
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json)
Hash identifier: 0gf7YoEiDp4vcLdIoZZ8O+a4r5HmSj5OE7FlHw+LXWI=
Subject key identifier: A1:99:3D:98:1D:35:DB:A3:A6:9D:48:98:B2:73:2B:E2:DD:69:29:55
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
Manifest number: AE
Signing time: Thu 23 Jul 2026 08:58:24 +0000
Manifest this update: Thu 23 Jul 2026 08:58:23 +0000
Manifest next update: Thu 30 Jul 2026 08:58:23 +0000
Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: GSqpso4odvhrtfo7/3rthJwM7Y0W2AGv4c3ZS/CPh1k=)
2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: VRMri+JmyP84ggb4uS0Bz/xwX6nfPL1abCeEWonYac4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Validity
Not Before: Jul 23 08:58:23 2026 GMT
Not After : Jul 30 08:58:23 2026 GMT
Subject: CN=6a61d7af-3173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:cf:c0:a8:9e:2e:ec:86:a8:0d:dd:f8:89:
84:a0:e3:22:eb:be:09:4c:99:d0:8f:0b:5d:2e:93:
40:a2:de:45:ee:2b:81:7a:ce:ef:2f:bb:56:01:e8:
4e:7c:ba:60:ae:c4:41:9c:3e:4b:1d:cc:b0:7d:0c:
ee:e9:23:c2:96:a6:89:08:bd:d1:54:a1:6c:01:cf:
87:e4:63:ac:7e:5a:a5:3f:cb:93:4f:4b:1d:79:fb:
19:ea:3e:be:5d:74:73:ce:b8:86:c7:36:1b:5f:5d:
11:13:ec:56:9b:e5:b9:6c:60:9f:7c:90:9d:2b:cc:
8f:5d:ae:09:63:0f:f9:1e:89:dd:c0:e1:2e:5b:56:
3a:c7:2d:71:3d:0b:22:bc:2e:23:c1:c9:32:29:fc:
0b:df:86:38:e1:53:e1:0e:13:ae:82:29:05:8f:7b:
a1:bb:e0:cd:6a:04:26:d7:d0:f2:dd:4f:b6:e0:48:
df:e6:68:05:14:cc:b9:78:f8:22:32:be:fd:71:b7:
90:cf:bf:a2:96:51:bf:db:82:b3:ce:1e:53:8d:7b:
fd:66:f7:a2:7b:89:9f:ee:7c:2e:2d:9e:85:4b:bf:
9c:d6:69:f3:1e:f9:31:90:dc:3d:a8:8c:57:87:6a:
22:95:50:7f:0e:c0:bf:2b:c2:1e:0c:5e:c6:20:52:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:3D:98:1D:35:DB:A3:A6:9D:48:98:B2:73:2B:E2:DD:69:29:55
X509v3 Authority Key Identifier:
keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:80:91:4e:41:13:6b:dd:35:ce:3d:30:09:54:64:a2:06:d0:
bb:c6:d0:f5:3e:44:a3:1d:e8:ef:f6:20:e6:56:3e:00:9d:7d:
ca:47:76:b3:e3:c0:68:09:9e:ac:57:80:77:a4:29:0a:8d:0d:
c3:40:de:f5:08:92:38:7a:53:c8:45:47:c6:60:fe:a7:87:ad:
3f:e6:fa:16:14:c2:78:5b:73:ba:37:7d:9d:aa:4c:b7:3b:dc:
f2:d7:42:2e:dc:39:b3:d6:5d:27:a3:53:a0:f3:d5:f7:63:ae:
df:51:ac:b8:c4:80:ef:06:0d:cb:92:99:ad:00:ca:93:19:7a:
31:59:90:6b:05:e5:6c:0b:dd:bb:1b:5c:fd:ed:16:16:b4:81:
61:46:6f:9d:d5:4a:59:b2:ec:99:85:83:1d:66:69:89:98:5d:
b6:0d:80:33:36:a4:13:28:97:0e:ad:c0:f8:82:9c:e2:0a:a3:
56:dc:e5:4e:ec:62:04:73:bc:9c:82:4d:27:14:b2:4c:da:4e:
d1:c7:96:06:98:6c:d3:3e:1f:84:db:de:2c:cc:a5:eb:fb:a9:
f1:e5:ac:cf:00:e1:86:f5:ae:b2:55:0e:3e:47:37:f1:78:cb:
6f:bb:4a:81:6e:62:39:5d:c3:3c:43:c2:5d:4d:75:ea:2f:41:
87:28:ae:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc0MDkxMTAvBgNVBAUTKDUyMTQ5MjEwNEFCMUE4QkJCRUJEODBBOTk2MjlENEUy
RTY2MzIzNzAwHhcNMjYwNzIzMDg1ODIzWhcNMjYwNzMwMDg1ODIzWjAYMRYwFAYD
VQQDEw02YTYxZDdhZi0zMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwgPPwKieLuyGqA3d+ImEoOMi674JTJnQjwtdLpNAot5F7iuBes7vL7tWAehO
fLpgrsRBnD5LHcywfQzu6SPClqaJCL3RVKFsAc+H5GOsflqlP8uTT0sdefsZ6j6+
XXRzzriGxzYbX10RE+xWm+W5bGCffJCdK8yPXa4JYw/5HondwOEuW1Y6xy1xPQsi
vC4jwckyKfwL34Y44VPhDhOugikFj3uhu+DNagQm19Dy3U+24Ejf5mgFFMy5ePgi
Mr79cbeQz7+illG/24Kzzh5TjXv9Zveie4mf7nwuLZ6FS7+c1mnzHvkxkNw9qIxX
h2oilVB/DsC/K8IeDF7GIFKjDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGZPZgd
Ndujpp1ImLJzK+LdaSlVMB8GA1UdIwQYMBaAFFIUkhBKsai7vr2AqZYp1OLmYyNw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQwOS80MUQ1MkQ0NjdD
QjYxMUYwOEM1Rjc3NjlDNEY5QUUwMi9VaFNTRUVxeHFMdS12WUNwbGluVTR1WmpJ
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VoU1NFRXF4cUx1LXZZQ3BsaW5VNHVaakkzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzQwOS80MUQ1MkQ0NjdDQjYxMUYwOEM1Rjc3NjlDNEY5QUUwMi9VaFNTRUVxeHFM
dS12WUNwbGluVTR1WmpJM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOoCRTkETa901zj0wCVRkogbQu8bQ9T5Eox3o7/Yg5lY+AJ19ykd2s+PAaAme
rFeAd6QpCo0Nw0De9QiSOHpTyEVHxmD+p4etP+b6FhTCeFtzujd9napMtzvc8tdC
Ltw5s9ZdJ6NToPPV92Ou31GsuMSA7wYNy5KZrQDKkxl6MVmQawXlbAvduxtc/e0W
FrSBYUZvndVKWbLsmYWDHWZpiZhdtg2AMzakEyiXDq3A+IKc4gqjVtzlTuxiBHO8
nIJNJxSyTNpO0ceWBphs0z4fhNveLMyl6/up8eWszwDhhvWuslUOPkc38XjLb7tK
gW5iOV3DPEPCXU116i9Bhyiu6g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:35 2026 by rpki-client