
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
File: UqAK42gJYToMmRW4LS7dewR_BBY.mft (raw, json)
Hash identifier: GAP31PIqH/et0ZpNzCbUo+jVuyFBOJhZST3aJEQ9hDM=
Subject key identifier: 58:87:A5:C0:3C:7E:DF:20:2B:1B:4D:26:C4:89:E6:DF:78:5D:01:14
Authority key identifier: 52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
Certificate issuer: /CN=A91CC4A7/serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
Manifest number: 53
Signing time: Wed 25 Mar 2026 07:22:00 +0000
Manifest this update: Wed 25 Mar 2026 07:21:59 +0000
Manifest next update: Wed 01 Apr 2026 07:21:59 +0000
Files and hashes: 1: UqAK42gJYToMmRW4LS7dewR_BBY.crl (hash: I9/mDw1MXr/zgvcS+9FP4dwhVfgmspMZg64nIIlJnp8=)
2: 94CEBFFEAB4511F09AA0C458C4F9AE02.roa (hash: VnxPQSSZH/jrUJ6zmg9TBmjFmVAPpsz93eEIgIGKblg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl
rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC4A7, serialNumber=52A00AE36809613A0C9915B82D2EDD7B047F0416
Validity
Not Before: Mar 25 07:21:59 2026 GMT
Not After : Apr 1 07:21:59 2026 GMT
Subject: CN=69c38d18-1119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:bc:59:4a:73:87:23:ac:37:9f:06:77:ac:
d2:9b:b3:c1:54:fd:33:80:78:a0:94:cf:7a:7f:88:
38:bc:a8:76:b6:a6:58:1e:22:e4:f4:4f:cc:ff:9c:
27:aa:34:0a:52:43:58:d0:68:6a:49:2a:1c:84:62:
95:f5:f1:ee:b5:2d:91:8b:7c:78:b3:42:18:43:9d:
38:e6:20:1f:46:31:64:d9:9d:db:6a:a4:18:db:fd:
ef:7c:96:34:b7:21:a8:ce:7e:06:e1:fc:4c:3f:b0:
27:aa:c0:90:74:30:a6:63:8f:0b:ca:16:93:77:23:
32:ec:69:00:01:d5:6e:7f:d6:fb:4d:9d:f6:50:30:
57:82:cd:ba:cd:01:e9:06:3f:ae:12:2c:ad:7e:20:
ee:78:b1:0b:57:a6:25:7f:17:55:4d:0f:4e:9d:6b:
9e:2e:63:73:9f:9b:fc:f5:24:a1:ba:bb:ca:f8:6c:
4e:5f:79:57:4f:3a:c0:18:b7:5b:c8:57:54:72:7f:
9c:f0:ef:30:da:1f:f9:ee:a8:80:95:01:a0:29:ab:
d7:94:a0:07:ca:75:5a:00:ac:21:36:80:ec:40:09:
97:bb:60:91:84:cc:82:2f:1d:88:83:c8:96:49:ae:
53:d1:14:fa:fa:88:9a:88:5f:14:37:67:87:c7:5f:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:A5:C0:3C:7E:DF:20:2B:1B:4D:26:C4:89:E6:DF:78:5D:01:14
X509v3 Authority Key Identifier:
keyid:52:A0:0A:E3:68:09:61:3A:0C:99:15:B8:2D:2E:DD:7B:04:7F:04:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UqAK42gJYToMmRW4LS7dewR_BBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/058DD6AEAB4511F0843D0657C4F9AE02/UqAK42gJYToMmRW4LS7dewR_BBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:aa:d9:d5:ed:1d:aa:6e:0f:51:69:3a:c3:71:bd:7b:2d:2d:
2a:68:f9:0d:63:b6:69:68:86:06:85:5b:31:29:bb:a9:da:47:
c5:f4:90:c7:2c:e3:2d:58:69:ee:21:33:2b:84:9f:8f:2a:43:
8b:da:0a:3b:48:4d:e4:cf:d3:6d:ad:e8:98:1a:07:4d:d0:8f:
39:1b:e3:01:f8:75:e7:db:8a:fb:af:0f:d1:ef:97:af:83:6e:
4d:ce:d5:e2:4e:56:eb:0e:ec:a6:b7:23:bf:ac:ce:2a:8d:75:
d2:e3:ac:fa:98:9e:18:6d:18:d5:c2:d3:fa:26:e2:4f:eb:5e:
19:b4:4e:7a:ae:c5:12:c2:b1:e9:dd:d4:47:66:09:20:da:ec:
71:e4:40:e9:9c:48:2c:f1:d7:6f:b3:f5:c7:6c:15:bd:c9:ff:
28:c9:b7:9c:c3:3e:7f:ce:ea:4f:09:ec:c4:51:7b:ba:3d:ab:
d8:bf:c3:bc:8a:98:85:68:aa:26:81:1d:ad:8f:38:c6:75:fd:
b7:21:c3:9f:87:94:39:88:5a:f7:53:cd:3b:60:f3:8b:de:b1:
3a:44:85:ff:2a:68:02:2f:54:92:96:8a:97:c4:f1:e8:e9:ad:
84:d1:c6:26:31:33:cd:3f:6b:25:fe:e2:5f:45:e9:c5:bc:be:
d8:d6:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:49 2026 by rpki-client