
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier: aqJZaO8iH137pmFJjHCA2B2D/bIx1cJXoZpExGfTouI=
Subject key identifier: A4:53:F2:29:6B:54:CA:0A:E3:9A:0D:B2:99:77:81:DB:8D:E7:DE:69
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number: 01F5
Signing time: Fri 27 Mar 2026 02:41:28 +0000
Manifest this update: Fri 27 Mar 2026 02:41:28 +0000
Manifest next update: Fri 03 Apr 2026 02:41:28 +0000
Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: RvEfKkQAt1TIbKVMVRzpHvcSGIyX8y3l570QH4+EAfo=)
2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: eST/7ru+iHKnEdTD5pnHYt5uKaA+HMo9KeUcqRaQFgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Validity
Not Before: Mar 27 02:41:28 2026 GMT
Not After : Apr 3 02:41:28 2026 GMT
Subject: CN=69c5ee58-fdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:27:0d:e0:5b:f1:a3:99:9a:90:45:fd:05:
5e:d6:c5:e4:71:db:40:b4:07:c3:29:c9:c3:e3:0d:
99:47:23:a6:fa:93:12:49:e6:c3:20:a0:e5:a7:ef:
31:e6:ca:b9:ef:95:29:e6:94:ea:f5:3b:02:3c:80:
65:d4:28:b3:c6:c6:a7:80:f2:e0:b5:ff:b8:58:ac:
10:96:3e:dd:53:b7:6e:a7:07:de:69:d4:f2:ee:6a:
5c:78:19:81:00:52:9f:ac:b1:43:8a:55:11:61:da:
99:40:9d:ac:49:c9:f4:e1:d3:3e:44:f8:d1:bd:a3:
76:53:01:66:63:3f:ae:37:05:04:10:84:83:43:cd:
66:54:7c:bb:bd:a4:a2:75:00:0e:b7:f1:7a:89:14:
11:8e:91:64:be:e4:9b:ce:d6:ee:74:15:1d:b0:4a:
87:96:eb:cf:93:03:18:b5:72:a6:04:58:f8:d3:65:
dc:6f:7c:90:a8:51:83:1c:d0:0c:ac:81:f5:26:29:
b8:4e:99:28:dd:87:ea:3e:42:76:ea:8e:76:30:a7:
dc:73:38:e9:62:21:a8:65:de:a0:6b:b2:0c:d6:b7:
93:9a:18:7e:d9:d0:65:bb:d6:b8:45:46:47:77:d2:
20:23:5e:a2:d5:a1:b5:a9:45:bd:2c:18:34:ef:b0:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:F2:29:6B:54:CA:0A:E3:9A:0D:B2:99:77:81:DB:8D:E7:DE:69
X509v3 Authority Key Identifier:
keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:cc:a4:c7:0e:eb:56:fe:39:c3:58:75:e8:5f:9e:35:46:e3:
20:cd:fa:d2:f5:53:9f:fa:68:4e:13:46:c7:88:86:d0:8a:19:
da:a1:48:c3:55:81:2c:5e:90:72:64:21:aa:9d:27:f7:ec:f2:
f2:03:4e:f2:6c:a8:ba:2f:4c:b3:43:cf:37:ca:0c:b7:d3:ae:
b8:33:3b:0d:ba:a6:9a:60:6d:a0:6a:62:85:55:37:ac:19:29:
96:79:21:11:08:82:8c:71:24:7f:42:f5:7c:cb:8b:ff:4d:4b:
60:6a:0b:d6:63:65:de:79:51:7d:3d:a9:71:5b:83:d0:24:3f:
fa:a4:2f:6c:7f:5d:dd:f1:6a:c0:50:db:13:45:8e:d0:d7:50:
ff:8b:8c:0d:cc:dd:6d:1c:40:a2:16:7d:8e:0e:d5:3c:96:cb:
45:1b:95:84:4c:83:65:32:48:b2:c2:51:cf:e6:45:c1:d8:7a:
74:d6:98:a8:af:45:3f:a9:f5:10:d6:10:18:54:74:52:9f:8a:
0f:fc:90:9b:57:31:86:24:18:f4:a3:82:50:37:60:88:88:1b:
64:2e:57:d8:89:4d:a2:63:d3:58:99:3f:49:4e:7b:dc:33:c9:
d4:c6:41:ec:bc:ec:ea:ce:87:fb:44:de:10:32:24:7e:35:75:
de:45:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:42:00 2026 by rpki-client