
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json)
Hash identifier: htM2SKGQ7hItjy/zJ5kNDKmqTTcjFKyXtsqtM5TA4EI=
Subject key identifier: 19:65:C6:6C:22:46:78:EA:96:25:C1:13:43:43:C8:32:FD:20:20:49
Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
Manifest number: 02DE
Signing time: Tue 29 Sep 2026 01:27:21 +0000
Manifest this update: Tue 29 Sep 2026 01:27:20 +0000
Manifest next update: Tue 06 Oct 2026 01:27:20 +0000
Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: n2TfdZmAR+Q2tFym3IElCKbi+ttyR8t05yGK2TiVyUc=)
2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: qQtQpzpKePrE0RobwOY3K8zJSsDC8DXI0exZ1Gcq51U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 01:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Validity
Not Before: Sep 29 01:27:20 2026 GMT
Not After : Oct 6 01:27:20 2026 GMT
Subject: CN=6abb13f9-0301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:e7:80:58:4a:bc:30:c3:60:4a:81:11:94:
ae:2e:12:8a:8d:e3:b0:a7:31:b7:29:cd:44:f9:5e:
bd:74:50:b7:8f:79:6b:6f:76:31:30:9c:63:70:dc:
9a:c0:46:d4:d3:a1:b2:38:e8:7a:55:8a:81:ad:1d:
c6:68:ce:fa:de:9c:4d:9a:ab:0c:af:4d:b7:6c:0c:
d5:d3:2c:ef:49:d2:a6:44:76:55:bb:2f:67:9a:12:
26:36:ce:5d:3d:f0:b8:0e:2a:d3:68:ca:00:3f:d2:
2a:f5:07:3f:27:83:5d:48:66:22:71:65:cb:a4:85:
bd:c1:86:08:da:51:39:7f:bd:bb:0a:8d:46:85:8d:
4d:44:55:61:cc:c6:5a:92:ad:4f:7c:1b:00:a1:fc:
fd:db:25:16:38:f2:4a:13:95:34:fb:ab:5d:1b:48:
82:23:cf:42:1e:16:be:40:a6:22:13:92:55:b8:d8:
21:8c:7a:e0:a0:3e:8b:d2:25:67:e5:db:17:ea:09:
36:25:ab:e9:ad:e2:ae:9d:3a:42:74:f3:54:13:1d:
ee:a4:ba:14:ba:9d:dd:b2:15:f8:56:5b:85:c7:e8:
38:22:f9:22:af:e5:17:07:f2:f2:69:28:c9:16:5c:
ef:2a:e7:01:6d:04:2b:73:c8:b3:fd:85:e4:8a:e9:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:C6:6C:22:46:78:EA:96:25:C1:13:43:43:C8:32:FD:20:20:49
X509v3 Authority Key Identifier:
keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:89:d8:24:80:9d:65:74:fa:c0:1e:b5:46:6e:bc:ee:99:
c1:88:b9:45:54:57:45:ce:0d:e4:9a:9e:81:f3:57:a6:42:fd:
fa:c1:fb:58:c1:92:5a:ca:4f:bf:7b:d7:15:fd:d1:70:35:53:
2c:9c:80:06:b8:7c:86:4d:27:ce:84:c6:d0:88:af:3b:44:11:
be:d0:1b:a1:55:f1:3f:12:c7:d8:44:f1:a0:a7:77:50:35:c6:
47:7c:0a:98:1c:76:fb:93:48:ad:da:7a:0d:36:c6:dc:ea:25:
0b:29:85:8d:2a:33:fd:de:ad:a1:e6:55:9d:90:fb:26:7e:a1:
42:a1:bf:e3:91:9f:29:c6:db:80:2c:0e:f2:72:ef:2e:c0:85:
a3:76:2f:c2:80:82:19:35:02:b7:72:60:59:b6:36:71:13:ee:
45:f0:45:40:54:f7:8c:a0:7c:e2:96:af:48:eb:00:fe:58:30:
d0:d1:83:e4:02:95:f2:b1:57:4e:de:ee:78:da:d1:9e:7d:da:
b3:36:da:a2:50:f4:b2:b0:26:29:f2:0d:53:99:1f:75:63:fe:
78:ef:03:b9:97:d4:19:b3:d3:f6:7d:ef:34:04:c1:f2:ae:cb:
e0:1b:73:2a:0a:4b:9c:ae:8d:6b:53:f3:9a:65:98:aa:5e:52:
82:86:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:24:15 2026 by rpki-client