
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json)
Hash identifier: ekIWk2GFIpDyw8h2Jh80s64SKvWTckZqSOEyhn3L8lY=
Subject key identifier: 01:0A:6E:6A:05:82:4E:90:3E:25:61:8B:AC:04:ED:15:BC:A3:69:35
Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Certificate serial: 0CFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
Manifest number: 0CF3
Signing time: Tue 12 May 2026 18:19:39 +0000
Manifest this update: Tue 12 May 2026 18:19:38 +0000
Manifest next update: Tue 19 May 2026 18:19:38 +0000
Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: TsHPezmqw4GbOzkTXXCvjw6RLEhajH6loi8+Mr81ZjY=)
2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: Ar9Bunxzx+IzrJnS3InP70mlYzYuHl3fsl1SQ+2WUx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Validity
Not Before: May 12 18:19:38 2026 GMT
Not After : May 19 18:19:38 2026 GMT
Subject: CN=6a036f3b-beb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:60:b3:97:9f:47:ea:3e:fe:ae:16:1a:61:
8b:b8:f5:e7:30:9a:e4:60:e0:6f:e2:5f:c7:36:c0:
ef:3c:00:3e:17:4d:b8:9c:8c:a6:b8:6f:3d:dc:f3:
36:29:92:85:e0:f4:cb:58:35:06:88:50:72:86:f7:
34:35:9a:f7:14:d1:ab:51:0b:c3:2e:26:8c:e6:37:
5e:a3:ca:f5:4f:41:6c:ae:3e:4c:9c:89:09:e3:bd:
63:8c:f6:58:00:94:71:4e:60:c1:05:6d:5f:27:73:
c2:5d:a2:90:84:63:70:b9:2d:4f:c4:2a:ba:63:eb:
95:b6:35:98:0f:74:4d:64:d8:1e:81:4e:b2:36:ac:
0c:5d:ac:1b:69:39:1b:cb:70:41:f9:ee:3d:a8:d9:
e5:6b:31:71:93:54:38:5b:5c:d6:6e:ad:54:6c:4f:
55:57:c4:d3:c3:ce:9c:be:3a:59:1a:88:7c:67:08:
29:45:ba:5e:b5:65:61:3b:30:14:9f:8a:08:02:ef:
35:ee:16:23:df:c5:ec:8c:a8:c2:d1:b3:80:77:91:
c4:75:84:e3:b3:c9:cb:7c:20:6f:e6:ce:de:d5:10:
fa:4f:41:d3:59:34:45:bf:ad:45:ca:d4:2a:d6:b2:
4d:59:c5:9a:a6:f3:3c:71:5d:4c:51:db:6a:2f:66:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:6E:6A:05:82:4E:90:3E:25:61:8B:AC:04:ED:15:BC:A3:69:35
X509v3 Authority Key Identifier:
keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:bf:93:2f:b9:84:30:e7:57:7a:34:92:dc:77:44:ff:fa:73:
44:97:de:13:13:f5:2f:a3:a7:73:8e:59:7d:54:9f:2b:02:ee:
b2:fb:fd:20:fb:3e:3d:20:39:96:7a:89:92:0b:e8:d8:01:49:
53:59:de:d3:1f:11:c6:72:f0:8a:70:fd:47:68:18:38:4e:cc:
e0:04:9f:48:cb:7c:c4:e0:8e:47:f0:a2:79:dc:b2:65:b4:05:
55:51:0c:88:9b:ec:20:6b:18:d1:37:87:91:c2:99:24:b7:de:
39:95:61:53:2b:3c:86:0a:f4:9b:4f:b7:f9:d8:63:6e:56:08:
83:98:41:b4:ed:18:6b:33:f1:bc:1a:96:da:d1:76:fc:49:4e:
9d:8a:d4:79:62:09:f3:f9:c8:f2:9b:dd:8f:b8:50:db:03:70:
ff:c3:58:dc:86:a4:e0:d2:ad:23:ce:29:00:19:ec:40:d1:a4:
ee:65:a8:9b:07:0b:44:fb:7b:b0:9e:7f:69:5d:99:58:e4:60:
e9:49:fc:37:8b:93:fa:e9:29:fb:c2:36:e5:de:fa:66:5f:78:
31:43:e0:41:e3:cb:f9:38:58:f1:f2:39:32:66:6a:67:73:be:
29:aa:73:44:5f:e9:0f:1c:14:17:9f:b8:f7:2c:b8:f0:d1:3b:
2f:f5:b1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:08 2026 by rpki-client