
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
File: uesVSGZ3c32yc5_WVGKu55BhaMI.mft (raw, json)
Hash identifier: NoUGVUoQERK9d+TsDd89y9a7ABbbip624f3v1LwHmqs=
Subject key identifier: 23:29:70:58:B1:A6:27:D0:3B:7A:91:26:E9:F0:E2:70:91:6D:54:67
Authority key identifier: B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
Certificate issuer: /CN=A91DA649/serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Certificate serial: 0CB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
Manifest number: 0CAD
Signing time: Tue 24 Mar 2026 18:18:57 +0000
Manifest this update: Tue 24 Mar 2026 18:18:56 +0000
Manifest next update: Tue 31 Mar 2026 18:18:56 +0000
Files and hashes: 1: uesVSGZ3c32yc5_WVGKu55BhaMI.crl (hash: xIoz5kPSqgcybxeafynH2362V+RzAI9yfbHSdPtr3l0=)
2: C4391160305611EABE7DF272C4F9AE02.roa (hash: BMZ1UeFP1Job+RaL0SOd32/rdZOcQ/RtABlN62ClMsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3256 (0xcb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA649, serialNumber=B9EB15486677737DB2739FD65462AEE7906168C2
Validity
Not Before: Mar 24 18:18:56 2026 GMT
Not After : Mar 31 18:18:56 2026 GMT
Subject: CN=69c2d591-2e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:62:d4:de:a4:22:ed:bf:a4:90:c6:76:35:
30:9f:b4:28:79:47:60:82:a1:dd:a9:b4:4a:f3:bf:
f0:fe:23:e6:d2:46:7e:bd:76:39:e7:26:4a:27:87:
40:74:d8:d3:a1:06:87:bb:14:66:92:9a:c9:7e:06:
5a:7c:6e:f7:bb:4c:ec:63:c6:b4:b3:a0:a7:62:5b:
15:71:d8:b8:dc:2b:83:35:1c:90:3e:2a:58:ab:12:
26:3a:f0:cc:b4:e3:04:7c:4b:61:2e:a4:b4:96:72:
6a:8a:4f:c9:78:bc:7e:d1:b0:4e:4c:d4:ba:54:6d:
66:9a:58:e7:53:9f:0f:fc:03:e9:07:88:bf:2a:f0:
47:d3:51:0c:c7:53:f9:99:b0:07:a4:52:09:e3:a0:
e8:8b:db:74:a9:48:44:35:45:48:8e:79:92:90:a1:
76:c0:c4:67:e4:cd:a1:28:d0:ea:b2:95:ef:f0:1b:
52:15:bd:3e:59:ed:2f:b6:6d:17:ff:30:9a:ca:d4:
e6:56:99:cf:36:8c:e8:32:32:e4:74:d3:5b:40:13:
96:ff:ea:5d:c0:e1:0e:0d:cc:dc:49:42:51:2a:f5:
e6:96:9b:2b:2b:6b:5a:7d:cb:55:b0:3c:fa:c2:97:
78:38:0a:d4:a7:64:d5:9c:7b:8d:7a:1a:c7:ac:de:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:70:58:B1:A6:27:D0:3B:7A:91:26:E9:F0:E2:70:91:6D:54:67
X509v3 Authority Key Identifier:
keyid:B9:EB:15:48:66:77:73:7D:B2:73:9F:D6:54:62:AE:E7:90:61:68:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uesVSGZ3c32yc5_WVGKu55BhaMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA649/5D97774C0F5111EA8C4A5C0AC4F9AE02/uesVSGZ3c32yc5_WVGKu55BhaMI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:81:90:98:83:63:14:15:10:05:eb:ed:e4:13:1a:87:b2:4d:
d2:f2:3c:2e:46:e3:bf:b5:8a:4c:20:b0:33:ed:c3:42:f8:08:
f0:80:43:e5:41:42:e7:be:a3:54:62:56:b0:24:8a:a6:67:ea:
90:dc:e4:97:e7:d3:de:17:e5:ad:69:72:fb:50:1b:34:c8:97:
f9:ad:dd:e2:f2:7a:75:fe:f2:bc:37:77:e2:0c:70:72:34:23:
dc:ff:ff:1d:d9:fa:fd:ca:9c:dc:ef:14:27:a6:d2:97:5f:1c:
66:40:f7:9a:34:c4:1e:aa:5f:e0:f4:30:a7:0c:a9:88:1e:f3:
f7:6a:26:7c:0f:a1:09:de:fb:3c:ba:a6:a2:98:c1:e2:47:9e:
1e:f5:31:64:37:72:4c:c6:ce:6b:1b:bb:0b:b0:7e:62:96:6c:
26:a3:4b:10:63:2e:bf:3f:7c:46:26:0c:bb:e3:88:18:86:e2:
d6:38:52:6e:54:7f:0e:5c:a8:ed:a6:eb:37:0f:b9:78:52:77:
b5:9d:2f:3e:54:fd:4e:05:55:af:a7:07:38:24:47:4b:3b:94:
71:ca:f6:c2:c2:32:06:77:eb:ce:53:7d:43:a4:f0:1a:e0:d1:
22:1c:76:35:67:18:f5:bd:ef:9b:6f:92:81:e2:64:ca:30:25:
8b:01:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:36 2026 by rpki-client