
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json)
Hash identifier: PtV7w1YUQNbYK0FoH57FhjbVyzvKRCFSROmZ9Yb14z4=
Subject key identifier: F8:6A:33:BA:A9:36:56:DF:BA:54:FD:BF:ED:58:B7:F7:04:F6:9D:1C
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
Manifest number: 0282
Signing time: Wed 25 Mar 2026 01:19:47 +0000
Manifest this update: Wed 25 Mar 2026 01:19:47 +0000
Manifest next update: Wed 01 Apr 2026 01:19:47 +0000
Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: qwK0dAmo3aJmC9q5U9R05OFQFiWn8axBDq6jjyr60eE=)
2: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: aDMrutb8ahCLuSdqi0ZTz55krjn044b5ILQcHz+wyqU=)
3: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: 9zvvJ3Vq0uNzCI0kJNxBKmlsAUPopTCv71aHb/f6J2A=)
4: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: PZ66UMp5duF5Xm5XD0SlInLynDFoHk/dCmXT0Ll5x3M=)
5: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: rFjIKF8O7uGzzC+ooErS3CkVvSPrki+X7Yn45I82Flw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Validity
Not Before: Mar 25 01:19:47 2026 GMT
Not After : Apr 1 01:19:47 2026 GMT
Subject: CN=69c33833-ec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:09:72:c5:1c:e4:09:d5:2b:02:60:01:70:
dd:3a:37:75:8c:70:be:67:bd:4b:7a:41:8b:89:ba:
f2:91:bc:12:f0:4b:41:39:69:6b:bb:7f:04:51:f2:
8c:ae:b4:ec:12:af:24:87:9f:6c:a2:97:de:cb:35:
97:09:48:ee:d0:61:f6:63:8b:d0:a7:e4:82:ca:da:
bf:01:d2:06:d7:f0:47:91:0b:eb:94:a9:d6:93:e5:
79:3c:6a:27:ed:e2:62:59:49:1c:0b:03:dc:8c:b8:
6e:dc:7a:66:5a:0a:21:f9:13:e3:69:fb:49:cc:f1:
68:66:6c:08:d8:89:50:2f:83:aa:7e:48:d0:c8:2a:
2b:46:03:35:a8:44:29:f7:b0:f5:ed:e6:16:00:85:
8d:dd:55:d6:eb:74:fb:40:08:6d:a1:24:99:cb:17:
8a:50:49:c5:da:44:47:de:f6:8f:69:d8:b1:08:98:
0c:8c:7d:01:ce:09:18:8a:b7:fb:c6:2b:fc:14:c0:
bc:3c:30:c2:90:3c:c8:6a:64:79:9b:4e:02:f9:a6:
3e:1c:6a:60:40:cf:b3:0c:33:31:a3:36:90:bb:31:
ae:fc:db:ce:95:2e:d0:97:9a:01:01:74:5e:fc:69:
f3:45:33:3b:50:af:74:33:8f:8f:7d:3f:10:cd:5d:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6A:33:BA:A9:36:56:DF:BA:54:FD:BF:ED:58:B7:F7:04:F6:9D:1C
X509v3 Authority Key Identifier:
keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:81:e3:94:e7:43:09:67:a3:ce:2d:7b:54:3f:5b:91:7e:d7:
d3:57:77:74:3a:ee:e2:0d:56:75:b9:e7:73:a7:05:fa:56:c5:
04:57:4f:7b:3f:84:da:4b:cd:65:dc:88:46:cf:80:ee:a4:98:
cf:99:91:60:b7:d2:2d:c0:21:86:d5:00:4c:14:9e:22:19:f1:
92:7b:c1:69:3f:df:ee:29:3e:d3:cc:2e:f1:2f:c9:16:59:a0:
ab:32:fa:11:86:98:cf:b3:0e:a2:fb:ad:47:28:2b:dd:91:5f:
9e:04:17:fc:56:a7:11:ab:6b:00:60:b3:5f:e2:c1:2b:27:89:
02:1d:99:f8:c5:51:ae:17:19:d5:2c:67:73:03:91:fe:8f:57:
4f:3f:f0:12:63:96:c0:d0:60:12:4f:e3:53:6b:f6:4e:0b:4a:
f0:8b:78:e2:29:06:37:c2:97:b5:60:57:6b:55:6e:0b:6a:00:
cd:a4:e3:fd:6d:0b:0f:87:9e:19:1e:26:62:49:6c:50:f1:60:
f0:ae:b7:a8:95:ee:d1:bf:8a:d9:0c:c9:65:b1:9d:02:df:0d:
69:f8:9e:3d:8f:7e:62:25:ae:fa:fd:27:c5:90:da:f0:1f:02:
b5:d6:50:e1:dc:c6:2d:d1:56:23:0f:24:d3:a7:0e:3d:e5:5a:
f6:d3:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:20 2026 by rpki-client