
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier: wjhesxURNn4e8RAdUOxbgZ1bVRq+PuhNHePBXNyX/Po=
Subject key identifier: 3A:FA:63:7F:94:B4:4C:0C:F0:0F:CF:2D:A5:ED:30:4E:0C:D2:30:0A
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial: 0237
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number: 0232
Signing time: Thu 23 Jul 2026 03:49:44 +0000
Manifest this update: Thu 23 Jul 2026 03:49:43 +0000
Manifest next update: Thu 30 Jul 2026 03:49:43 +0000
Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: l8+W7wODrMT8Z6GAnj4sQPI5EiFZy1NneD2TwjJYwCc=)
2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: js8xICC+uo4E5pknpNk0KkzoVevnkz6o6MdDYMenHmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Validity
Not Before: Jul 23 03:49:43 2026 GMT
Not After : Jul 30 03:49:43 2026 GMT
Subject: CN=6a618f57-71e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:03:47:f2:6c:cd:cf:20:79:2b:e3:7c:1d:
5a:87:49:2a:f1:af:96:08:2e:c0:b8:a4:a2:b1:8b:
eb:35:89:d3:af:af:89:2b:ac:cd:28:9f:a4:01:a7:
24:ea:76:87:a8:3b:f5:9a:02:5f:81:68:43:68:0a:
35:73:e4:ab:18:7e:bf:46:b1:b7:a0:04:17:e9:b0:
d8:8c:88:25:b7:aa:89:73:62:a6:35:67:d7:91:c8:
e0:80:ab:f7:28:2c:16:be:31:8b:2d:66:7b:31:34:
db:19:62:d6:84:e8:90:81:5a:c9:84:97:2b:cd:83:
f3:80:92:10:09:46:9c:0f:a7:99:32:a2:dd:ef:7b:
b1:a5:b7:75:82:3b:26:db:1a:38:4e:b3:b0:14:34:
9c:d3:73:0e:50:4c:ba:a1:93:31:7b:ce:80:49:f9:
7c:bc:06:34:4c:42:c7:59:4f:0b:79:79:c3:33:ef:
40:d8:57:66:56:26:00:96:b7:82:ca:b8:ea:03:53:
4f:7d:41:e3:34:bf:f9:86:30:3d:31:da:8e:93:68:
a0:1c:2a:d0:54:00:49:19:a2:dd:53:42:b7:42:f8:
46:3e:ec:a3:f6:36:41:6c:3e:00:95:63:55:59:b3:
3d:12:3a:ca:3a:64:84:64:b9:e9:b6:e8:af:d0:cf:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FA:63:7F:94:B4:4C:0C:F0:0F:CF:2D:A5:ED:30:4E:0C:D2:30:0A
X509v3 Authority Key Identifier:
keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:53:1c:74:91:0b:be:f4:f8:0f:bd:8f:2b:ca:3c:4a:01:7e:
ae:87:2d:31:8c:71:d6:00:a3:63:e2:c0:87:0e:ba:75:29:3e:
31:1e:c5:f0:38:22:ea:1a:8d:1c:9e:3d:2c:d7:93:1f:bb:1b:
53:78:11:d7:ed:5f:b5:7d:29:cc:0f:f7:2e:cc:00:a3:c2:39:
1d:e5:f4:4d:f4:1b:0e:a3:63:4b:1a:21:04:9b:c3:da:a3:d1:
3c:8a:85:b7:e6:c8:89:3b:13:cb:a2:93:cf:1f:d7:59:b4:b1:
e9:52:84:f5:ec:4a:95:06:94:80:d1:af:8c:e3:41:6d:02:8d:
97:ab:1d:b3:5a:78:22:80:f9:d7:b9:e2:27:9f:43:64:0c:f2:
34:91:93:a2:9e:0d:34:41:9c:af:9a:38:a6:73:bd:c5:42:37:
c4:0c:84:3a:e5:19:f9:c1:58:8d:55:da:58:de:78:f2:1d:dc:
33:1a:3f:2d:05:fd:07:b5:73:f7:67:9d:35:ea:27:5b:f3:5f:
3f:1f:a3:c1:cd:da:9e:e3:2f:0a:a7:45:20:a7:68:ba:00:16:
ac:45:f3:3c:b4:a8:b9:69:c0:2f:ae:b1:b9:e4:4e:fa:e5:44:
c4:f1:4c:01:6e:fe:da:20:47:20:4a:61:d5:4b:81:82:a2:a7:
8d:47:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:49 2026 by rpki-client