
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File: UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier: if7B4vtVDSmK2mtITNt0fX4aiXEVvL4T0uJoD6sSO7g=
Subject key identifier: 54:03:98:CE:80:3C:38:50:97:F0:16:62:B1:37:C3:0F:53:02:F3:C0
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number: D0
Signing time: Thu 23 Jul 2026 08:30:52 +0000
Manifest this update: Thu 23 Jul 2026 08:30:52 +0000
Manifest next update: Thu 30 Jul 2026 08:30:52 +0000
Files and hashes: 1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: jU7bkYJn6B9TGXAurgIJIVMrGLTw+uaJaKcoRT4gTJM=)
2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: HFBzqsB1ywMD+JWUEHOpXWYJ4PzPIFvuRP9SLPHmgeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Validity
Not Before: Jul 23 08:30:52 2026 GMT
Not After : Jul 30 08:30:52 2026 GMT
Subject: CN=6a61d13c-4010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:63:d9:6b:45:42:59:5c:52:cd:58:9b:8b:
03:1a:02:e7:4b:aa:95:9b:9c:d6:8f:22:78:5f:44:
22:d7:4d:06:a5:9d:27:cb:21:fa:b1:ae:ef:01:b8:
1b:3f:5b:09:bf:45:f6:ba:21:30:bf:6c:32:06:98:
ff:58:c6:e0:81:de:fd:0d:37:34:27:f8:b4:ef:b4:
8e:64:f5:0b:d6:e5:16:b9:cf:29:8c:bd:02:0b:6e:
d6:b9:67:10:f7:ee:6e:b4:ca:7a:f2:b2:01:1c:16:
d1:ec:08:17:de:29:3b:40:83:9b:9c:d4:74:4f:19:
00:aa:77:07:44:90:b6:c9:8a:e5:75:44:79:06:d3:
ee:a7:67:93:93:12:c8:bc:83:48:fb:03:7f:74:b2:
74:ca:63:ad:59:fd:5f:46:98:9f:82:3f:06:28:12:
82:46:e6:e6:f3:f3:f4:7f:4d:e4:2e:39:16:8f:7e:
fe:4e:6b:3e:f5:02:91:e4:02:48:df:bc:8e:b4:fd:
a5:ce:43:d7:0a:30:a5:c9:d4:5f:76:51:78:64:db:
0e:d9:48:89:9b:9c:c1:7d:fe:1c:b5:6e:12:2c:56:
ac:ff:df:0f:15:ce:89:02:6c:b2:a7:30:07:42:24:
4a:f4:4c:98:39:f1:e7:bc:dd:cc:70:ff:d9:55:5d:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:98:CE:80:3C:38:50:97:F0:16:62:B1:37:C3:0F:53:02:F3:C0
X509v3 Authority Key Identifier:
keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:0f:e0:9f:ba:09:57:f8:08:fc:b4:54:50:95:3a:db:af:bc:
5a:50:d1:6f:67:f4:53:c0:20:6c:6e:4a:ae:34:6c:d9:96:e0:
e6:61:e8:7b:10:e0:36:5a:7d:90:80:f8:81:c1:89:bb:62:b0:
97:0f:e6:db:79:e5:01:c7:9a:04:d3:cd:9f:dd:9e:5b:cb:66:
49:aa:ca:75:72:af:e5:70:1d:a9:20:8a:bf:36:a7:a3:da:bd:
e9:b6:4a:54:2c:03:cb:f9:6f:31:7a:11:04:45:e5:6d:b2:5f:
c6:94:07:8e:ed:4a:7e:a7:6b:66:a0:12:cd:95:6a:d8:78:5c:
9f:9a:a0:58:66:2e:62:fb:da:eb:8c:99:90:b5:b1:77:8e:63:
d4:54:84:43:62:1a:08:d7:67:52:f9:61:49:ab:15:49:09:e9:
62:23:7e:8e:ab:3b:30:5b:87:4c:52:ab:67:38:f7:a3:9c:15:
3d:fc:ac:9a:67:fc:50:9c:2b:c0:f6:95:35:0e:ac:28:bf:9a:
84:54:fd:1d:35:a0:a2:2c:68:d2:ec:14:28:67:d5:62:94:0a:
cf:d0:42:8c:e5:51:0d:f1:e4:1b:2b:1a:33:21:fd:a5:35:ec:
60:2f:c9:a7:58:fe:83:d9:b7:25:10:79:71:d2:96:36:f1:4e:
64:d5:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:31:52 2026 by rpki-client