
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
File: ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft (raw, json)
Hash identifier: xRc0vTIC51Iy0gLGRqZ2gayczT5Iv/EwhF7MsWxSMi0=
Subject key identifier: 02:7D:0E:1A:61:77:06:FC:FA:B2:F8:7A:1B:05:B9:CA:F5:27:54:91
Authority key identifier: B9:C1:08:96:B9:1E:B8:48:6F:FF:9C:35:E8:4B:D3:5B:49:F8:31:F8
Certificate issuer: /CN=A91D0468/serialNumber=B9C10896B91EB8486FFF9C35E84BD35B49F831F8
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
Manifest number: 24
Signing time: Sun 27 Sep 2026 09:25:28 +0000
Manifest this update: Sun 27 Sep 2026 09:25:27 +0000
Manifest next update: Sun 04 Oct 2026 09:25:27 +0000
Files and hashes: 1: ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl (hash: iNxusi6Rk2BjcVPLIILz5xxczBlDUbT3VZWJhfLaGDs=)
2: 0A4C9B3A866411F18B4C2F8396A30FBC.roa (hash: rne+liQvMq2ppRDgVz5rqnq10rEXiHIwzpvqAK3l3Lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl
rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0468, serialNumber=B9C10896B91EB8486FFF9C35E84BD35B49F831F8
Validity
Not Before: Sep 27 09:25:27 2026 GMT
Not After : Oct 4 09:25:27 2026 GMT
Subject: CN=6ab8e108-bc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:14:04:30:d9:42:ff:95:43:02:55:7c:b6:
45:b8:49:32:2a:05:d4:d0:9e:2d:39:79:9f:3a:bd:
35:12:f1:ae:7a:f3:61:da:62:4e:e8:8d:75:57:2a:
13:06:dd:56:d0:0f:00:c5:ce:a0:10:a9:89:b1:ab:
b1:a9:87:cb:70:03:85:c2:cb:85:32:cb:2c:51:bb:
87:f1:72:66:04:42:9e:7c:c9:12:df:43:ed:fd:eb:
76:54:1a:b6:f5:22:2a:e0:c9:1d:2e:a3:6a:3f:a3:
f4:98:26:2b:11:21:c2:e8:c8:a7:89:ea:0f:65:c2:
f2:d9:02:03:96:59:fe:c5:63:f5:ac:7e:87:4e:c6:
58:48:b6:68:00:1c:3d:f3:8a:8e:46:61:76:7c:c3:
bf:40:4a:da:0a:d4:02:db:53:0d:72:ca:5e:37:78:
30:51:80:be:a3:da:77:cf:2e:a9:76:2d:40:df:60:
15:ab:aa:50:c8:b5:04:99:00:b5:55:2d:cd:b1:c8:
67:0e:4a:66:c0:6c:9c:9f:28:1c:12:70:25:be:bf:
f4:53:59:71:0f:2a:d8:91:a2:7b:66:d5:e9:4d:a3:
d0:08:f0:7e:ae:7a:fb:cb:19:b7:03:2a:cd:ae:3a:
26:0c:6b:15:bd:e5:26:3f:1e:53:42:3b:82:d0:0e:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7D:0E:1A:61:77:06:FC:FA:B2:F8:7A:1B:05:B9:CA:F5:27:54:91
X509v3 Authority Key Identifier:
keyid:B9:C1:08:96:B9:1E:B8:48:6F:FF:9C:35:E8:4B:D3:5B:49:F8:31:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bf:78:4c:c6:79:c3:11:db:2e:d9:3c:ea:65:28:4f:fd:fa:
cb:96:b1:94:7a:d9:54:19:f5:cb:77:86:c6:a9:36:61:f0:a0:
41:94:48:2a:08:6e:97:95:6d:c4:36:01:20:02:a8:c5:37:6f:
7c:e4:15:b0:a9:39:ef:8c:e0:0f:7f:e3:3d:58:9b:79:9c:65:
fe:c9:18:56:08:1e:7d:b2:d2:ca:1e:97:53:94:b8:a3:f9:8e:
0c:da:d9:9d:9f:38:92:4d:79:7e:9b:29:a7:71:26:a2:f9:81:
92:83:e1:51:29:d3:c0:e6:7c:78:6c:eb:51:60:19:11:87:77:
7f:38:59:e4:fd:69:62:29:ab:00:ec:1e:70:5b:22:fd:f4:ff:
f4:57:c1:1b:39:98:db:43:5c:56:e3:3d:dc:2e:c6:2e:4d:24:
69:47:95:74:ff:3d:17:78:c3:5d:6a:9d:f9:1e:e8:4e:22:eb:
ac:2f:2e:c5:c8:9a:9d:f9:9d:ee:16:42:70:80:a9:5e:1b:2d:
c7:eb:54:18:e4:85:ab:75:b8:63:3e:0f:4d:41:54:2a:2c:bc:
10:49:35:65:14:f2:56:18:cb:68:33:f0:23:5b:89:dc:ac:61:
15:fe:14:93:98:a5:ea:73:e9:86:79:12:28:32:38:bc:55:63:
39:ca:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:54:16 2026 by rpki-client