
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
File: 0ueOUsXby_XhhB2s5SeuqolKmnY.mft (raw, json)
Hash identifier: 5jv1A620zhVpqToOOWKpjS+doA5hAv/ItMiQ6yFpXFU=
Subject key identifier: B7:E3:E2:3C:08:36:CF:75:45:2B:1E:0A:2D:C7:3B:1A:9B:E3:8F:31
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Certificate issuer: /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial: 06D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
Manifest number: 06B9
Signing time: Mon 02 Mar 2026 00:11:15 +0000
Manifest this update: Mon 02 Mar 2026 00:11:13 +0000
Manifest next update: Mon 09 Mar 2026 00:11:13 +0000
Files and hashes: 1: 0ueOUsXby_XhhB2s5SeuqolKmnY.crl (hash: le92NClfRF8xEf567IFRHQAh4On6j3+gJ+W2TkA/Grg=)
2: D19ABBB48E6011EC93F6710FC4F9AE02.roa (hash: nullkbuf8volpzePAT+niio6wmlA+A2AmUVttZ6G0NU=)
3: CFD605CC8E6011EC93F6710FC4F9AE02.roa (hash: rsrIgh6C8+YVwIA90PiEa791Tr42GR5SzlQ38Jv8/j4=)
4: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (hash: ZHsuT3YFJqQwpMUTOsVFNaOirtmacroaZkjFqhqZbvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746 (0x6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262BD, serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Validity
Not Before: Mar 2 00:11:13 2026 GMT
Not After : Mar 9 00:11:13 2026 GMT
Subject: CN=69a4d5a3-cfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:e8:5e:1b:e8:e3:05:29:05:3b:e8:de:b3:
4f:ce:f4:64:65:23:b5:d2:96:6d:5c:bc:de:6a:1a:
86:9d:25:bf:ef:04:cd:80:25:c2:0d:f5:e5:6a:99:
5b:29:0f:1d:26:30:e1:b3:62:ce:a4:d3:08:87:55:
ae:f4:cd:04:74:59:0f:58:b5:2f:00:b1:34:82:2a:
95:ea:29:cd:36:2c:f6:5e:51:0a:ca:e8:d5:14:3c:
09:69:99:8d:16:3b:a2:ff:45:0b:df:0b:ac:9b:5b:
83:44:65:d1:45:03:de:18:02:4e:cd:98:da:9f:73:
77:39:99:e6:2d:af:e7:89:7f:a0:5f:d8:ee:7f:33:
4a:cd:b3:d9:2d:aa:30:71:13:49:cf:e2:8a:e5:00:
ec:5b:0a:e8:64:4c:88:e0:b1:4a:0b:38:70:8a:3e:
64:ae:81:75:20:a7:f0:6a:16:40:00:fb:6f:f2:82:
e9:8d:df:4d:26:1a:74:4c:11:92:28:d6:ca:f4:fe:
a2:49:13:8a:ae:cc:02:9d:be:14:4c:ad:aa:20:c6:
30:2a:db:60:a6:32:75:5d:12:19:5b:32:b4:88:54:
ca:75:d8:65:cd:f7:c9:ec:87:1b:2b:a6:0d:b0:95:
d3:ea:e8:45:49:f3:a1:98:db:2d:5d:9e:61:5d:12:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E3:E2:3C:08:36:CF:75:45:2B:1E:0A:2D:C7:3B:1A:9B:E3:8F:31
X509v3 Authority Key Identifier:
keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6b:14:29:e6:c6:ab:71:de:2b:ba:5d:12:91:35:10:61:05:
c7:31:82:b5:e8:80:a3:44:42:1f:7e:98:fa:16:01:e3:95:33:
12:31:3d:5d:bc:9c:10:82:ff:87:16:d1:e2:47:28:98:74:21:
23:cd:e0:eb:15:83:7d:0b:3f:a1:68:2f:3d:cd:96:d3:49:a9:
2d:8a:7a:f5:66:69:85:ae:fe:5e:02:32:f4:85:6e:e8:9d:f4:
35:1d:b2:6b:37:ca:e8:15:81:bd:9e:84:fe:ca:a7:a6:a2:40:
76:9b:84:8d:5a:a8:f2:f4:2c:c7:2a:c0:4f:b9:74:90:13:1e:
ee:5f:ef:6a:41:4a:13:b2:b2:b5:14:15:66:0b:c7:a5:e9:6a:
e4:ba:d3:a4:62:0b:13:36:f2:3c:45:0c:cb:52:c2:bb:c5:f8:
cf:9e:bb:40:50:81:4a:e1:3f:19:4e:6b:b3:5d:4b:a8:60:33:
03:a8:79:e2:a1:ac:bb:22:e2:55:57:aa:10:be:31:48:3f:8a:
18:ff:3a:7d:38:57:0d:25:3e:e7:6b:62:5e:3f:c3:ff:e9:4f:
a2:c4:f7:67:33:bb:4f:e1:ac:b6:56:e8:41:a8:f5:34:f5:c4:
62:50:40:d8:78:42:0a:e0:1f:1d:fc:97:2f:26:1e:27:df:9a:
d2:15:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:40 2026 by rpki-client