
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
File: uHDS4OMcipEO37p2W7fPBMPBDL4.mft (raw, json)
Hash identifier: 1AVVsbHiUSektlycxKTogQQeDVlxD0g/Mur7S7JoFFQ=
Subject key identifier: E2:71:F4:35:7D:0F:E3:89:46:6E:0E:8F:17:05:EC:78:E0:C3:20:2B
Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
Certificate issuer: /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
Manifest number: F0
Signing time: Mon 21 Sep 2026 06:24:29 +0000
Manifest this update: Mon 21 Sep 2026 06:24:28 +0000
Manifest next update: Mon 28 Sep 2026 06:24:28 +0000
Files and hashes: 1: uHDS4OMcipEO37p2W7fPBMPBDL4.crl (hash: ZlRtboqbHbcomQTJAUUJHGRGzZy+6t7uTNfjyevmtQ4=)
2: 48B17B5CB4CD11F094AF5C23C4F9AE02.roa (hash: OjSFLxpZGyiGtdNh0yMA+ia6uojKgSD9CONMkXavII4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Validity
Not Before: Sep 21 06:24:28 2026 GMT
Not After : Sep 28 06:24:28 2026 GMT
Subject: CN=6ab0cd9c-5171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:39:4c:7e:1b:9a:b3:fb:52:40:79:1c:34:
a1:05:65:21:27:d0:e5:e5:47:85:9b:e3:71:97:2e:
8e:d3:b6:ea:b8:e2:bc:ef:d9:30:87:20:08:40:dd:
81:26:13:a2:c9:25:21:2f:a7:8a:70:cd:35:5b:e7:
c4:0e:29:0d:71:c1:e3:38:c1:b5:43:7e:0f:c7:fe:
f2:d0:52:f9:f9:fa:9c:31:25:f8:00:17:34:ea:bd:
bd:5d:41:47:04:6b:64:24:f9:b6:2d:48:78:c3:fe:
0d:34:d3:e1:71:3c:1e:2b:0c:f4:78:9d:a4:59:94:
57:2c:33:00:1a:48:ee:7c:45:c3:49:32:81:30:27:
4f:48:ff:54:49:84:53:ca:d7:1b:2a:9e:dc:d5:d6:
d8:84:80:af:4d:bd:47:56:6e:65:bd:f6:50:e2:47:
2c:b8:59:e5:26:ef:3d:dd:8e:78:21:01:f1:86:fb:
c6:b9:8f:ff:59:60:dc:5d:4b:05:1b:09:83:b1:81:
c0:9d:a2:89:8c:f1:96:b0:bf:8e:c3:67:23:00:5f:
13:4d:ce:95:c3:09:db:0f:68:64:4c:24:f1:59:a8:
cd:cc:61:05:8b:1c:0a:b6:42:56:ed:f3:bb:06:f0:
26:f1:24:73:18:bd:08:3d:7d:bd:66:c9:22:ff:06:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:F4:35:7D:0F:E3:89:46:6E:0E:8F:17:05:EC:78:E0:C3:20:2B
X509v3 Authority Key Identifier:
keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:61:46:e9:e8:9f:71:e2:d2:ce:29:2c:0b:20:1f:c5:f1:dd:
60:d8:48:26:5b:64:80:90:8a:9f:6b:c7:e3:5a:a4:3b:3a:1e:
8f:5e:8f:07:dc:8a:be:24:fc:13:c0:ab:77:dd:02:ab:4d:af:
7d:6d:e8:22:5f:da:ba:85:9b:9d:45:46:aa:5c:9f:6b:4f:35:
ea:68:63:81:ea:05:41:f1:c0:10:24:92:36:55:a1:de:10:48:
c0:b2:9a:9f:b8:74:1e:44:46:d3:28:73:db:13:9e:15:56:ef:
12:b0:e5:e7:de:32:5f:de:8d:63:57:4c:d7:4d:64:42:11:84:
1d:33:63:66:88:8f:1a:7a:f5:59:f1:d5:bb:7a:67:dd:07:55:
f1:3b:f7:15:4e:6b:d7:11:79:7c:96:56:69:58:82:f7:15:9d:
a2:70:fc:9d:0e:7b:82:bb:40:d5:c0:26:15:c1:8f:d3:b3:c4:
43:31:db:08:37:9f:c7:d6:83:db:12:c6:a9:8b:88:72:84:13:
4f:8d:82:2e:e2:6d:5d:31:f6:17:22:e4:9d:22:a3:6a:24:7d:
72:21:ed:bc:1c:0c:be:31:54:33:68:6e:80:2a:d7:0b:0f:53:
a0:33:07:aa:3f:0e:5a:1c:d9:0c:69:ec:04:ae:71:3f:cf:c3:
da:0a:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:04:24 2026 by rpki-client