
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
File: kUEwRSpecDu47DyNiG5A8gWqYB4.mft (raw, json)
Hash identifier: SNaxuCYh8ve0yTGc4ZY89DC4Xtwi6/gznozQFrKQwOE=
Subject key identifier: 10:3C:2B:9C:77:37:16:2A:47:53:24:13:79:0A:DB:12:D5:8E:64:1D
Authority key identifier: 91:41:30:45:2A:5E:70:3B:B8:EC:3C:8D:88:6E:40:F2:05:AA:60:1E
Certificate issuer: /CN=A91274A4/serialNumber=914130452A5E703BB8EC3C8D886E40F205AA601E
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
Manifest number: 49
Signing time: Sat 26 Sep 2026 18:46:34 +0000
Manifest this update: Sat 26 Sep 2026 18:46:34 +0000
Manifest next update: Sat 03 Oct 2026 18:46:34 +0000
Files and hashes: 1: kUEwRSpecDu47DyNiG5A8gWqYB4.crl (hash: WQCU+r5P113zLcIiUirR/dBljrYaFRRuLUpApEvie9Q=)
2: AEBEA978526211F190265F7DBC833773.roa (hash: GPfKfNNIXjai1EnUV/N7eUbMHwWj9TZDA5mP+AllUjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.crl
rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4, serialNumber=914130452A5E703BB8EC3C8D886E40F205AA601E
Validity
Not Before: Sep 26 18:46:34 2026 GMT
Not After : Oct 3 18:46:34 2026 GMT
Subject: CN=6ab8130a-a655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:25:b3:09:19:2c:46:64:20:78:ad:83:2f:
20:52:bd:ae:23:d4:6f:dd:26:e9:85:f3:a8:7b:14:
8c:0c:05:e5:72:98:2d:3e:f8:bf:40:94:8e:41:25:
fe:99:42:55:30:57:89:a6:4f:f5:90:4b:c0:79:2a:
08:5a:e4:46:3f:7d:c6:1a:1c:af:c6:df:b7:8d:ca:
5c:91:f6:9e:5d:84:ff:18:20:71:6c:82:07:24:68:
98:d1:96:fb:fa:05:2c:41:82:0f:a4:a1:05:c5:16:
45:d3:d8:f8:64:2a:9e:35:3d:60:e6:52:f5:53:1e:
ca:8b:33:61:ee:dc:d6:d7:78:00:71:00:00:93:2c:
71:b0:90:f1:dd:a6:19:a0:9d:e6:61:86:09:c4:89:
54:ff:9f:ad:9a:f3:43:b6:d0:5e:84:11:a3:b3:3d:
20:74:b2:af:e4:51:d2:a0:d3:b9:a1:7d:13:b7:a8:
28:76:68:b3:f6:f9:34:b8:66:b8:c2:58:33:d3:86:
8c:ce:63:e9:17:83:7e:95:db:b4:08:c8:84:60:2a:
6f:fe:75:aa:ac:86:0a:6b:e9:8d:e7:33:11:ce:a2:
28:64:1a:f4:eb:80:d5:52:22:50:6b:7c:62:01:82:
23:67:f5:b8:b6:38:4d:0a:d7:60:d1:9f:b7:e8:45:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:2B:9C:77:37:16:2A:47:53:24:13:79:0A:DB:12:D5:8E:64:1D
X509v3 Authority Key Identifier:
keyid:91:41:30:45:2A:5E:70:3B:B8:EC:3C:8D:88:6E:40:F2:05:AA:60:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kUEwRSpecDu47DyNiG5A8gWqYB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/6FD2A9EE4E8E11F18A60D3D6B6833773/kUEwRSpecDu47DyNiG5A8gWqYB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:8d:7d:56:0e:6f:c4:f3:e7:c2:ef:16:a3:6a:91:64:73:16:
c7:a6:f1:01:31:2d:5f:ce:32:f4:0c:83:e9:54:b4:f3:17:52:
21:fd:36:80:05:0b:81:38:4c:e5:6d:f8:f0:d9:b9:5d:d0:82:
0f:b9:81:8f:c2:1b:1e:49:f8:57:07:39:81:9f:e8:15:2a:9a:
1a:8d:16:1d:fb:26:64:ee:15:3f:a1:bd:c4:05:1b:21:ff:db:
4b:cf:bb:45:e1:1d:8d:da:73:55:ff:de:84:27:ac:84:75:0e:
3d:99:16:37:b1:94:ed:78:68:cd:95:ad:ac:20:b0:bd:09:83:
05:84:c1:c1:ef:51:00:3c:a7:4d:53:90:24:32:47:2b:67:a4:
4e:24:fc:a4:0b:5f:6d:75:17:9e:55:92:8a:06:8e:d9:9f:1d:
de:8f:8b:69:b2:ae:31:6c:a1:4b:91:7b:01:3d:ab:4b:d4:11:
aa:ee:6b:b5:2e:63:03:77:a7:39:9e:b7:01:23:1f:55:35:a3:
26:4c:11:d5:a8:1c:90:d0:11:54:ea:b1:e0:c7:c3:64:6b:d0:
6d:ff:dc:54:e6:46:58:d4:cf:40:4a:8c:fe:f8:9a:e3:92:b1:
3e:3c:64:b5:b2:39:cb:ab:be:86:75:d5:9e:6a:7b:b4:7e:f9:
f6:88:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:11:08 2026 by rpki-client