
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json)
Hash identifier: Y44676VN5p7U6Cyb+C6V31z78SE2F0gRknOT7diXY1I=
Subject key identifier: 19:36:A7:AE:EE:53:DE:2F:B9:E1:22:7E:45:8E:A3:22:66:96:84:71
Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Certificate serial: 0D2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
Manifest number: 0D16
Signing time: Thu 24 Sep 2026 18:18:50 +0000
Manifest this update: Thu 24 Sep 2026 18:18:50 +0000
Manifest next update: Thu 01 Oct 2026 18:18:50 +0000
Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: W12TF8vkZfLSHjh/Fm96aoLTIZpMGXl6oIQz74Yom+A=)
2: AE7AAA289A2111F1968C5E625611F970.roa (hash: gDBQEQVUCY5T7erXr+BeD7gkL/4ClPU+FUbuxRfS0R4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3371 (0xd2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Validity
Not Before: Sep 24 18:18:50 2026 GMT
Not After : Oct 1 18:18:50 2026 GMT
Subject: CN=6ab5698a-477a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:79:ab:22:f7:59:f0:f6:d7:94:d5:0c:99:
0e:39:77:98:00:03:1e:56:e5:db:6e:d3:b7:b9:fb:
20:96:6c:fb:29:4a:34:9f:fb:7b:32:95:ab:bd:e7:
fd:5d:c7:15:97:4a:15:09:c6:21:cb:ae:00:4a:0c:
41:07:c8:dd:30:2c:ec:31:98:99:1c:45:9d:de:61:
35:09:e7:20:35:ac:7c:9c:a2:70:77:5f:12:df:b4:
ec:64:8d:18:f4:06:6a:97:9e:5b:f0:bf:b4:ac:75:
12:50:7c:c9:89:56:37:5e:02:e0:d5:65:38:86:f1:
80:32:12:1e:42:a6:ba:00:c4:8d:3e:97:4c:5a:96:
0d:7a:e0:f6:0b:ba:28:3f:9f:0a:ac:46:cb:96:f2:
0f:94:29:78:9c:e6:18:a0:e3:04:c9:94:f5:ba:87:
9f:f1:c5:97:5d:a0:97:46:d7:7f:73:ee:7e:3f:6b:
85:81:01:3d:0d:2f:5e:fe:f3:96:87:20:e2:44:82:
d7:0e:b0:f6:35:24:07:51:48:47:94:1d:e5:74:44:
f8:17:cc:05:19:32:ee:60:94:6c:4b:52:ad:c4:63:
68:f5:f4:13:8c:2c:3d:62:ad:07:21:4d:b6:60:42:
28:d3:1e:a1:32:9d:57:73:17:88:81:95:02:6e:5c:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:A7:AE:EE:53:DE:2F:B9:E1:22:7E:45:8E:A3:22:66:96:84:71
X509v3 Authority Key Identifier:
keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:e0:60:ff:5f:05:f0:de:de:4e:e3:d6:c9:ee:d0:07:25:4d:
c6:3d:e9:15:8a:0c:7d:a9:2e:fd:25:8c:b3:e7:9d:75:b2:9f:
e6:25:30:89:c9:e7:ef:16:2c:39:13:21:dd:4b:14:04:79:7a:
57:ee:a5:d3:e7:6b:63:48:ed:7e:70:f8:cd:08:74:39:f1:69:
97:d9:4b:74:15:a4:33:71:36:3d:90:fd:99:ca:ce:1c:2a:ae:
07:b0:ec:2e:d3:f3:2b:bd:72:9b:78:04:cd:e1:18:f6:14:df:
45:1a:09:11:43:c8:ca:5b:5a:eb:8f:63:4f:c7:20:ea:da:1b:
d1:b7:a2:a4:66:41:1d:be:2a:e9:42:ad:6c:67:18:13:34:b1:
90:5b:48:61:10:82:96:4d:20:24:b0:2e:b6:d9:b8:d3:e2:c1:
58:e2:36:6d:1e:ad:1b:b6:d0:29:65:eb:a6:5f:89:1e:14:8d:
63:a7:d3:ee:6b:7c:66:34:f5:63:e5:3a:8d:84:1b:ec:b0:d1:
ea:d6:54:05:40:5c:d7:a2:8d:7a:42:d7:a9:3d:4c:34:b0:b8:
b5:53:08:44:01:48:64:6f:af:da:49:37:2c:8b:10:db:29:2e:
ee:9c:72:8f:71:0b:1d:5d:78:3c:75:aa:23:91:2e:dc:be:59:
c1:d7:d6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:03:59 2026 by rpki-client