
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
File: uOpx0E7INugYCHPJ6dQM0uNVNwE.mft (raw, json)
Hash identifier: wgNj569KWmA0bX8gGCsvTdOcc1+SIB2CaEXJO+qlTnA=
Subject key identifier: C4:CD:52:21:58:3A:4A:BE:8A:8E:7F:71:DE:A1:90:3C:33:EA:16:4F
Authority key identifier: B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
Certificate issuer: /CN=A91CCF10/serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Certificate serial: 02B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
Manifest number: 029B
Signing time: Wed 13 May 2026 01:45:05 +0000
Manifest this update: Wed 13 May 2026 01:45:04 +0000
Manifest next update: Wed 20 May 2026 01:45:04 +0000
Files and hashes: 1: uOpx0E7INugYCHPJ6dQM0uNVNwE.crl (hash: T3xk2gvgYinBhEd4owF+VQ1hL1XLPvl3mUSc27ZAT80=)
2: CC74271E8A8711ED98572D26C4F9AE02.roa (hash: 9zvvJ3Vq0uNzCI0kJNxBKmlsAUPopTCv71aHb/f6J2A=)
3: 4D54B546616411F0B65D5F70C4F9AE02.roa (hash: rFjIKF8O7uGzzC+ooErS3CkVvSPrki+X7Yn45I82Flw=)
4: 82B99B1C6B9F11F09CD3A334C4F9AE02.roa (hash: PZ66UMp5duF5Xm5XD0SlInLynDFoHk/dCmXT0Ll5x3M=)
5: C9E35E848A8711ED98572D26C4F9AE02.roa (hash: aDMrutb8ahCLuSdqi0ZTz55krjn044b5ILQcHz+wyqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCF10, serialNumber=B8EA71D04EC836E8180873C9E9D40CD2E3553701
Validity
Not Before: May 13 01:45:04 2026 GMT
Not After : May 20 01:45:04 2026 GMT
Subject: CN=6a03d7a0-f4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:a9:34:a0:78:1e:ad:32:42:ed:65:e7:8c:
42:45:fe:29:7f:02:6c:4d:da:fe:9e:b5:d3:15:29:
34:59:26:26:c9:1f:b6:c5:af:63:06:43:24:b5:65:
12:c7:21:43:95:06:06:73:4c:05:05:4c:25:3b:bf:
1e:bc:a2:05:39:23:a9:a1:44:5f:b7:98:bf:0f:b8:
cd:5c:6a:26:45:2a:54:80:03:e8:e1:93:c7:55:20:
8d:db:69:0f:ef:d4:16:9d:21:54:e9:88:c5:a9:d9:
e5:b5:a7:08:60:36:44:b0:ea:04:ed:c2:e6:be:43:
b6:a0:2f:23:5e:a6:73:c6:3e:3e:93:7f:0c:45:e7:
f9:39:20:1c:e8:9e:2f:f9:a6:88:1b:ca:00:48:c2:
bd:a7:ee:fb:53:36:ae:e8:2f:6c:d9:6a:85:84:c0:
e2:1d:04:26:9a:d5:b3:9f:8c:54:e2:32:b0:08:7b:
7c:17:a2:1f:d5:4d:20:0d:f2:e7:15:76:cd:18:1c:
a9:8e:ca:5e:99:9b:c3:d5:e2:47:92:9a:4b:09:38:
ec:d9:de:65:b0:4a:6f:69:c8:e9:9f:fa:7b:56:22:
ea:97:30:e4:06:6e:e8:dc:c8:35:0b:70:f6:ae:d8:
2c:52:d1:99:d5:72:43:aa:af:74:09:2e:ef:17:1f:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CD:52:21:58:3A:4A:BE:8A:8E:7F:71:DE:A1:90:3C:33:EA:16:4F
X509v3 Authority Key Identifier:
keyid:B8:EA:71:D0:4E:C8:36:E8:18:08:73:C9:E9:D4:0C:D2:E3:55:37:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOpx0E7INugYCHPJ6dQM0uNVNwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF10/EC67333E609011EDA6791A0DC4F9AE02/uOpx0E7INugYCHPJ6dQM0uNVNwE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:10:80:4f:91:1f:22:23:7b:8b:1d:ea:9e:fa:4a:93:b6:
d2:ec:ae:99:98:49:a3:ad:9f:25:ee:81:46:f2:a7:3c:cc:ed:
cd:c1:70:03:b4:db:23:83:98:34:35:d2:e8:0b:ba:01:b8:7e:
d7:18:f2:aa:fb:2e:71:93:69:82:d2:aa:8e:c2:e3:b7:ba:b3:
26:51:9b:fd:4f:22:47:c0:3f:64:a1:87:53:9f:d2:d7:bc:ab:
a2:e0:e5:27:0d:b1:76:b3:92:ba:c6:8b:0a:5d:fd:ef:54:aa:
11:81:e0:ef:26:10:27:1b:4e:be:d9:ca:c6:40:28:8f:ac:fa:
11:97:7d:28:90:f9:e0:58:70:ef:42:58:3b:37:66:30:ac:ca:
4a:6f:cc:01:47:b7:55:a2:62:26:1b:18:23:8e:59:b5:d1:db:
8d:90:a5:0b:38:51:f3:d4:fa:57:a1:b8:ac:0d:05:12:c9:e3:
5a:cd:d3:44:2d:fc:50:55:aa:bd:54:0e:23:c0:44:c4:89:cc:
1a:61:41:7b:07:dc:3d:de:7c:be:85:9d:c2:17:3c:74:94:90:
62:86:7f:13:73:de:bc:02:8c:6c:1c:60:cc:03:8b:63:5d:af:
83:09:2b:6a:75:75:ac:bc:9d:67:71:b3:76:43:9f:d1:e1:7f:
12:80:a5:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NGMTAxMTAvBgNVBAUTKEI4RUE3MUQwNEVDODM2RTgxODA4NzNDOUU5RDQwQ0Qy
RTM1NTM3MDEwHhcNMjYwNTEzMDE0NTA0WhcNMjYwNTIwMDE0NTA0WjAYMRYwFAYD
VQQDEw02YTAzZDdhMC1mNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnPapNKB4Hq0yQu1l54xCRf4pfwJsTdr+nrXTFSk0WSYmyR+2xa9jBkMktWUS
xyFDlQYGc0wFBUwlO78evKIFOSOpoURft5i/D7jNXGomRSpUgAPo4ZPHVSCN22kP
79QWnSFU6YjFqdnltacIYDZEsOoE7cLmvkO2oC8jXqZzxj4+k38MRef5OSAc6J4v
+aaIG8oASMK9p+77Uzau6C9s2WqFhMDiHQQmmtWzn4xU4jKwCHt8F6If1U0gDfLn
FXbNGBypjspemZvD1eJHkppLCTjs2d5lsEpvacjpn/p7ViLqlzDkBm7o3Mg1C3D2
rtgsUtGZ1XJDqq90CS7vFx+hzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTNUiFY
Okq+io5/cd6hkDwz6hZPMB8GA1UdIwQYMBaAFLjqcdBOyDboGAhzyenUDNLjVTcB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YxMC9FQzY3MzMzRTYw
OTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51Z1lDSFBKNmRRTTB1TlZO
d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VPcHgwRTdJTnVnWUNIUEo2ZFFNMHVOVk53RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0YxMC9FQzY3MzMzRTYwOTAxMUVEQTY3OTFBMERDNEY5QUUwMi91T3B4MEU3SU51
Z1lDSFBKNmRRTTB1TlZOd0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnsYQgE+RHyIje4sd6p76SpO20uyumZhJo62fJe6BRvKnPMztzcFwA7TbI4OY
NDXS6Au6Abh+1xjyqvsucZNpgtKqjsLjt7qzJlGb/U8iR8A/ZKGHU5/S17yrouDl
Jw2xdrOSusaLCl3971SqEYHg7yYQJxtOvtnKxkAoj6z6EZd9KJD54Fhw70JYOzdm
MKzKSm/MAUe3VaJiJhsYI45ZtdHbjZClCzhR89T6V6G4rA0FEsnjWs3TRC38UFWq
vVQOI8BExInMGmFBewfcPd58voWdwhc8dJSQYoZ/E3PevAKMbBxgzAOLY12vgwkr
anV1rLydZ3GzdkOf0eF/EoCluA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:22:31 2026 by rpki-client