
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json)
Hash identifier: fCp5H2nwbCQltuLNhwdcVw93jvr5pCabJKoVdGcFD6U=
Subject key identifier: 36:83:60:70:24:1E:21:92:41:20:3B:5A:8D:76:C1:CE:38:98:5A:97
Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957
Certificate serial: 05DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
Manifest number: 05CA
Signing time: Tue 24 Mar 2026 22:44:37 +0000
Manifest this update: Tue 24 Mar 2026 22:44:37 +0000
Manifest next update: Tue 31 Mar 2026 22:44:37 +0000
Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: o1wWx4WoWtgte1Jq79VsOdUkUOTszQzeThimDRKM6+k=)
2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: tMsJF1RkyUwJRBsH0zT5DwcSG9DDZ6NHm8vuVOU4VKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957
Validity
Not Before: Mar 24 22:44:37 2026 GMT
Not After : Mar 31 22:44:37 2026 GMT
Subject: CN=69c313d5-088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:b1:a5:c5:f0:ac:fc:12:f3:00:ae:d7:d6:
18:06:b5:1c:59:5f:1d:ff:b1:67:ca:6b:50:8d:b8:
7e:4f:ad:c1:40:81:74:00:6a:c6:b0:37:06:f0:2c:
24:b0:dd:7d:0d:bb:70:b4:81:e3:52:7b:18:69:5e:
e1:46:24:e1:7d:e1:78:97:ab:17:65:bd:52:e1:24:
a1:8f:f5:b8:8b:9a:66:e1:ed:a0:72:e1:59:8b:69:
d2:38:21:af:4d:c3:e4:64:c4:02:dc:be:ec:c5:f1:
35:0e:66:02:7a:2f:e6:d1:1e:6f:17:95:2e:16:65:
be:c6:94:aa:15:56:29:4f:77:81:5f:b3:23:48:55:
f5:69:d4:bd:ad:4b:83:9a:6d:24:db:aa:df:a4:8f:
85:b2:1d:ef:85:6e:c9:ac:51:db:6b:99:55:8a:26:
f5:51:78:bc:e9:d9:36:3a:31:d6:eb:3e:67:61:e2:
e0:66:e6:1a:ba:fd:b4:f5:f5:78:79:2b:39:d1:84:
70:4a:fc:6d:82:76:3b:3a:80:1b:66:c7:d2:89:b6:
75:53:0f:1a:96:b1:ac:fe:cd:8a:13:51:d7:05:d8:
6a:07:fa:45:41:f8:7a:7c:a9:1c:43:42:0c:f4:84:
14:97:75:19:55:be:8d:9b:13:93:a3:e8:11:a1:54:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:83:60:70:24:1E:21:92:41:20:3B:5A:8D:76:C1:CE:38:98:5A:97
X509v3 Authority Key Identifier:
keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:b6:46:f3:19:10:81:8b:f5:8e:53:66:58:75:6f:28:58:be:
63:b5:df:aa:56:0e:8d:14:d6:eb:e7:f7:59:72:c9:89:5b:b1:
52:70:5c:e4:c1:a9:5e:0c:3f:7e:1e:dc:12:f0:73:6e:99:d9:
39:99:05:77:6a:db:4e:8f:ff:2b:ca:d5:cd:6c:da:a3:05:9f:
0d:72:ed:d6:26:b9:11:72:dd:5d:0f:7f:6b:9d:e4:53:9a:3e:
a0:79:c8:18:1c:20:cc:5a:62:fb:eb:18:c1:96:33:aa:ce:0d:
26:1a:61:c5:92:58:6a:e6:51:b0:bb:f3:f5:bf:b4:e1:71:b5:
a9:c8:6d:60:56:fa:bf:46:8f:2b:c9:e7:2c:31:78:52:b8:e3:
62:6a:72:fc:3d:09:38:2a:e8:59:04:c6:dd:ea:6c:54:c0:43:
12:4f:a5:dc:c1:32:b6:1d:68:70:f2:7b:85:23:94:c4:9e:d8:
6a:1f:0a:41:41:a7:e7:51:ae:d0:c4:65:5e:24:7b:26:86:06:
de:c9:af:b0:64:fc:34:6b:69:42:75:49:cb:e4:30:1a:34:a8:
aa:ef:f2:5b:9a:90:fa:cc:ba:56:a9:cf:76:74:ca:5b:c4:69:
37:be:d2:07:94:5b:f8:ae:a6:97:2b:e8:92:26:65:a0:61:97:
a2:8b:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:44:15 2026 by rpki-client