4F
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer: /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number: 0137
Signing time: Wed 25 Mar 2026 04:45:54 +0000
Manifest this update: Wed 25 Mar 2026 04:45:53 +0000
Manifest next update: Wed 01 Apr 2026 04:45:53 +0000
Files and hashes: 1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: 3GVw068nbiqilEMi6BXtBmRpv4J98iXFPdCbup7QnDU=)
2: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: XW/veL+aykLoqzCS1Skl+u7OuNFXArsA4MwYWRJWYT4=)
3: 4749FE2AE9EC11F09B751112686F56BC.roa (hash: qQlTF9dTZWLs/G09Pvw0hcRd0j+bTrN8gGIowS7qYUU=)
4: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: QYDMiyLsJUluSn0j67IjTBM2ewHLlzSGUigM47qc2ug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Validity
Not Before: Mar 25 04:45:53 2026 GMT
Not After : Apr 1 04:45:53 2026 GMT
Subject: CN=69c36882-6623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:0f:74:4a:33:3e:83:3d:42:07:7b:6a:6b:
f6:c6:ac:25:76:4c:b0:d2:f9:43:32:eb:86:56:ac:
20:96:73:01:84:f1:58:80:81:34:3b:d0:d9:11:43:
6a:a1:90:e2:14:c9:1d:b8:48:d7:c1:37:16:18:81:
8e:07:eb:6f:48:08:28:3b:ae:7b:2a:0c:7c:91:cf:
3c:04:df:f5:b3:e9:ea:41:94:39:57:44:94:0a:6b:
30:9f:16:a0:e2:48:01:00:8a:a6:81:bd:1d:06:a5:
24:5e:ec:da:d8:63:52:58:6a:45:56:13:43:b9:1b:
aa:55:f6:0f:07:4b:64:26:5f:c8:eb:6a:ec:c3:7d:
d1:88:eb:65:34:c9:ef:6b:f2:be:e0:40:7f:25:8c:
47:4d:c1:fd:f6:21:8b:66:bd:96:14:f4:c6:af:de:
dc:be:9f:3a:ca:fc:43:fe:e4:08:aa:ef:98:4d:94:
07:3a:86:5b:6c:68:eb:d6:13:d1:9c:a0:7c:dc:4b:
d4:2e:73:b0:3c:54:a6:f7:dc:d2:e9:5c:ab:99:00:
47:9e:8f:d9:63:f9:2b:31:2e:2f:a8:74:1e:c4:19:
14:85:5e:6b:de:d5:fa:85:f6:ba:86:23:b0:fa:73:
e7:92:d7:47:16:3a:7e:6d:3d:87:85:e6:fa:a6:64:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:CA:CB:06:1B:CB:62:71:9B:78:E2:A9:67:82:BF:6B:51:6B:4F
X509v3 Authority Key Identifier:
keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:6f:80:d1:02:d2:ea:6d:4f:e0:b1:94:68:98:d1:10:48:3e:
91:9a:64:ff:c0:98:18:92:24:06:9a:78:e6:8f:eb:a8:86:16:
65:e2:1f:46:4f:62:1a:1a:cb:a2:28:1b:4a:85:05:9d:d7:ca:
2e:1f:7f:c6:db:cb:01:50:9e:a0:aa:0c:bd:af:96:c3:0b:de:
58:06:e1:df:76:5c:0c:54:0f:eb:7f:78:19:1f:14:fc:00:83:
32:a0:ad:c4:ec:7c:54:3f:5d:85:e9:e0:40:13:4a:21:9c:81:
5f:8b:f4:df:f8:84:10:55:99:f3:63:62:02:a5:86:35:7f:6f:
d5:27:36:06:36:e8:06:69:f1:85:fb:7d:cb:c7:82:11:64:6e:
42:82:cc:dc:3b:57:0d:cb:6a:a6:77:97:03:2e:3e:40:8e:73:
5a:14:38:b5:66:03:8c:07:ec:95:8d:6f:f9:64:e4:41:a2:eb:
44:04:d6:45:7d:0b:d0:22:ff:9b:7c:07:0b:ec:56:8f:a1:49:
90:6f:25:5a:de:aa:ee:52:ec:51:00:76:8d:34:e2:59:0c:45:
f6:5c:58:00:b0:2f:55:65:80:b1:95:f5:32:9b:aa:b4:0c:88:
ce:54:ac:fc:55:9a:44:10:f8:c0:14:df:e4:77:6a:e8:a6:9d:
c6:ce:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:15 2026 by rpki-client