
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
File: uN9D7us1RpuyzAulIS0b_yaKe24.mft (raw, json)
Hash identifier: KbubdqjkUK0OXPueo5MMIxBKSSuS1TE21c78FOxdjQI=
Subject key identifier: 1A:FD:DE:06:11:07:0B:31:C1:44:54:6E:51:89:6D:99:86:07:4B:FF
Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
Certificate issuer: /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
Manifest number: 028A
Signing time: Wed 13 May 2026 01:53:16 +0000
Manifest this update: Wed 13 May 2026 01:53:15 +0000
Manifest next update: Wed 20 May 2026 01:53:15 +0000
Files and hashes: 1: uN9D7us1RpuyzAulIS0b_yaKe24.crl (hash: oYLoTCebYosscUbxoIbvPVHb+W4Ni7A/vkelQZuOKKg=)
2: 90269D3A716611ED9D80F448C4F9AE02.roa (hash: ogU/j3OOcAMtUhqvFDXyTh+nM/5Ri8VmgPSxYiiE5to=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Validity
Not Before: May 13 01:53:15 2026 GMT
Not After : May 20 01:53:15 2026 GMT
Subject: CN=6a03d98b-0e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:28:96:c5:c2:3f:30:bc:da:16:5b:e3:67:
db:07:42:e6:2c:51:fb:7c:5e:76:b9:04:97:14:0b:
59:70:67:0d:46:14:3b:89:35:1c:60:6a:ff:4f:ab:
9d:20:22:3e:68:22:80:5b:a4:b8:e6:47:2e:a6:d3:
b4:cf:e6:c5:66:96:36:ee:6d:54:84:98:c7:2f:d6:
14:dd:96:b6:77:dc:f9:a4:c1:e8:72:c6:68:f6:31:
cf:ea:1e:28:c4:c7:9f:2e:e6:e1:c0:96:22:a5:e0:
6b:75:ef:ca:6a:bf:6f:12:5d:80:75:aa:e4:68:21:
40:c7:2b:6a:6c:74:bb:c5:bc:5a:f8:d8:de:aa:cc:
91:dc:cd:ce:b9:20:37:43:76:e8:42:35:c6:73:05:
73:6f:fd:02:26:bd:af:d0:69:be:7d:01:d6:34:b2:
3a:ef:01:2d:be:71:84:ff:bc:60:c9:a4:fe:b3:54:
04:e8:2f:b6:aa:1d:eb:59:75:0a:48:e4:ff:f2:c6:
35:a9:fa:8c:52:3b:ad:63:d1:4c:ed:17:b8:13:3e:
8f:17:a9:c1:37:dc:20:d1:ea:9b:8f:a5:f1:76:5b:
12:b1:9f:da:8d:13:ea:fd:1a:b4:db:f3:47:05:e2:
c5:66:94:95:8d:83:a6:48:ec:ed:c9:2a:4a:41:1b:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:DE:06:11:07:0B:31:C1:44:54:6E:51:89:6D:99:86:07:4B:FF
X509v3 Authority Key Identifier:
keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:68:fb:cc:da:57:b4:7c:19:b1:23:e3:50:76:ab:49:c3:d8:
6a:a1:a6:20:d2:a8:f9:f7:66:1d:1d:76:9e:c1:38:40:a7:5b:
90:88:1d:92:ad:56:16:28:bb:0c:b7:01:b4:99:91:7e:ea:8c:
ce:69:96:48:94:97:f7:49:46:8b:1f:95:d6:6a:1a:6d:51:51:
d0:1d:69:ab:6a:12:75:ab:eb:c2:09:b5:de:36:4d:e3:eb:e4:
10:a3:2c:70:0b:00:65:c5:0a:de:9d:5c:48:f6:b3:ac:8b:19:
1c:02:c8:1c:4b:e3:b4:54:53:08:d7:f5:e1:fa:e6:f4:48:fc:
f2:50:99:a6:c1:d6:9f:dd:c8:32:3f:35:89:30:c5:eb:17:a4:
9e:cc:ab:dd:3f:bf:63:b7:7a:2f:6d:a4:11:36:34:46:90:3e:
74:b4:d0:3b:d3:bd:c7:69:8e:b4:3c:85:12:ae:8a:60:35:d2:
5d:b5:61:f4:2e:9f:71:d5:29:94:8e:06:85:71:7e:57:1b:24:
71:59:96:8e:8a:14:53:ef:81:84:8e:48:1a:74:31:72:39:ec:
5a:03:77:bf:b1:95:ab:a3:ab:67:d2:78:f4:14:04:9b:1c:4c:
ea:6b:7c:92:bf:05:8e:9f:7f:a9:62:61:a8:21:df:39:c1:25:
05:67:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:37 2026 by rpki-client