
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json)
Hash identifier: jrZp2vWAsrBD506UjJpZHb7OBGL3yw3ZcY61KQ5LU14=
Subject key identifier: CF:39:2A:3D:A2:1A:79:DD:4E:36:1A:D0:34:3D:75:04:CB:7C:6D:B9
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial: 0897
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
Manifest number: 0885
Signing time: Wed 22 Jul 2026 21:12:58 +0000
Manifest this update: Wed 22 Jul 2026 21:12:57 +0000
Manifest next update: Wed 29 Jul 2026 21:12:57 +0000
Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: RZRsGhcB0d4ox+HTSfxU1PgaHid52MdrQB86AClgFdw=)
2: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: 8w0OkkiQMesnqjsDX17pMHO1P+oif+rNa46fjPHMrwM=)
3: 3791632A030011EB909C3244C4F9AE02.roa (hash: XDxzL6lCljcaL+PFu7uqMJYwZnreyNdPjBF2CgcbiTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Validity
Not Before: Jul 22 21:12:57 2026 GMT
Not After : Jul 29 21:12:57 2026 GMT
Subject: CN=6a613259-8e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b3:56:e8:14:02:61:6c:9f:a4:fe:d4:0c:cd:
31:f2:cf:e4:5e:d1:bb:97:4d:9a:21:93:15:44:48:
49:6f:07:08:a2:6d:dd:49:db:19:0a:fe:60:56:29:
e8:c5:2a:19:c6:f4:39:18:b1:d1:c8:9d:51:a2:47:
05:af:60:77:24:d0:fd:16:ba:c7:d9:cc:dd:28:07:
a0:d9:08:68:f4:70:87:ea:12:6d:c6:86:99:6a:99:
64:14:3a:b7:60:38:fd:8c:0a:ec:fc:c4:0f:4e:b0:
60:cd:f4:05:d6:69:d8:18:cc:fe:c8:25:af:89:3e:
47:2a:d3:c6:72:d5:e1:89:df:a5:82:e3:4e:a3:53:
4a:a2:be:e8:c4:9d:23:2d:58:b7:70:78:26:c9:77:
d3:3b:26:6c:9b:71:9b:b6:1b:40:17:7f:de:28:8b:
49:15:42:29:74:3f:0a:b4:41:b9:69:39:52:08:99:
d2:bd:14:64:7a:a6:2f:92:7e:bd:89:6c:bf:e8:73:
57:7e:36:5a:5c:33:4b:c9:7f:f7:f5:22:90:e1:36:
e6:e1:1d:19:48:c6:fa:9b:0f:e0:94:e7:44:0e:da:
e5:4d:b0:2d:73:0b:19:0c:7b:d3:62:62:fb:fa:4f:
a5:b4:7d:3b:a5:fe:90:e0:8b:0d:31:e9:14:6f:28:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:2A:3D:A2:1A:79:DD:4E:36:1A:D0:34:3D:75:04:CB:7C:6D:B9
X509v3 Authority Key Identifier:
keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:ea:43:a5:60:8a:a6:42:0d:db:03:d7:48:b9:ba:b4:90:78:
56:14:03:71:29:51:29:72:91:cc:06:f8:0c:59:8d:bc:7e:37:
5a:a5:2a:b8:97:0f:04:99:c4:7f:38:ad:16:ed:48:20:7f:25:
04:4b:9b:a8:6f:d4:54:b0:53:b4:bf:b9:0d:aa:1b:c6:82:9f:
c9:f4:34:36:8b:1a:52:f6:ef:9a:08:33:f5:76:d2:78:8a:99:
a1:9f:64:40:e6:40:10:48:15:a8:30:b0:8a:96:94:a9:99:07:
65:99:3b:fe:dd:60:14:2c:82:40:95:54:7b:7d:84:18:84:cb:
70:97:85:2a:bb:e7:2f:4e:01:e4:8b:22:69:05:e2:82:99:4e:
fd:fb:d7:4d:b7:16:fe:24:f8:f4:28:f4:0e:f7:02:55:73:bc:
75:dd:f0:19:bd:35:00:e0:30:93:1c:2d:96:35:47:98:be:b6:
4e:2e:78:6b:ca:8e:19:7b:a7:d4:92:37:3b:c2:28:f0:28:bd:
47:99:47:8c:db:b5:71:63:1e:19:0d:97:63:1f:0b:4c:5b:f1:
d9:6b:7d:38:6b:6f:ee:e3:65:71:66:54:87:2a:97:a2:aa:ba:
62:d5:59:e4:94:e8:24:e1:01:c9:ba:46:58:c0:9e:2c:f6:d2:
01:16:b6:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2
QzFDNzE2ODIwHhcNMjYwNzIyMjExMjU3WhcNMjYwNzI5MjExMjU3WjAYMRYwFAYD
VQQDEw02YTYxMzI1OS04ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA87NW6BQCYWyfpP7UDM0x8s/kXtG7l02aIZMVREhJbwcIom3dSdsZCv5gVino
xSoZxvQ5GLHRyJ1RokcFr2B3JND9FrrH2czdKAeg2Qho9HCH6hJtxoaZaplkFDq3
YDj9jArs/MQPTrBgzfQF1mnYGMz+yCWviT5HKtPGctXhid+lguNOo1NKor7oxJ0j
LVi3cHgmyXfTOyZsm3GbthtAF3/eKItJFUIpdD8KtEG5aTlSCJnSvRRkeqYvkn69
iWy/6HNXfjZaXDNLyX/39SKQ4Tbm4R0ZSMb6mw/glOdEDtrlTbAtcwsZDHvTYmL7
+k+ltH07pf6Q4IsNMekUbygNOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM85Kj2i
GnndTjYa0DQ9dQTLfG25MB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy
RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0FGOC80ODI5N0ZFRTAyRkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQ
S0RmVG03aGpRMGhzSEhGb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYupDpWCKpkIN2wPXSLm6tJB4VhQDcSlRKXKRzAb4DFmNvH43WqUquJcPBJnE
fzitFu1IIH8lBEubqG/UVLBTtL+5DaobxoKfyfQ0NosaUvbvmggz9XbSeIqZoZ9k
QOZAEEgVqDCwipaUqZkHZZk7/t1gFCyCQJVUe32EGITLcJeFKrvnL04B5IsiaQXi
gplO/fvXTbcW/iT49Cj0DvcCVXO8dd3wGb01AOAwkxwtljVHmL62Ti54a8qOGXun
1JI3O8Io8Ci9R5lHjNu1cWMeGQ2XYx8LTFvx2Wt9OGtv7uNlcWZUhyqXoqq6YtVZ
5JToJOEBybpGWMCeLPbSARa2pQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:42 2026 by rpki-client