
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
File: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft (raw, json)
Hash identifier: qw77FNXy0kb3iuIrqWxwbbTVuANG/XkaXk0xr1fI7b8=
Subject key identifier: 10:73:96:B4:4F:97:0B:48:C9:4C:F9:F3:CD:6A:06:90:D2:11:6B:22
Authority key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
Certificate issuer: /CN=A91201F1/serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
Manifest number: 16
Signing time: Sun 01 Mar 2026 10:34:56 +0000
Manifest this update: Sun 01 Mar 2026 10:34:56 +0000
Manifest next update: Sun 08 Mar 2026 10:34:56 +0000
Files and hashes: 1: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl (hash: u8TRC2KxLenmVyUSA6+VFZMVtnBUxXIg+CKAoBdjDhE=)
2: D93132D6019811F1B6B26F14666F56BC.roa (hash: Kdauw0gJZUlOd9cLWCyN/Fmo1Dvhpdel9pLxOkR1eyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Validity
Not Before: Mar 1 10:34:56 2026 GMT
Not After : Mar 8 10:34:56 2026 GMT
Subject: CN=69a41650-7880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:60:76:a5:00:70:ff:84:61:db:84:bd:bf:
6a:dd:4f:ff:82:fd:25:c3:d3:00:d9:18:04:68:5b:
e1:bb:72:4c:29:68:b6:21:de:9a:2b:77:20:85:ea:
58:ea:b4:6b:a9:98:77:53:56:c4:ef:35:22:10:1f:
2f:19:64:d5:b6:36:c2:a4:5b:3d:7f:80:b2:eb:bf:
81:89:40:e0:c3:a5:e7:94:23:10:ef:64:7e:9d:37:
61:38:76:42:7f:86:cb:06:68:ce:ab:0a:f1:e2:98:
75:fd:10:d4:a2:64:eb:f4:b1:3c:90:28:11:8f:54:
46:a8:bb:4a:85:e9:f1:0a:d7:47:e0:0a:23:46:74:
84:8d:08:ba:e2:2a:52:79:e2:5f:11:a3:5a:54:01:
90:c9:18:c7:ca:3c:b1:6c:79:c9:50:fe:af:82:27:
d6:d4:f2:78:f6:4d:56:12:09:14:9f:02:8e:d4:c0:
b6:aa:f0:15:57:99:b0:9b:2b:6e:86:68:b4:1d:c9:
23:3b:52:e8:56:06:cf:79:f5:4e:80:81:92:d5:c8:
e9:1e:7c:de:30:18:39:df:8b:48:4a:bb:58:f9:77:
e6:4a:79:11:57:82:27:5a:f9:51:1a:85:d9:53:fa:
0d:d6:53:d3:7a:ac:1d:3f:67:44:53:a6:de:4a:57:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:96:B4:4F:97:0B:48:C9:4C:F9:F3:CD:6A:06:90:D2:11:6B:22
X509v3 Authority Key Identifier:
keyid:51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:4a:67:fe:86:7b:51:78:a9:f0:30:16:d1:25:eb:e4:16:25:
0b:a0:cf:17:dd:fa:f9:5e:21:6f:5d:e3:66:64:b7:8c:a7:ee:
83:30:dd:98:c3:48:c9:18:02:28:26:07:90:46:fe:78:99:2a:
73:d9:cf:88:48:56:98:6f:9c:12:65:50:e2:b2:ad:6c:b8:56:
fb:45:c5:74:0b:b5:8e:4a:41:e7:51:72:f3:91:6c:ff:84:b9:
e6:a5:e9:10:ff:28:fd:b3:1c:89:e1:76:47:41:35:43:89:f1:
6c:b0:78:8e:59:21:37:60:6b:3b:5a:08:52:86:8e:2a:e1:91:
6d:b7:0d:8b:62:5e:e0:a1:93:2b:11:4f:c8:13:e7:9c:5a:ba:
f0:76:8c:a5:41:dd:f8:eb:30:15:71:99:69:b1:89:21:10:75:
7d:5e:80:81:ef:88:83:ac:c0:9d:94:bb:f0:3c:2e:30:52:71:
7a:58:e2:16:bb:f8:5c:71:52:42:ac:68:61:06:61:33:98:2b:
85:14:b9:a7:19:65:80:aa:69:ee:d7:ee:90:e1:34:e1:0d:f7:
f4:51:5d:83:ee:48:82:53:34:11:56:e5:c2:b6:fd:af:31:88:
50:b0:4e:53:92:cd:72:00:fe:3c:3b:fd:49:23:e9:80:d8:4c:
f7:fc:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:34 2026 by rpki-client