
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft
File: uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft (raw, json)
Hash identifier: JNjgQ+JOX0/OaPurkIIijzuXqsnpJTU1GunVTTvhtT8=
Subject key identifier: DB:1B:AF:BE:7F:27:06:7B:83:73:4F:7A:84:5B:20:38:78:4C:41:85
Authority key identifier: BA:83:AE:8D:26:FF:18:31:42:A4:BD:D1:8F:2D:01:39:6E:5E:31:8D
Certificate issuer: /CN=A91599FE/serialNumber=BA83AE8D26FF183142A4BDD18F2D01396E5E318D
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uoOujSb_GDFCpL3Rjy0BOW5eMY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft
Manifest number: 09
Signing time: Thu 05 Nov 2026 10:12:29 +0000
Manifest this update: Thu 05 Nov 2026 10:12:29 +0000
Manifest next update: Thu 12 Nov 2026 10:12:29 +0000
Files and hashes: 1: uoOujSb_GDFCpL3Rjy0BOW5eMY0.crl (hash: 3SrhaT1jMsNXdm0MFqVXTgwOW/cX3+m/290Hi5msIvg=)
2: 579A1B32D1BF11F182CE941C3266CEF9.roa (hash: aQWHerthi52w7EjQVP24ULOEUPvPYO5ryBBg/faZas8=)
3: mmxH1SK3r7haA7m3MK4JwTZ47aU.asa (hash: D6E0E8XzKmZxxly5ZBVX5owd9h5AgbSRleOgJjFTixY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.crl
rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uoOujSb_GDFCpL3Rjy0BOW5eMY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 10:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91599FE, serialNumber=BA83AE8D26FF183142A4BDD18F2D01396E5E318D
Validity
Not Before: Nov 5 10:12:29 2026 GMT
Not After : Nov 12 10:12:29 2026 GMT
Subject: CN=6aec568d-50cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:3c:32:45:11:29:05:e8:5b:2e:58:7a:9c:
8f:4f:71:4b:34:bd:a9:44:8f:b9:1d:d3:16:d3:4b:
19:3c:77:71:72:7e:21:b3:3f:92:14:53:aa:23:51:
2f:23:02:f2:af:d9:6d:68:dd:f5:59:ee:60:40:27:
45:98:81:5f:be:dd:8d:b8:ba:81:3c:8d:4f:77:d6:
38:88:08:da:b5:7d:80:d1:af:6b:3a:fc:b7:29:89:
37:95:a0:29:f0:1a:43:a6:d9:94:ee:0f:0c:72:73:
c7:ec:26:3a:f1:d1:ab:8c:62:d9:16:cb:98:2c:bb:
9c:97:2a:a2:c1:57:fd:d6:e1:10:46:e2:98:cb:6b:
da:1a:d3:50:ad:e8:7a:6c:cb:e6:ba:20:56:d3:73:
69:8e:4f:79:cb:67:5a:d5:24:d4:d6:de:e9:a0:1b:
97:84:2d:19:24:27:97:67:9e:a3:4b:96:fd:db:ba:
49:56:d7:93:01:23:08:4d:29:7d:4b:29:eb:5c:3c:
0b:08:27:c2:e0:0f:bd:9c:26:b9:98:70:4d:d4:1c:
e5:fb:bb:e4:be:ac:23:38:49:bd:dc:29:76:01:2f:
6c:b7:4c:23:e7:55:39:61:f4:e0:b0:f9:82:9b:49:
67:71:14:2b:1e:18:ca:29:9a:91:8b:70:3f:42:82:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:AF:BE:7F:27:06:7B:83:73:4F:7A:84:5B:20:38:78:4C:41:85
X509v3 Authority Key Identifier:
keyid:BA:83:AE:8D:26:FF:18:31:42:A4:BD:D1:8F:2D:01:39:6E:5E:31:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uoOujSb_GDFCpL3Rjy0BOW5eMY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599FE/68A2D684D1BB11F1993A588A2F66CEF9/uoOujSb_GDFCpL3Rjy0BOW5eMY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:c9:1d:03:d8:77:e9:69:64:c4:f0:dd:25:14:37:06:dd:2d:
4a:4d:72:f6:3a:fe:59:f3:3a:2d:bf:79:a4:5c:0a:3f:ee:63:
3d:bb:9e:e6:5c:63:e7:28:65:fa:6e:71:93:0c:56:60:8d:b8:
da:02:4f:19:97:59:77:17:13:23:4c:d2:2b:21:6a:30:0e:ef:
23:f9:23:5c:aa:ac:38:86:e5:56:51:0e:98:6e:34:49:3e:fc:
86:7e:4e:af:37:f8:3a:06:96:4f:85:21:25:c6:bc:93:86:25:
b5:d7:48:e6:21:c9:41:1a:ce:52:83:9e:55:a0:d9:30:7b:40:
eb:67:bf:7d:db:e7:a2:50:fb:2e:d6:b9:67:4b:87:e9:5c:a3:
09:4d:c1:5f:4b:2d:70:fd:fe:bb:00:76:d9:4e:1d:fa:05:4c:
73:57:0e:82:af:ac:30:78:53:05:48:04:6a:40:48:5b:97:0a:
45:47:c4:72:f4:41:c4:ee:b2:9a:aa:5c:51:ad:28:fe:5a:01:
24:5b:fe:7c:58:7b:21:2a:82:0c:92:7f:e8:c1:82:b2:31:a3:
de:b0:45:6f:3d:c1:43:89:72:f9:cc:47:6e:9a:65:bf:e4:41:
f4:7d:45:82:53:cc:59:c2:fe:64:2f:e3:bf:c6:e5:1f:df:e7:
0e:b0:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:33:04 2026 by rpki-client