
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File: uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier: VzpfklyN/eSoljXj3fBaZu1ohrETGZH4hw39+FKu8q0=
Subject key identifier: 6E:F4:03:20:90:2F:35:E8:F6:3E:4A:F1:43:5D:20:0D:1A:F4:28:87
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial: 0883
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number: 085B
Signing time: Wed 22 Jul 2026 21:30:35 +0000
Manifest this update: Wed 22 Jul 2026 21:30:34 +0000
Manifest next update: Wed 29 Jul 2026 21:30:34 +0000
Files and hashes: 1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: KNv3LGIUJHzmk3029917CQvEx8pUw53KcMM4/B0VjZo=)
2: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: azgOtcYeMQ+jRphVpaVCAHBgs8PE9LLzlZ+oLtFAePc=)
3: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: S+/631V5EbLVHMkrVq986tOSiufFr1O8QILyGk6Ead4=)
4: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: IQn111u6z6qLHojmECWDC2x1tW//DdSaFa0X28b5D0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Validity
Not Before: Jul 22 21:30:34 2026 GMT
Not After : Jul 29 21:30:34 2026 GMT
Subject: CN=6a61367a-2b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:a3:01:38:fd:6d:73:d7:ff:7f:bb:70:25:
f4:de:58:85:54:a1:c4:a5:35:38:40:3a:20:1b:20:
79:21:5f:be:11:ab:0d:c7:11:85:de:3a:0c:2e:60:
f7:1d:52:85:76:2f:8b:3a:ab:58:d7:97:a0:64:7e:
69:80:fa:00:96:cd:7a:d6:e8:8d:fd:82:63:dd:98:
9d:15:ef:18:87:7b:76:6d:89:de:fb:4f:fa:35:1d:
9e:45:84:34:60:98:35:e1:38:1b:b6:40:d2:b6:62:
8a:67:05:29:47:bd:8d:61:4e:03:6b:93:d3:1f:4e:
98:33:ec:c1:b5:a4:e3:83:21:a2:d3:71:f7:eb:77:
a3:07:6d:5d:9b:b3:96:17:01:82:3a:da:5d:22:31:
4c:67:2d:32:24:40:f5:3a:23:be:87:35:05:7d:9f:
08:11:b6:70:a4:48:52:47:24:3d:01:4e:e2:94:c0:
ae:bc:f7:b5:2d:f0:3b:52:49:67:42:d4:ab:ae:bf:
65:ba:30:ea:f2:ef:5c:c1:58:05:8b:23:3c:d3:ba:
a4:95:dd:ea:d9:0c:6a:4d:0b:41:12:93:b6:68:6c:
87:02:60:93:2b:c2:99:2d:26:63:2e:df:db:a6:30:
e6:75:4a:36:b1:95:66:d1:4f:1e:c3:ae:ba:9e:cc:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:03:20:90:2F:35:E8:F6:3E:4A:F1:43:5D:20:0D:1A:F4:28:87
X509v3 Authority Key Identifier:
keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b4:92:6c:4e:1e:68:2e:fe:96:f7:2e:92:80:a0:55:31:35:
8a:a7:bc:b8:42:60:40:a6:29:7e:ff:25:ea:45:5b:0a:83:39:
68:38:be:f2:52:7b:38:b9:e9:24:0d:2a:14:ab:65:02:36:a7:
72:bb:d6:ea:21:10:ba:39:da:76:13:19:dd:db:67:44:65:71:
fd:1e:fb:ca:4b:6e:51:f6:3c:5d:08:8b:6a:96:28:59:71:cc:
19:cc:bd:1f:66:be:b5:61:c9:f0:c6:b8:70:46:f2:4e:d5:30:
df:de:82:b0:31:8c:22:3f:2f:45:16:30:2d:8e:69:40:5a:4a:
30:e5:4d:e1:8e:48:41:25:ef:39:9a:b8:07:61:96:c7:11:8e:
87:a1:3d:ee:a7:19:bc:64:ed:fe:90:38:f4:5f:22:2d:b3:5c:
54:ee:e4:e0:c0:2d:20:cc:5c:17:e9:44:7a:00:a7:11:53:f2:
48:47:a8:a1:70:20:b2:6a:1b:1f:46:06:e9:c9:7e:ff:5d:11:
08:c0:5f:21:33:3f:25:68:83:2d:a9:82:30:c4:a4:14:e1:ec:
73:a6:d7:cf:5e:0a:59:62:ea:ce:fb:01:2d:85:a2:c9:8a:c9:
6f:5f:73:e2:c3:9b:c8:49:03:ea:ab:24:b1:32:75:c9:0d:a0:
58:b6:1f:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI3NzkxMTAvBgNVBAUTKEJCMDNCOEQyNDQ3RUY4MTNBMzdBOTU4Nzc2NkEwMUY3
MzU5REQ3NDAwHhcNMjYwNzIyMjEzMDM0WhcNMjYwNzI5MjEzMDM0WjAYMRYwFAYD
VQQDEw02YTYxMzY3YS0yYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAog6jATj9bXPX/3+7cCX03liFVKHEpTU4QDogGyB5IV++EasNxxGF3joMLmD3
HVKFdi+LOqtY15egZH5pgPoAls161uiN/YJj3ZidFe8Yh3t2bYne+0/6NR2eRYQ0
YJg14TgbtkDStmKKZwUpR72NYU4Da5PTH06YM+zBtaTjgyGi03H363ejB21dm7OW
FwGCOtpdIjFMZy0yJED1OiO+hzUFfZ8IEbZwpEhSRyQ9AU7ilMCuvPe1LfA7Ukln
QtSrrr9lujDq8u9cwVgFiyM807qkld3q2QxqTQtBEpO2aGyHAmCTK8KZLSZjLt/b
pjDmdUo2sZVm0U8ew666nsx3/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG70AyCQ
LzXo9j5K8UNdIA0a9CiHMB8GA1UdIwQYMBaAFLsDuNJEfvgTo3qVh3ZqAfc1nddA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjc3OS84OTAyNDk5NDE4
MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1CT2plcFdIZG1vQjl6V2Qx
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3TzQwa1ItLUJPamVwV0hkbW9COXpXZDEwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Mjc3OS84OTAyNDk5NDE4MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1C
T2plcFdIZG1vQjl6V2QxMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW7SSbE4eaC7+lvcukoCgVTE1iqe8uEJgQKYpfv8l6kVbCoM5aDi+8lJ7OLnp
JA0qFKtlAjancrvW6iEQujnadhMZ3dtnRGVx/R77yktuUfY8XQiLapYoWXHMGcy9
H2a+tWHJ8Ma4cEbyTtUw396CsDGMIj8vRRYwLY5pQFpKMOVN4Y5IQSXvOZq4B2GW
xxGOh6E97qcZvGTt/pA49F8iLbNcVO7k4MAtIMxcF+lEegCnEVPySEeooXAgsmob
H0YG6cl+/10RCMBfITM/JWiDLamCMMSkFOHsc6bXz14KWWLqzvsBLYWiyYrJb19z
4sObyEkD6qsksTJ1yQ2gWLYfRg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:56 2026 by rpki-client