
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json)
Hash identifier: o/OejKBz1RQ9Gjz+Nq8ra1rM+spGy5hcqRBbxGssW2U=
Subject key identifier: 28:55:96:92:B1:5F:C4:15:F5:6E:34:98:35:7C:82:B7:A4:1F:31:3B
Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Certificate serial: 0F57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
Manifest number: 0F4B
Signing time: Sat 26 Sep 2026 17:37:26 +0000
Manifest this update: Sat 26 Sep 2026 17:37:26 +0000
Manifest next update: Sat 03 Oct 2026 17:37:26 +0000
Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: LqrR4EpQ7pS+owyQG8Xw2UjvGQKc/yZ8leDVnXNeQoc=)
2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: /lp2Z8VQhDI00l+o4slVgOYMfv7oLB/2J79jG65CBNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3927 (0xf57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762
Validity
Not Before: Sep 26 17:37:26 2026 GMT
Not After : Oct 3 17:37:26 2026 GMT
Subject: CN=6ab802d6-190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:1c:c0:e3:11:10:5f:70:ab:8c:de:3e:14:
5b:67:57:7a:4f:21:21:7d:99:11:1f:b1:9f:1a:4d:
01:53:bb:46:05:73:80:50:7a:93:07:98:ff:70:28:
67:47:6c:46:25:c0:c0:70:41:fc:3d:27:f5:d9:ac:
4a:fd:c1:f0:45:4a:cb:c4:80:92:fc:fd:42:b4:0c:
3c:fc:38:82:c2:d1:c2:bf:fc:0a:a7:db:f7:4f:c6:
ed:ed:ba:9b:61:76:71:ad:46:28:29:34:2f:fe:6d:
de:c2:c4:74:fb:04:7e:8e:40:3a:9d:e4:c7:2f:12:
94:0a:bf:02:a5:d3:38:e5:71:e7:ea:e2:be:a3:c2:
d2:e0:79:67:f1:9c:f6:71:a6:5c:4c:b8:db:7b:6c:
83:e9:84:7b:e8:6f:bc:d2:9b:79:79:24:05:8d:af:
b6:ee:19:9f:db:bc:26:bf:93:fb:0f:87:7e:e7:7e:
fd:4e:9a:de:b4:41:45:10:90:a0:00:18:8e:08:43:
b7:60:26:aa:04:43:aa:68:5b:53:dc:f2:74:0e:a8:
37:f9:f0:8a:04:e6:b9:1d:16:07:65:c0:47:90:50:
ac:9a:a9:41:ef:3f:7a:11:f5:57:fd:15:08:94:b5:
15:44:39:48:94:81:32:ac:00:8d:13:70:58:ac:9a:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:96:92:B1:5F:C4:15:F5:6E:34:98:35:7C:82:B7:A4:1F:31:3B
X509v3 Authority Key Identifier:
keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:34:65:a8:b2:50:0c:cf:f7:9b:ee:2c:0d:c2:4e:d7:e1:
5c:55:d8:3f:b8:25:db:41:9f:19:7c:24:0c:44:77:f6:bd:60:
2f:b5:d5:64:fc:2c:f2:7d:f0:35:4c:71:76:4a:67:4a:5c:d3:
ce:0d:90:75:c7:65:ee:af:22:2a:d8:9a:09:2c:d9:01:4b:b3:
ca:05:cb:3a:ff:7b:50:b7:6a:65:11:a7:81:35:2f:63:eb:26:
5f:f9:db:26:c4:c3:ba:43:bb:a9:31:23:6b:7d:1f:00:bf:15:
b8:00:1a:c8:03:e8:da:65:f7:18:14:9a:61:7e:ef:e2:17:6f:
89:1b:3c:63:a0:2e:bf:6b:79:0a:cb:a4:c7:2d:d0:f1:be:29:
8d:87:aa:8b:44:48:63:00:9b:5d:b4:69:6c:1d:25:47:7e:07:
e3:36:48:91:0f:a6:39:86:f8:70:5b:23:67:0d:94:7e:e6:80:
4d:7e:3b:51:05:7b:bf:dd:c0:14:6d:95:de:29:d9:c1:b6:99:
42:73:42:1e:ff:00:76:cf:2e:89:58:cb:e6:2a:9b:7e:e2:e1:
c0:16:47:64:e5:98:5c:82:55:7d:ae:bb:c4:ac:bd:9a:17:c9:
8c:7a:14:1a:63:4f:4e:15:3c:c0:40:61:d6:a8:ec:67:84:cb:
bb:dc:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:36:05 2026 by rpki-client