
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json)
Hash identifier: CCR6G2emM0bm9qfCfC6Q0YL0ddMfwqByuBdL5dt4BZk=
Subject key identifier: 1C:DE:FD:26:C0:C0:4B:A0:5D:76:30:C2:12:E6:7C:AB:90:3F:2B:A8
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
Manifest number: 01F9
Signing time: Fri 25 Sep 2026 03:20:53 +0000
Manifest this update: Fri 25 Sep 2026 03:20:52 +0000
Manifest next update: Fri 02 Oct 2026 03:20:52 +0000
Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: TK4E1W30CMrG8rxjtG0HuliTp0K/8pK1XeUYm6lTwjM=)
2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: 0ESXESaf1Km8hU3mbKXTS2edVIPzUkaWWbUdYQNfwzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Validity
Not Before: Sep 25 03:20:52 2026 GMT
Not After : Oct 2 03:20:52 2026 GMT
Subject: CN=6ab5e894-09a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:c8:a4:aa:e1:dc:03:b4:77:03:02:62:ba:
1c:e5:b0:38:bf:e5:ec:c2:0e:0d:f4:97:f0:5f:8e:
c3:c9:ff:62:a3:93:d1:98:78:91:aa:a2:45:a2:8b:
f6:c6:1b:77:e6:a9:db:46:f2:9b:b7:0d:80:73:88:
b4:55:79:8a:43:ca:a1:56:04:c8:14:f9:40:95:22:
73:5f:db:b8:ee:7d:b6:01:ab:67:c2:aa:57:6e:ed:
60:8a:a4:87:fe:c7:1a:85:64:c9:a8:72:6d:1b:f7:
99:d8:62:40:78:cf:25:29:52:bc:2c:76:a9:f9:89:
c9:5f:64:fe:27:5c:e3:cb:11:72:c2:d2:f9:7d:d7:
50:e1:ff:2b:ee:d7:e5:00:2a:38:5c:dd:22:a5:86:
2b:8d:8c:79:65:bc:d6:67:fd:f0:45:02:2e:e5:c1:
2c:74:16:9c:01:da:08:ec:00:6b:99:47:ef:90:30:
71:5f:57:b1:9e:72:f1:50:05:61:eb:15:ff:d5:78:
1b:33:56:31:2e:56:da:36:21:67:19:df:5f:19:a5:
ff:69:8e:f2:85:9d:ae:1d:e9:2e:2b:7e:17:d0:89:
cf:dc:8f:ea:40:9f:69:78:94:ba:96:11:9b:af:00:
93:e3:ae:50:0e:75:4d:db:81:28:3e:20:8f:80:8f:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:FD:26:C0:C0:4B:A0:5D:76:30:C2:12:E6:7C:AB:90:3F:2B:A8
X509v3 Authority Key Identifier:
keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:62:8b:94:58:dc:04:94:f0:ec:f2:9d:1c:21:ef:4a:20:dc:
07:01:a8:37:76:a2:a0:fb:05:b9:85:23:77:72:48:85:2b:4d:
54:cf:99:94:f0:cf:c4:da:48:56:09:ac:3d:75:fe:c4:b3:31:
2b:42:95:c2:46:6a:52:03:7b:38:94:fd:5b:ac:9d:ef:89:81:
b2:97:97:41:31:82:95:89:57:5c:3f:b9:70:df:f8:7e:1f:e2:
f2:5d:ce:f1:aa:ac:2d:de:1e:26:92:c1:e7:52:58:15:d2:52:
01:9f:d9:c5:84:08:d9:1a:1e:46:b5:1b:3a:66:72:86:37:1b:
ac:86:c0:c2:17:5d:43:d9:65:40:2f:ba:ec:31:41:40:5e:ad:
0e:64:dd:a2:af:64:c1:ba:4a:1e:b8:97:be:74:5f:db:18:4a:
60:8b:25:19:8a:d4:62:00:d6:02:4b:c0:af:dc:b7:f6:06:3b:
86:38:0d:c7:90:5d:3c:da:4e:e5:78:c4:4f:93:43:13:fa:80:
74:e2:21:47:53:64:20:c6:bb:63:fa:4b:43:f5:30:82:2c:03:
f2:6d:86:5b:64:b6:ab:b2:cd:5d:32:f1:22:f2:a3:7b:7c:56:
13:e1:e3:c8:e3:68:e1:5b:53:80:41:12:9d:aa:1d:f8:2b:e0:
de:e8:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:48:57 2026 by rpki-client