
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File: 0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier: EoS6eJoQ+6C1DaBofMv1hFZhtMSkZcUh7pwP6DadbxY=
Subject key identifier: 52:A9:13:C7:2B:91:81:2B:F4:F5:4E:A1:18:96:EE:1F:B6:DA:89:A3
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial: 0B6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number: 0B62
Signing time: Tue 24 Mar 2026 18:59:13 +0000
Manifest this update: Tue 24 Mar 2026 18:59:12 +0000
Manifest next update: Tue 31 Mar 2026 18:59:12 +0000
Files and hashes: 1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: Vq+1epQCqaBwuTnPb6k2o9Gn7kM9ILpT0EMsii4SUNA=)
2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Gix1doZT6HdqB6Rndr92+DwWhim28hlszYTEvtmj1Xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2923 (0xb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Validity
Not Before: Mar 24 18:59:12 2026 GMT
Not After : Mar 31 18:59:12 2026 GMT
Subject: CN=69c2df00-60c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:cf:da:3d:5c:41:df:0a:41:99:c1:ae:e2:
b6:21:97:d9:f5:54:df:80:cd:43:ab:4e:59:26:ec:
bd:d7:dc:cd:6c:d4:29:3b:ea:1b:20:0f:af:64:b4:
80:b6:63:91:de:28:0e:66:6d:fe:be:df:27:c3:64:
3c:8d:07:1c:27:77:01:1e:90:e4:92:99:7d:f3:e9:
ba:a8:e3:09:e1:fd:1b:41:25:9b:9c:67:bc:3b:6e:
29:7f:32:50:a0:71:b6:c2:4d:c9:33:fc:07:98:7d:
a8:67:b3:2d:27:e4:a6:e2:79:d2:29:80:51:a2:1f:
ba:f7:71:0d:b8:72:a5:d8:de:78:f6:5a:7c:48:c3:
5f:c8:23:7d:3c:95:db:0d:02:2c:f0:24:19:00:69:
83:13:46:ba:74:48:50:fa:fc:79:ee:6a:77:40:11:
5e:2d:e4:11:a7:d8:25:b8:4f:59:77:41:0b:29:63:
6c:69:ec:41:4b:52:d3:02:07:94:be:2d:33:a3:36:
b6:cb:9a:9f:7b:3f:8f:98:72:bb:77:f0:50:7d:21:
40:55:6b:54:f5:20:d4:a7:ee:37:39:86:3e:9b:0a:
ec:c3:0a:cb:d2:22:23:01:c9:4a:72:45:d4:87:a1:
59:2c:89:7f:d2:66:b0:3f:41:dc:11:a7:bf:09:4d:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:13:C7:2B:91:81:2B:F4:F5:4E:A1:18:96:EE:1F:B6:DA:89:A3
X509v3 Authority Key Identifier:
keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9d:40:b2:c5:f7:69:f7:14:95:81:ee:ac:03:24:28:2b:e5:
24:a3:59:5a:4e:92:c4:6b:9b:03:7f:6e:b6:0a:f9:8c:39:f1:
fa:26:e5:06:c2:4d:fb:39:1c:87:95:e2:11:4c:54:f1:c9:f3:
ad:a4:6f:61:e3:39:be:6d:a5:0d:78:74:d3:40:20:58:64:11:
8c:2f:bf:73:49:96:d1:33:fa:cd:d4:c8:c4:bb:19:ca:cd:e9:
ca:34:d3:ae:cb:89:70:c2:6b:ba:7d:d1:67:d6:c3:87:54:46:
f8:36:11:d4:b0:86:88:dd:4b:7e:c3:f1:cb:ea:08:71:5a:dc:
86:8c:51:0f:a6:db:0c:b1:eb:04:03:ba:14:f6:da:76:6b:0b:
60:5d:38:d6:ad:96:42:7d:65:c6:44:e4:5d:cb:72:22:a8:8e:
8d:48:ed:91:44:21:bc:2c:c6:e6:e8:0b:8b:6a:0c:9d:f8:5e:
ce:1d:90:7f:9a:49:b6:2c:13:6a:4a:8a:45:66:57:7f:31:7a:
ee:19:0b:e2:d2:b4:7c:f1:62:88:29:53:b4:ed:74:5d:bd:19:
aa:44:8e:74:08:46:aa:9c:06:33:40:d9:4a:07:b2:98:3d:c6:
22:bc:aa:f2:75:ce:92:e1:cc:87:ab:80:80:de:00:88:9d:52:
53:20:65:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw
MDAzODEyREEwHhcNMjYwMzI0MTg1OTEyWhcNMjYwMzMxMTg1OTEyWjAYMRYwFAYD
VQQDEw02OWMyZGYwMC02MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArq/P2j1cQd8KQZnBruK2IZfZ9VTfgM1Dq05ZJuy919zNbNQpO+obIA+vZLSA
tmOR3igOZm3+vt8nw2Q8jQccJ3cBHpDkkpl98+m6qOMJ4f0bQSWbnGe8O24pfzJQ
oHG2wk3JM/wHmH2oZ7MtJ+Sm4nnSKYBRoh+693ENuHKl2N549lp8SMNfyCN9PJXb
DQIs8CQZAGmDE0a6dEhQ+vx57mp3QBFeLeQRp9gluE9Zd0ELKWNsaexBS1LTAgeU
vi0zoza2y5qfez+PmHK7d/BQfSFAVWtU9SDUp+43OYY+mwrswwrL0iIjAclKckXU
h6FZLIl/0mawP0HcEae/CU18cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKpE8cr
kYEr9PVOoRiW7h+22omjMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF
RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU
UUh5VkIwNXJWclFBQTRFdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX51AssX3afcUlYHurAMkKCvlJKNZWk6SxGubA39utgr5jDnx+iblBsJN+zkc
h5XiEUxU8cnzraRvYeM5vm2lDXh000AgWGQRjC+/c0mW0TP6zdTIxLsZys3pyjTT
rsuJcMJrun3RZ9bDh1RG+DYR1LCGiN1LfsPxy+oIcVrchoxRD6bbDLHrBAO6FPba
dmsLYF041q2WQn1lxkTkXctyIqiOjUjtkUQhvCzG5ugLi2oMnfhezh2Qf5pJtiwT
akqKRWZXfzF67hkL4tK0fPFiiClTtO10Xb0ZqkSOdAhGqpwGM0DZSgeymD3GIryq
8nXOkuHMh6uAgN4AiJ1SUyBloA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:56 2026 by rpki-client