
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json)
Hash identifier: NAqzc7KShsqdNll2ry2lq+D6X07WRIa/N2WRW1PNVJE=
Subject key identifier: 95:75:13:21:9B:A7:F6:ED:B2:4B:00:05:36:D7:F5:6E:66:43:4E:F9
Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Certificate serial: 72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
Manifest number: 70
Signing time: Wed 25 Mar 2026 07:02:33 +0000
Manifest this update: Wed 25 Mar 2026 07:02:32 +0000
Manifest next update: Wed 01 Apr 2026 07:02:32 +0000
Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: 7JL999GQFf9Xcd44PEBy1hlP3Ob1czopRVuk68EObD8=)
2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: Awm4uip9Ffjb+qp0f6kJe6UxE7s+bzDgwOH35kP6xkY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370
Validity
Not Before: Mar 25 07:02:32 2026 GMT
Not After : Apr 1 07:02:32 2026 GMT
Subject: CN=69c38889-7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:13:e8:00:bc:e6:8c:76:39:84:f0:a7:ef:
f2:46:9e:22:a3:8f:66:33:b3:c6:aa:ef:02:d8:02:
37:dd:a1:5f:82:b9:72:73:42:31:7c:e3:7e:80:95:
0e:ee:e7:3d:01:b5:0b:62:87:8b:54:d4:23:f1:bc:
9f:12:2e:dc:d1:d4:dc:54:e0:f8:c1:ed:bf:02:cb:
c9:24:01:1d:3c:e3:96:1d:48:87:fc:8d:5f:5b:84:
bb:14:23:6a:40:98:b2:99:2e:b0:bc:43:06:bc:b7:
6d:6b:f6:50:7f:8d:8a:03:ef:14:98:1e:ee:e9:fe:
6d:b9:6a:ea:c8:c6:3c:63:f1:fe:8d:60:9f:2c:05:
d2:1b:15:08:11:fa:4f:6e:62:00:f4:74:92:91:0f:
ba:4d:ad:87:b6:1a:e3:9c:5f:43:05:45:49:23:9b:
49:d3:bc:37:80:71:93:13:78:17:c6:03:0a:da:15:
d4:aa:49:89:84:7c:c3:72:aa:82:86:b6:c5:12:f0:
2b:0c:8e:2b:56:fe:e6:0b:84:15:b8:8c:1e:4d:24:
74:0d:50:d1:66:71:e0:0f:b8:d6:32:a4:dd:94:bb:
2a:d7:f3:2d:fb:d2:d8:c2:54:ca:52:36:f3:f7:44:
be:7c:ad:8b:11:26:df:e7:c5:3a:99:fc:50:34:d1:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:13:21:9B:A7:F6:ED:B2:4B:00:05:36:D7:F5:6E:66:43:4E:F9
X509v3 Authority Key Identifier:
keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:99:47:8c:2b:11:b2:b8:8d:f3:3c:29:de:b3:f4:0d:e1:8b:
f1:bb:b2:de:7c:e5:f7:79:42:d8:c2:a1:b9:48:13:fb:c3:43:
7a:0b:f0:11:a2:bd:c3:26:2f:6b:e9:08:0e:ec:5e:72:fb:3a:
93:63:c7:54:65:e7:56:5b:01:fb:13:c9:23:1a:09:a8:39:5e:
83:8e:f1:70:d1:b6:56:e0:b1:32:a9:b0:b9:b1:07:ae:95:0e:
4d:4e:dd:80:71:f7:3a:0e:f7:e7:ad:b1:4b:5a:65:a2:e4:c4:
9c:b6:5b:87:1d:77:b0:e4:88:dd:ea:09:30:78:24:27:88:d0:
5b:b9:9b:2e:36:15:1d:dc:55:93:e3:85:fd:11:a1:62:fc:68:
e1:b2:95:3d:5f:da:b1:bc:5c:ef:95:33:51:a5:da:6d:4f:c8:
76:6f:2b:5d:a6:3c:c0:97:4a:10:32:7f:b8:a7:02:a0:aa:fc:
50:b7:c7:84:ec:a4:23:63:44:7f:ad:73:2d:44:55:c3:6b:a4:
39:fd:7f:f9:df:a2:41:0b:d6:59:e1:0e:a6:6f:63:50:14:34:
fb:8a:a3:37:6d:ba:e9:eb:b5:a2:02:37:11:20:59:77:4d:fa:
dc:34:28:e5:0a:e8:5c:5c:90:7d:36:06:7e:33:21:4e:fe:96:
cd:5a:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:36 2026 by rpki-client