
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json)
Hash identifier: brTKeJzZQxWxEI5WcaWIN5rYW/l9p8Xq9+YsBdo8prc=
Subject key identifier: FB:26:DB:22:7E:27:46:09:00:30:37:59:B7:53:B8:25:46:84:70:2B
Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
Manifest number: 0121
Signing time: Wed 25 Mar 2026 04:56:28 +0000
Manifest this update: Wed 25 Mar 2026 04:56:27 +0000
Manifest next update: Wed 01 Apr 2026 04:56:27 +0000
Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: riXJglVeCWhyk7PvfhbhlyfSyVXUyMQhGyxLVE1d3fI=)
2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: E1+S92xguMTIBmtHmrSoXrOV41uAwtTiK5fggn3/D/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl
rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Validity
Not Before: Mar 25 04:56:27 2026 GMT
Not After : Apr 1 04:56:27 2026 GMT
Subject: CN=69c36afc-726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:3c:2f:8c:63:e4:82:d4:1e:12:ee:bc:5f:
aa:ca:2c:2d:d2:46:96:02:28:9c:f5:3e:31:0c:03:
48:b2:3f:22:43:41:1a:4d:f1:60:43:89:51:55:68:
d7:4e:29:a6:71:87:99:86:f3:26:2c:51:ba:17:20:
84:95:12:8e:14:d0:0b:71:ca:7f:bc:aa:69:c3:f6:
d2:4c:79:ea:73:4f:5b:99:a6:0e:57:7a:fd:c6:a4:
4a:34:c8:44:4e:5e:f2:bb:3c:fe:14:36:94:ce:43:
44:22:c8:4a:56:d6:72:90:47:df:9f:9d:76:b0:d4:
76:79:6e:31:1c:fe:ec:eb:92:cf:f2:81:59:0a:ac:
bc:25:49:54:c7:81:bd:54:f3:8b:90:6a:34:b5:d0:
a1:7b:74:c8:53:22:dd:9d:30:54:56:91:a4:d9:36:
28:8c:40:7e:43:2d:ca:59:3c:cc:11:bf:25:be:05:
cd:5a:d2:30:ab:d9:cb:c9:e5:68:ad:10:30:de:a2:
8f:bf:03:32:f7:23:e8:55:bf:97:3c:b0:7d:70:2f:
9c:c2:ca:40:9c:e9:81:21:d1:be:c0:94:cf:32:5e:
fa:ab:06:65:d7:61:74:29:d2:b7:29:0c:4a:bc:0f:
7e:8f:1b:40:3e:55:a7:95:bb:b3:31:01:01:4c:87:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:DB:22:7E:27:46:09:00:30:37:59:B7:53:B8:25:46:84:70:2B
X509v3 Authority Key Identifier:
keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:c9:77:18:49:9f:c8:c2:ce:2b:2e:78:e4:dd:a8:0f:a3:
dc:46:7e:61:21:93:42:18:9e:e4:db:93:1f:de:0f:46:76:63:
c2:7e:e0:50:8a:c4:27:f4:d8:dd:49:c6:7d:f1:78:93:2d:64:
3b:f6:8a:98:c4:aa:fb:3b:b1:4e:68:81:1b:e1:86:10:39:39:
a3:8c:0e:04:84:3f:b4:50:c2:c0:68:ea:da:b8:6b:d5:63:04:
e2:c4:51:54:3a:59:96:e7:db:81:e1:13:d8:60:8a:cc:79:62:
c0:69:9e:73:bc:4a:ae:f8:38:b5:21:78:02:5f:70:4b:4d:06:
5a:93:d3:b8:90:58:09:f6:62:2e:dc:16:58:a8:d0:70:5c:85:
d7:0e:4b:d5:73:e2:b6:49:48:2a:ac:b2:cf:a9:53:1d:37:af:
eb:16:7e:1f:0d:7b:ef:2e:45:27:93:5b:42:83:84:4e:86:88:
27:3c:35:46:e3:9d:34:c2:8d:24:65:3c:0d:e2:78:2b:be:2d:
07:eb:9f:23:75:54:cf:d6:9f:68:3c:a6:f8:25:1e:43:86:89:
97:b8:0c:e9:1b:b8:59:9a:37:19:0f:d9:34:cc:1b:e6:0f:3f:
15:47:ab:d5:0d:34:73:eb:3a:dd:1d:73:9a:dd:9d:34:55:82:
da:b1:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:02 2026 by rpki-client