
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier: FdbGu+cVZnMzP3A7b4gWNUCSjGnITTudSnbRx1tEzd8=
Subject key identifier: E1:BF:3E:EA:F0:90:69:66:BF:40:5D:A5:37:29:C9:E3:F0:24:84:3A
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial: 0BD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number: 0BC7
Signing time: Sun 04 Oct 2026 19:04:33 +0000
Manifest this update: Sun 04 Oct 2026 19:04:33 +0000
Manifest next update: Sun 11 Oct 2026 19:04:33 +0000
Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: TRGhKsT7m3R17p72b5kBynDdktpQjBU9HTMevH80vTI=)
2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Cslgx6TP1vwc2kxEUex+I7Q7tERor+Z4yAGOK7JvT0w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3025 (0xbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Validity
Not Before: Oct 4 19:04:33 2026 GMT
Not After : Oct 11 19:04:33 2026 GMT
Subject: CN=6ac2a341-bb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:4b:2d:19:1a:25:1f:ea:a9:1a:c5:5d:43:
65:91:36:6b:79:61:84:f7:ae:e4:aa:d9:5a:70:b3:
9b:58:47:a7:56:1d:5d:ae:6a:0e:eb:db:1b:9d:14:
e3:fa:dc:52:f5:99:33:78:18:7d:9b:ff:70:97:62:
1e:e2:49:20:66:75:15:01:07:9d:17:4b:38:88:25:
48:a8:59:5e:cd:70:3a:f2:1f:40:1a:28:43:da:ab:
88:ad:26:94:05:e4:d3:52:3d:17:f9:31:23:bb:19:
6f:f8:a4:e0:78:1b:d6:4a:26:22:e7:8e:2c:27:b1:
e8:3b:71:1c:fb:96:79:54:1e:66:ce:1b:4d:1c:47:
9d:82:4d:b0:5b:c8:ae:26:1b:7c:9a:a9:2d:50:6e:
60:6d:45:1b:d2:db:73:85:9b:1e:22:65:42:2e:c8:
1e:dc:ec:94:99:d9:f2:9b:9d:fd:0a:54:26:53:93:
43:c0:fd:38:36:a1:6e:42:9f:bd:27:a8:64:ff:6a:
f7:ad:ae:d7:93:6f:cf:c4:df:9c:cd:fd:84:22:30:
84:32:4a:95:02:c7:54:e9:15:d8:ad:20:bb:a3:69:
4f:2f:69:1b:74:9c:5d:b7:78:68:53:1f:bb:99:d1:
aa:8d:fd:ed:18:d8:96:8b:0a:ac:1f:e2:72:87:44:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:3E:EA:F0:90:69:66:BF:40:5D:A5:37:29:C9:E3:F0:24:84:3A
X509v3 Authority Key Identifier:
keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:ae:67:0f:c4:6d:2c:7f:36:5d:bc:1f:b9:fe:08:11:fd:
dd:8c:f7:87:0b:48:28:d3:a1:57:95:8a:a1:b5:8d:00:b0:0c:
cb:ac:6d:a1:85:ce:eb:92:3f:6e:1b:a0:33:cc:8b:f6:8e:62:
06:8a:40:c4:4c:e3:30:43:93:e1:b7:81:c2:ff:bc:b2:6e:29:
bf:57:9d:af:2f:8f:b0:4c:07:10:9d:6b:84:91:8c:d7:98:ff:
52:3f:40:96:d4:c1:7d:61:82:d6:f4:9c:da:5a:af:fa:5d:eb:
fd:74:4e:bf:f6:b0:b8:b7:a0:9e:fc:a8:d2:f8:17:dd:f4:12:
f8:00:bb:8e:1d:d7:c3:ad:49:58:c8:7d:52:27:f0:7a:96:53:
dc:9f:54:8f:d2:c3:bf:ac:dc:32:82:a2:be:63:fd:1e:3e:d4:
6c:6a:e0:2c:d6:c5:00:23:5a:e8:8e:7a:a5:ae:29:32:a4:af:
7d:d4:ff:fe:a5:09:9d:18:2d:27:e9:c9:30:72:7a:48:0b:d6:
34:4b:00:38:16:dd:24:51:72:a9:c5:69:85:52:25:74:42:0b:
9b:90:67:ec:52:07:9d:1b:fc:a8:c4:8f:ce:ea:de:23:a0:98:
3e:2f:dc:42:49:f3:02:e6:b3:75:aa:3e:73:15:99:3f:dd:73:
bb:f2:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:56:47 2026 by rpki-client