
$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json)
Hash identifier: EuhU6QtMpA9A2BeD114PDCgFnifQevWCsO/znahLOCY=
Subject key identifier: F9:19:2A:18:C9:C5:54:A6:25:02:27:E7:62:D5:0C:1B:61:13:9C:1E
Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Certificate serial: 0915
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
Manifest number: 211B
Signing time: Fri 12 Jun 2026 16:28:34 +0000
Manifest this update: Fri 12 Jun 2026 16:28:34 +0000
Manifest next update: Fri 19 Jun 2026 16:28:34 +0000
Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: A4UJofhS799UJQv6vdlnsf1Cug9X1dPzLmGPU2tw47Q=)
2: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: sQmmHynRplLfSEUYnUX91utp9ekEe+hXIjAXfGLYEZ0=)
3: 172C2B96197711F0A993397AC4F9AE02.roa (hash: KlRLli/SZyA/blQSDVf22qf7tBm9EE3kAalEgJQxMlA=)
4: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: EKk887jvD91sa5mqsDwh0zo559XyowQgVll88eOizFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2325 (0x915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC
Validity
Not Before: Jun 12 16:28:34 2026 GMT
Not After : Jun 19 16:28:34 2026 GMT
Subject: CN=6a2c33b2-00de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:f7:d4:80:1d:0e:b7:9d:59:02:57:84:3d:
7f:25:fd:93:04:be:35:f0:16:cd:d7:7f:3b:01:13:
32:92:27:5f:f1:5e:c2:cd:f8:b3:51:bb:8f:48:5a:
92:d2:25:71:a4:76:58:44:5c:7d:90:2d:27:ca:d8:
34:eb:73:3c:08:36:85:f4:18:99:7e:f6:6d:35:d7:
74:14:e7:0b:32:48:07:06:ab:3d:7e:81:8d:20:32:
cc:fc:25:ec:fe:f4:07:71:e8:6f:ad:f9:23:75:a5:
ba:9b:22:90:bd:9a:3b:55:76:2e:09:9d:66:2a:46:
c6:3a:12:d9:87:86:b6:3d:ab:95:1f:54:4f:aa:e7:
2c:56:9b:4f:1e:ff:de:9b:45:da:c6:8e:a2:a9:72:
f6:d8:4d:5f:1b:04:68:ca:c6:75:5b:01:ba:c1:8a:
91:05:e6:11:ea:13:d6:0a:ad:c1:f2:0a:25:6c:82:
25:33:05:e1:8d:22:2f:94:69:eb:47:aa:c7:f8:1f:
8c:d8:75:3a:b5:a0:1c:ec:a0:ee:fc:dd:91:04:27:
0d:02:0c:1f:d2:2e:d0:74:26:0f:1e:45:72:c1:f4:
08:0a:cc:13:57:77:0c:9f:0c:fa:03:3d:cc:aa:b4:
2d:a4:86:22:6f:20:a6:c2:c7:e7:41:13:a2:7d:8e:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:2A:18:C9:C5:54:A6:25:02:27:E7:62:D5:0C:1B:61:13:9C:1E
X509v3 Authority Key Identifier:
keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:2c:cf:40:28:f3:fa:47:9f:35:ff:bf:9a:95:af:46:a1:85:
b1:15:b0:ee:62:4d:f9:d6:02:d9:af:67:e0:f0:cc:05:79:33:
f7:30:2f:54:9d:3b:b8:41:91:44:3d:19:37:43:c0:65:cf:d7:
d7:02:66:ea:8f:c6:9a:49:40:5f:06:52:ce:11:8f:3a:27:b4:
99:5e:db:35:ff:5b:7a:10:7b:6a:75:81:75:4a:1f:c5:39:e6:
54:63:92:4c:dd:f9:2b:2a:66:8e:84:f2:c9:9b:6d:70:f4:d3:
a8:21:c8:87:5f:a0:13:af:25:b9:0d:7a:f1:8c:bc:ca:28:2a:
dc:98:0f:f6:b2:03:4b:5a:16:e1:69:ae:9c:6d:e1:62:69:42:
b0:7a:58:74:ae:40:d3:74:bd:17:ff:9a:44:61:c7:0e:a7:18:
b2:5a:e1:06:9a:06:a9:56:52:5c:9b:2b:36:6c:18:8e:22:2d:
2e:e9:64:84:0a:ce:98:09:f7:85:ab:55:80:29:8c:68:29:8a:
cd:ff:8c:5c:ba:a7:41:0e:fa:cb:85:b4:1e:c7:b0:b4:5c:f9:
87:f9:fc:6a:50:54:ed:e4:00:d9:73:9c:cf:1d:96:78:10:ec:
38:09:80:58:f9:8b:cd:fe:e4:8d:a9:ee:d9:7b:09:f0:c1:67:
5c:29:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:19:42 2026 by rpki-client