
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
File: uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json)
Hash identifier: 6IRQxyzCqfMO9Q/3dYWSWhFdFz+9K3gl8A6sbhyF5gE=
Subject key identifier: F9:6B:D3:A9:42:3E:0D:BA:67:84:84:74:7A:D6:C7:C7:8F:A2:F0:A7
Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Certificate serial: 042B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
Manifest number: 041E
Signing time: Wed 25 Mar 2026 00:04:20 +0000
Manifest this update: Wed 25 Mar 2026 00:04:20 +0000
Manifest next update: Wed 01 Apr 2026 00:04:20 +0000
Files and hashes: 1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: JT9xQfhzYeiKMavzzBxnyJOxYm2d4P9dVu+xOPKMJds=)
2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: x84TGpJwkGN1F9rNjJJlUOFJsWsbRZGA551g4hInBlw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl
rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Validity
Not Before: Mar 25 00:04:20 2026 GMT
Not After : Apr 1 00:04:20 2026 GMT
Subject: CN=69c32684-775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:88:64:04:ad:c4:a7:e6:bb:4b:e3:45:70:
8b:24:60:62:ce:41:7f:89:16:2e:47:73:62:e3:b5:
ff:a7:f8:39:9a:ca:3a:e7:e0:12:ab:16:a2:4d:71:
a7:5b:3f:64:31:86:5d:72:53:4f:ac:34:1d:d2:fb:
51:af:d7:1d:21:92:8b:b6:a6:ff:65:a8:43:e8:86:
9b:77:ae:bb:dd:3e:73:32:37:20:6e:f0:18:27:b0:
3d:67:e2:f4:b2:76:54:ae:e6:78:a1:23:5d:0c:a5:
79:42:4e:2b:81:7b:26:c4:4d:32:7d:86:b1:ab:a4:
5f:a0:8b:33:a8:89:51:02:71:c2:5b:bc:a4:05:3a:
6b:4d:56:78:30:54:ca:e2:75:29:cd:c2:49:5e:e4:
60:ef:c3:41:11:02:06:37:e8:20:b3:b5:07:ce:ef:
2b:2a:4e:db:92:d5:11:4d:74:25:da:01:b8:9d:f8:
66:7e:b2:ff:a1:87:a8:a0:2a:35:ca:fd:30:13:b7:
e5:52:70:52:00:60:48:f1:18:64:83:d1:8c:d9:e7:
0b:bc:21:34:ef:70:0f:d8:27:24:18:03:92:57:79:
a2:f6:37:7f:c5:cf:ca:70:bb:1b:f2:f5:c5:a3:78:
85:a2:0b:39:10:32:44:6b:06:ff:0c:fa:69:1a:d4:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:D3:A9:42:3E:0D:BA:67:84:84:74:7A:D6:C7:C7:8F:A2:F0:A7
X509v3 Authority Key Identifier:
keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:92:1b:c8:b2:be:cb:2d:ef:cb:04:70:54:1a:ea:1b:ef:
95:2e:cd:8f:19:f4:9a:48:d3:76:fb:a1:40:de:ba:ef:9f:e5:
08:3f:e0:24:05:37:73:45:09:65:63:1b:ed:d9:02:20:89:bb:
9d:d9:8b:40:3f:91:c9:fd:ab:cf:75:a4:28:64:87:ea:ba:e1:
e4:62:d5:67:0e:42:5e:0a:ac:9e:1b:9a:b7:2c:84:a0:46:44:
cf:38:71:24:d5:27:97:93:dd:5f:26:80:1d:d3:bb:98:39:3a:
01:1d:9f:f1:e1:2b:5a:d4:b2:aa:e9:47:71:83:91:5f:ed:e0:
fe:42:13:52:4b:3a:60:85:58:4c:5a:79:a9:b6:79:92:35:e1:
bc:b8:e1:e8:3c:04:c6:0a:b8:32:72:24:9d:2e:f5:b0:eb:5f:
31:9a:82:8d:9c:fe:53:a8:f8:fc:b9:65:89:e9:31:3b:3e:da:
65:16:9e:e0:9f:e6:96:29:25:8e:f6:bf:a1:40:47:fc:b3:77:
a8:dd:c6:5e:a6:57:ce:d7:d2:c3:20:d4:b1:7d:05:0d:9e:bc:
3b:dc:ff:56:53:8b:a5:db:ac:2c:59:a7:06:a5:89:00:e2:7a:
ac:68:14:b0:a0:57:a0:fb:ed:30:32:00:a0:54:12:46:28:3a:
21:53:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:27 2026 by rpki-client