
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json)
Hash identifier: FeNUCAzBEWuOQiAA8lnpKqmOZ/yr/80/4rtdrMixBG8=
Subject key identifier: 56:B4:BD:1F:50:5A:F4:A2:72:7A:E7:21:63:74:EE:46:A0:C6:E8:0C
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial: 0275
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
Manifest number: 0257
Signing time: Wed 25 Mar 2026 01:59:35 +0000
Manifest this update: Wed 25 Mar 2026 01:59:34 +0000
Manifest next update: Wed 01 Apr 2026 01:59:34 +0000
Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: FX3VmzpAa8brOIOWwpB1pv6Hlhpn9/QMqxGRPJZZZBE=)
2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: UgIjU1Y9FIQZMVmVVjbiH3ya5cbpCsU387MDkBuS42U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Validity
Not Before: Mar 25 01:59:34 2026 GMT
Not After : Apr 1 01:59:34 2026 GMT
Subject: CN=69c34187-a14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:4e:50:70:e7:f8:e7:1d:63:ce:63:10:03:
d0:24:31:ef:83:76:b6:04:1f:28:80:bd:bc:1e:8f:
ec:3c:aa:ba:68:dd:36:d8:59:2c:ea:6e:46:7c:0c:
0c:d6:33:54:01:fa:be:62:21:b3:87:cc:f5:c3:ce:
18:a5:88:28:40:c9:93:ec:65:7d:b9:23:39:89:d3:
9e:92:87:c2:9e:43:10:b1:06:12:1c:b3:eb:91:04:
c8:f1:f1:8b:e1:9e:18:6d:bc:42:f6:4a:33:16:9f:
11:e4:16:50:dd:b0:a3:b5:68:a2:9f:a4:5d:87:c2:
a6:d3:5b:f5:97:00:6a:31:10:4c:2c:ee:2d:cd:42:
9d:1f:18:ac:b8:9a:a7:2d:a8:e4:b0:ff:fb:15:89:
f0:96:ca:f1:85:82:24:52:39:44:60:84:d7:e8:41:
54:d9:ac:bc:2c:fa:f5:11:06:a4:c6:1b:10:08:0c:
39:ff:21:80:c8:4e:cc:7e:c2:c1:b2:fd:9d:70:68:
5a:2e:73:c4:bb:47:cb:c5:c5:26:9a:4f:7c:f9:88:
9f:5e:4a:bd:e7:91:6f:a2:db:f1:c1:f5:52:1a:52:
f4:de:39:84:85:e8:97:34:10:c2:2b:11:47:78:ee:
9b:74:08:e8:ac:70:89:9e:74:33:ef:08:c6:e3:18:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B4:BD:1F:50:5A:F4:A2:72:7A:E7:21:63:74:EE:46:A0:C6:E8:0C
X509v3 Authority Key Identifier:
keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:30:e1:0a:6e:c1:03:07:af:f4:cf:f8:35:5a:32:d7:b4:51:
8f:70:e8:6f:c1:17:4e:04:9e:f0:9c:66:ac:66:ee:b1:d4:2e:
77:99:02:fb:fb:2a:13:28:b2:50:95:f8:40:81:8b:b7:12:3c:
e5:e9:93:a1:29:9e:a2:b6:bf:f0:61:08:9c:4a:d8:e2:6b:11:
05:8e:f6:fc:9d:71:d6:3d:10:f5:7f:63:a8:42:e1:64:fc:d6:
cf:aa:d4:ef:db:9e:bf:16:9d:a9:d1:9f:48:26:22:22:0e:81:
6e:62:24:9b:54:53:87:11:a4:ab:07:6b:d1:21:7a:95:38:4d:
c9:fd:88:ea:3d:f9:12:87:7f:dc:0f:7e:92:ed:0e:90:ac:34:
54:41:b9:a9:e6:f2:64:99:cd:87:92:a7:e8:fd:45:f8:4d:da:
d1:bf:d0:bc:bf:3d:8b:cc:bf:69:ab:d6:68:22:88:b6:2c:a7:
93:ce:62:06:e1:36:3a:87:25:71:82:f0:3c:cd:2d:c6:43:91:
ef:b9:34:4a:c2:d8:78:96:77:79:63:90:db:08:20:ef:a1:35:
62:23:bc:aa:0a:53:a3:15:f8:3d:92:18:a3:7c:f3:48:60:96:
63:13:1d:22:25:7a:bd:83:f7:f5:9d:3a:da:47:06:ac:34:e0:
55:65:45:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx
QjI2NEMzRTgwHhcNMjYwMzI1MDE1OTM0WhcNMjYwNDAxMDE1OTM0WjAYMRYwFAYD
VQQDEw02OWMzNDE4Ny1hMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAreFOUHDn+OcdY85jEAPQJDHvg3a2BB8ogL28Ho/sPKq6aN022Fks6m5GfAwM
1jNUAfq+YiGzh8z1w84YpYgoQMmT7GV9uSM5idOekofCnkMQsQYSHLPrkQTI8fGL
4Z4YbbxC9kozFp8R5BZQ3bCjtWiin6Rdh8Km01v1lwBqMRBMLO4tzUKdHxisuJqn
LajksP/7FYnwlsrxhYIkUjlEYITX6EFU2ay8LPr1EQakxhsQCAw5/yGAyE7MfsLB
sv2dcGhaLnPEu0fLxcUmmk98+YifXkq955FvotvxwfVSGlL03jmEheiXNBDCKxFH
eO6bdAjorHCJnnQz7wjG4xi3jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFa0vR9Q
WvSicnrnIWN07kagxugMMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND
NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4
R09NQjRPYWl4amNiSmt3LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhjDhCm7BAwev9M/4NVoy17RRj3Dob8EXTgSe8JxmrGbusdQud5kC+/sqEyiy
UJX4QIGLtxI85emToSmeora/8GEInErY4msRBY72/J1x1j0Q9X9jqELhZPzWz6rU
79uevxadqdGfSCYiIg6BbmIkm1RThxGkqwdr0SF6lThNyf2I6j35Eod/3A9+ku0O
kKw0VEG5qebyZJnNh5Kn6P1F+E3a0b/QvL89i8y/aavWaCKItiynk85iBuE2Oocl
cYLwPM0txkOR77k0SsLYeJZ3eWOQ2wgg76E1YiO8qgpToxX4PZIYo3zzSGCWYxMd
IiV6vYP39Z062kcGrDTgVWVFpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:21:34 2026 by rpki-client