
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json)
Hash identifier: wSrWNxbnyNYUh+3f9JgFSwbHe6BPJcjBf34vILyHH1g=
Subject key identifier: 24:91:2C:1C:7B:31:95:FC:8E:21:D2:60:C6:C8:9C:2F:40:56:09:63
Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
Manifest number: 01D8
Signing time: Thu 23 Jul 2026 05:02:29 +0000
Manifest this update: Thu 23 Jul 2026 05:02:29 +0000
Manifest next update: Thu 30 Jul 2026 05:02:29 +0000
Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: c3nAj2WQ+MWy73l4KfyzC61eN6EcuAtkmQlDwxM2Zps=)
2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=)
3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D
Validity
Not Before: Jul 23 05:02:29 2026 GMT
Not After : Jul 30 05:02:29 2026 GMT
Subject: CN=6a61a065-322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:3a:e8:56:cc:c4:3c:b1:d3:e0:b7:5a:be:
eb:a6:7d:cf:7e:de:77:54:c1:4d:a4:a2:b4:5e:a7:
90:55:cb:6d:98:f7:60:75:8e:e2:7c:a3:a5:05:fc:
57:77:36:af:82:7d:61:22:26:67:57:63:16:c1:1e:
62:f2:7c:cd:ba:62:c4:0f:64:5c:67:e8:7e:10:d7:
ee:91:8e:ad:dd:14:da:4f:ed:f2:0f:16:71:4f:97:
7d:3f:61:55:a7:40:ad:22:56:aa:38:d2:de:ea:48:
a4:30:ca:d7:81:73:8b:4c:cb:1c:42:71:4f:75:6b:
f4:30:8e:58:3c:d6:f3:88:9e:d0:60:4f:dd:5d:32:
7d:b6:b0:5a:2d:a3:ef:c4:f7:a2:58:fc:ee:20:65:
68:85:2c:6b:11:04:b0:d9:05:26:78:c7:a9:8d:5a:
02:d3:79:b1:f4:d8:52:41:a4:be:11:f3:f2:9f:22:
45:49:01:7f:e4:4c:bc:c0:b4:40:65:b9:1d:65:28:
28:b8:13:e1:ce:c8:34:7a:fa:14:a6:aa:50:3b:2d:
9d:a7:70:74:6c:ac:90:e6:a2:f9:4b:1f:13:f3:a5:
6f:3a:95:4d:70:21:af:65:29:23:08:ca:54:e5:9b:
fc:1b:f1:c0:4b:80:8a:b2:d6:30:e0:7c:6b:1b:89:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:91:2C:1C:7B:31:95:FC:8E:21:D2:60:C6:C8:9C:2F:40:56:09:63
X509v3 Authority Key Identifier:
keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bf:7b:ad:e0:7b:78:ee:d0:bb:5a:3f:82:e7:a0:f1:fc:9e:
80:dc:63:76:d1:0d:7d:b1:e2:36:b3:dc:32:1e:e7:88:e9:16:
91:71:0b:18:14:e3:9a:ab:c2:2e:fe:d2:66:1f:26:cc:34:bc:
e7:3c:a7:a6:15:0d:ed:c0:1f:00:ee:b1:36:35:a7:c9:dc:ca:
0d:75:ee:f1:9c:cb:c1:0c:40:15:dc:3d:23:74:9c:ac:0c:0e:
ed:ab:4a:44:4b:40:1c:f2:ae:59:4b:84:e9:0b:00:8c:b6:bd:
cd:31:0d:3e:42:b3:bc:fa:bc:1e:1d:69:51:a8:53:1d:e6:b3:
af:08:64:65:01:21:3c:70:aa:98:e6:1b:c0:07:1a:25:2c:c9:
ab:d8:e5:0e:d3:10:8c:b3:28:c2:aa:39:b6:0f:e4:42:ee:a6:
17:cb:b4:3e:94:06:4e:db:3a:b9:4a:ac:c7:d2:ca:36:20:dd:
23:f1:9f:89:2b:31:d4:ae:ba:25:45:45:90:b3:ee:4f:2f:94:
64:e1:08:2b:c5:ef:75:a6:63:b7:5f:d1:c6:34:e4:81:b0:5d:
3d:70:95:3b:f5:f5:ba:10:55:fb:15:ab:86:de:71:78:9f:04:
4f:36:94:2f:2a:94:1e:eb:28:35:cb:2e:07:31:c7:bb:15:ac:
63:75:b0:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2
RjZDNTcyNEQwHhcNMjYwNzIzMDUwMjI5WhcNMjYwNzMwMDUwMjI5WjAYMRYwFAYD
VQQDEw02YTYxYTA2NS0zMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQE66FbMxDyx0+C3Wr7rpn3Pft53VMFNpKK0XqeQVcttmPdgdY7ifKOlBfxX
dzavgn1hIiZnV2MWwR5i8nzNumLED2RcZ+h+ENfukY6t3RTaT+3yDxZxT5d9P2FV
p0CtIlaqONLe6kikMMrXgXOLTMscQnFPdWv0MI5YPNbziJ7QYE/dXTJ9trBaLaPv
xPeiWPzuIGVohSxrEQSw2QUmeMepjVoC03mx9NhSQaS+EfPynyJFSQF/5Ey8wLRA
ZbkdZSgouBPhzsg0evoUpqpQOy2dp3B0bKyQ5qL5Sx8T86VvOpVNcCGvZSkjCMpU
5Zv8G/HAS4CKstYw4HxrG4mijwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSRLBx7
MZX8jiHSYMbInC9AVgljMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG
RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy
Zjlpei1DNkxPTzl2YkZjazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAir97reB7eO7Qu1o/gueg8fyegNxjdtENfbHiNrPcMh7niOkWkXELGBTjmqvC
Lv7SZh8mzDS85zynphUN7cAfAO6xNjWnydzKDXXu8ZzLwQxAFdw9I3ScrAwO7atK
REtAHPKuWUuE6QsAjLa9zTENPkKzvPq8Hh1pUahTHeazrwhkZQEhPHCqmOYbwAca
JSzJq9jlDtMQjLMowqo5tg/kQu6mF8u0PpQGTts6uUqsx9LKNiDdI/GfiSsx1K66
JUVFkLPuTy+UZOEIK8XvdaZjt1/RxjTkgbBdPXCVO/X1uhBV+xWrht5xeJ8ETzaU
LyqUHusoNcsuBzHHuxWsY3WwEA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:53:59 2026 by rpki-client