
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
File: ujgt6jovW4xMIgXskp9gG-NP538.mft (raw, json)
Hash identifier: yGxwxD0fJPpHJIq7GADSZ8q5GzKkRxRME+UEN91Lyls=
Subject key identifier: A3:DA:E0:6C:6A:CD:70:33:86:9D:FC:C9:F0:1F:25:30:DE:A3:18:D5
Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Certificate serial: 0D23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
Manifest number: 0D17
Signing time: Wed 22 Jul 2026 18:29:11 +0000
Manifest this update: Wed 22 Jul 2026 18:29:10 +0000
Manifest next update: Wed 29 Jul 2026 18:29:10 +0000
Files and hashes: 1: ujgt6jovW4xMIgXskp9gG-NP538.crl (hash: 26Zmw59izN8OJhHstPIKVwwnlshd6RVcDZODdYAB4KE=)
2: 52E56FA806C711EA84978821C4F9AE02.roa (hash: Ar9Bunxzx+IzrJnS3InP70mlYzYuHl3fsl1SQ+2WUx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F
Validity
Not Before: Jul 22 18:29:10 2026 GMT
Not After : Jul 29 18:29:10 2026 GMT
Subject: CN=6a610bf7-2b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:05:0f:a9:2c:2f:3c:d0:71:24:0e:eb:83:
27:da:2e:c9:2a:50:ba:26:09:20:80:cb:8d:ea:76:
a7:92:24:78:e9:74:70:9c:2f:6b:4c:ed:e1:b1:ba:
b1:c8:7d:ac:cc:f6:49:82:7c:00:bf:4e:28:33:a7:
9b:b5:0a:01:85:58:0d:66:f2:29:bc:b0:44:ac:c3:
12:75:e0:8e:59:17:bc:33:c1:0c:a4:5c:de:79:a9:
9d:68:d0:1d:c7:1d:88:bc:36:5a:bb:5c:09:b3:c4:
5a:92:b5:1e:d7:66:7d:51:f1:37:35:6c:79:c7:24:
92:60:27:f3:2f:12:ec:02:38:8a:f9:0b:52:ab:20:
6c:b8:c4:20:bb:b4:68:ea:93:85:2c:f4:4f:92:07:
49:49:9e:ca:ea:af:31:07:60:db:ec:12:3d:6f:e4:
4e:c8:36:c5:18:eb:f0:b9:c7:3a:c7:4b:a2:34:3c:
6c:5a:a4:e1:0a:e3:9a:e7:94:77:79:af:ce:88:68:
30:27:14:d4:1d:05:9b:95:fe:77:5e:20:41:35:03:
da:14:00:90:8c:5c:dd:7f:c1:25:34:95:bd:3e:69:
e7:f1:fa:79:44:c1:62:0d:1f:73:07:ec:85:af:dc:
af:ad:dc:fa:4e:96:1a:e3:51:c0:09:0a:0c:0d:34:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:E0:6C:6A:CD:70:33:86:9D:FC:C9:F0:1F:25:30:DE:A3:18:D5
X509v3 Authority Key Identifier:
keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a5:3d:60:e1:4c:af:13:43:11:d3:60:c7:6a:d3:ec:8e:dc:
7c:4c:ae:15:6c:08:d4:bf:54:d3:36:dd:59:84:99:be:ae:db:
ca:ca:10:a2:d8:6a:e9:39:c3:b7:fd:f9:29:22:65:b6:32:01:
89:d9:d5:b2:80:34:94:dd:25:c2:71:8b:e2:2d:62:64:1e:b3:
0c:fe:95:f6:1f:02:26:8a:ff:58:54:84:1b:0b:f4:d8:2a:ed:
0a:e0:27:c0:64:5d:c2:6d:3e:d0:a1:98:45:d7:75:f2:94:86:
4a:f0:24:7b:0b:d5:5d:2e:12:c3:ee:cd:88:43:89:0c:ce:29:
65:d9:96:de:c2:36:4d:c2:74:20:a2:26:ab:b8:6b:3d:9b:7f:
9d:88:04:dc:7e:b0:70:72:bb:f7:f8:5a:29:c4:1b:da:b1:fd:
ae:3e:88:a8:99:26:ed:cc:b0:93:ea:44:3f:16:16:2f:1d:7a:
b1:dc:fa:a8:b4:26:fc:5f:a1:b0:80:12:16:6f:dc:70:1c:e1:
c7:7c:0c:2a:5b:fc:58:b3:d5:db:d3:56:e0:d8:03:4e:2f:be:
15:f7:33:2c:25:3d:ef:da:72:fa:7a:b2:45:07:22:25:ce:74:
a9:d6:1f:6a:90:2f:37:bb:97:84:d3:a3:9b:9c:fd:2b:3a:d1:
ce:67:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:13:44 2026 by rpki-client