
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
File: UgGonTDEgplFBBjJVrh3JJcG6Vc.mft (raw, json)
Hash identifier: 2Zg3SmykOZbejJpQLbsh3GTWqCkSO5pGxlXLT66CEXE=
Subject key identifier: 21:D9:AB:A5:33:4B:25:9B:B9:BF:6E:D0:01:97:6D:F8:DB:BA:03:00
Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957
Certificate serial: 05F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
Manifest number: 05E3
Signing time: Tue 12 May 2026 23:04:21 +0000
Manifest this update: Tue 12 May 2026 23:04:21 +0000
Manifest next update: Tue 19 May 2026 23:04:21 +0000
Files and hashes: 1: UgGonTDEgplFBBjJVrh3JJcG6Vc.crl (hash: 3IT9AGtlWs/7t7S7MCiKs4jjsNOiZhPkY+J/VTVqP0A=)
2: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (hash: tMsJF1RkyUwJRBsH0zT5DwcSG9DDZ6NHm8vuVOU4VKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957
Validity
Not Before: May 12 23:04:21 2026 GMT
Not After : May 19 23:04:21 2026 GMT
Subject: CN=6a03b1f5-0073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:b1:0f:d2:36:94:a0:75:88:3b:14:c3:a2:
c4:82:1b:de:ff:68:5d:35:3d:48:36:b6:50:39:4a:
f0:9e:6d:43:50:2d:de:c7:6b:9f:2b:03:cd:89:83:
f5:6d:ec:e1:0e:c6:b4:46:cc:28:8f:a1:25:11:1b:
62:70:b4:68:cf:9a:ae:6a:25:50:5c:e3:fb:b9:e3:
28:6a:8d:d0:fb:2e:6a:06:8c:ee:7f:0b:81:f5:eb:
0c:7a:82:09:3b:55:05:49:4b:09:71:01:44:aa:93:
bd:11:d4:97:74:8c:1b:c7:34:31:10:b9:e4:d6:19:
29:d7:41:f5:72:1e:82:47:c3:b6:d1:a2:d5:6a:97:
b7:08:a0:0c:50:a8:0e:bf:34:e1:f9:94:b8:99:16:
33:8a:f8:02:96:ae:e9:41:4e:3a:d1:3f:1f:3f:31:
b2:02:b9:18:69:63:3a:03:23:9f:80:27:7e:12:9b:
54:5c:94:57:03:01:17:87:52:4e:84:ce:4d:6e:af:
7b:26:fa:d4:b7:b2:b4:dd:8d:8e:2d:df:85:66:30:
13:6d:5d:24:5a:df:06:f9:29:53:57:2b:7f:ab:ef:
39:00:92:4c:25:3f:51:01:f5:29:a2:50:77:79:16:
8a:33:19:76:33:92:53:42:f7:6d:0a:8a:14:98:56:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:AB:A5:33:4B:25:9B:B9:BF:6E:D0:01:97:6D:F8:DB:BA:03:00
X509v3 Authority Key Identifier:
keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:5d:d0:07:fe:cc:5b:5c:0d:2d:3a:b8:5b:f5:67:d6:08:8b:
25:06:1e:cd:a5:a0:2a:e1:06:40:88:0d:59:ab:b8:0d:58:4d:
20:e4:bf:08:17:42:e3:fc:2d:b2:25:c8:be:2c:62:2d:e8:ed:
ad:41:d7:58:a0:49:08:fe:cd:2c:32:7d:04:b9:e5:e0:b6:99:
3e:8b:85:04:a8:d0:6c:28:87:38:24:14:b7:0e:15:00:0f:c2:
db:ce:7e:41:ed:24:95:cc:58:fd:e5:27:ab:1a:a7:c4:c9:a8:
aa:c1:25:ad:1a:1f:64:73:f1:f9:e4:2f:68:1b:1a:98:11:18:
d6:5f:55:92:f4:41:c4:fb:7d:55:14:a0:f2:c9:78:46:8a:89:
df:50:e4:70:ba:9c:fe:b8:55:af:8e:48:04:5f:58:a9:ed:12:
d4:f5:70:6d:54:bf:6a:ff:68:ef:de:c2:50:a5:ff:59:3f:0b:
e8:3f:33:d3:75:e9:da:f3:db:5f:48:4a:d9:38:90:a8:50:7f:
83:85:5f:3b:b7:15:31:d0:26:37:0f:56:c6:9e:c7:68:c2:1d:
2e:5a:2b:bc:88:1d:77:7b:d8:98:01:55:64:e4:af:d4:dc:9b:
a7:a8:5b:f2:a1:ab:c8:fd:2d:fe:f5:2b:a0:dd:f8:3b:f7:81:
4b:67:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:42 2026 by rpki-client