
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
File: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json)
Hash identifier: VaWlGws4NTuL3WfXnLbGzKMQZxbfoTIu0dWO/r4+a7E=
Subject key identifier: 80:E1:9D:25:96:38:31:E6:F3:99:AE:3F:59:9D:FB:ED:1A:3D:EA:01
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Certificate issuer: /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial: 1931
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
Manifest number: 1928
Signing time: Tue 24 Mar 2026 15:43:39 +0000
Manifest this update: Tue 24 Mar 2026 15:43:38 +0000
Manifest next update: Tue 31 Mar 2026 15:43:38 +0000
Files and hashes: 1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: y7lup338Ka6v9nA4RFmp64rTI05Y/sVM8xK7tGg8exw=)
2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: /WXgSdIhpBtfBEEOEgt0Tnq7bnUCbAtf1R0CAhaphCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6449 (0x1931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Validity
Not Before: Mar 24 15:43:38 2026 GMT
Not After : Mar 31 15:43:38 2026 GMT
Subject: CN=69c2b12a-5992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:2c:88:21:bc:c8:f6:f6:32:7f:1a:4f:01:
5e:44:ba:81:ce:e9:0f:61:99:4b:02:7d:dd:7c:d1:
35:69:50:cd:ea:23:49:af:c9:13:c2:62:fa:16:d4:
7d:3d:b0:59:04:98:a8:40:58:29:12:0a:91:93:a5:
a3:09:23:db:fa:fa:4d:0c:7a:1d:0c:14:19:43:b4:
80:09:4c:75:ec:f7:d0:d8:52:2d:e6:13:39:83:ea:
83:fa:fe:70:cc:6d:d7:d8:34:5d:52:34:3f:68:77:
06:f3:d8:40:75:3f:8a:1b:bb:76:5d:28:ca:04:3d:
80:4f:43:06:4d:56:35:0f:12:8f:e5:4c:94:76:38:
39:e3:fd:e4:c1:ac:df:43:80:bd:98:ac:0f:27:af:
59:1d:8e:66:f1:ef:57:9e:28:c5:9e:01:7a:40:2d:
04:ce:98:cf:5a:0b:83:61:86:de:fc:93:bc:40:a0:
10:3c:e3:ff:c7:5d:01:9d:38:50:31:90:f3:73:d4:
af:99:76:02:3b:66:ac:bc:37:15:60:87:65:50:82:
cb:03:58:8c:2e:7a:05:a0:3b:ef:c5:c6:91:65:e3:
37:5b:35:b5:72:04:2a:ff:16:c1:5d:60:fb:3d:f3:
66:49:cc:75:a8:3b:cb:c2:c2:c7:92:0e:fc:da:7a:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E1:9D:25:96:38:31:E6:F3:99:AE:3F:59:9D:FB:ED:1A:3D:EA:01
X509v3 Authority Key Identifier:
keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:a6:3e:f2:28:17:c5:68:e4:6e:9f:8d:2c:2a:64:6d:9d:24:
64:e7:50:be:f1:8d:cd:37:0d:d0:b9:f6:a1:76:78:0f:60:71:
58:8f:7c:c5:ea:62:3d:b7:97:49:b3:c5:a5:1d:38:75:66:1f:
69:a9:99:ce:db:7c:6e:63:7c:ec:ed:8a:0b:21:18:a0:d9:dd:
d1:1a:e0:1e:9b:54:63:d6:65:3e:0b:2e:e8:a8:14:72:fa:5c:
e1:4f:4f:63:33:30:e3:4d:db:7c:ce:b8:05:61:09:2d:2b:d1:
54:c3:a6:bc:a7:d0:56:75:c1:3a:62:c2:ac:d4:99:ff:4d:a1:
29:5c:41:dd:18:db:67:83:41:03:a0:ed:af:5b:86:bd:ef:04:
99:cf:aa:4f:e2:d9:27:78:33:43:0b:b4:78:f7:b7:1e:36:6e:
41:86:68:e3:8c:87:c8:e9:3f:3b:ed:48:42:8f:bc:79:56:38:
a7:07:b7:bf:b9:bc:99:7f:61:48:bf:57:7c:63:6c:1c:80:93:
90:47:f6:b9:d5:e0:d0:ca:68:4e:7f:78:26:bd:04:aa:e0:89:
a7:12:5e:0c:11:56:a7:7c:cd:c5:5a:2c:79:1f:d8:51:94:82:
4c:bd:60:19:54:fe:de:a9:fc:c6:d7:ad:fe:54:dc:36:54:01:
a3:51:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:30 2026 by rpki-client